Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/P4iBHoA0DMbV7pvIOluyt3bYQTQ.roa
File: P4iBHoA0DMbV7pvIOluyt3bYQTQ.roa (raw, json)
Hash identifier: MCcflyRAEpib5nvqvmB1bCQxjs0wPciYVvtB8eXVjSo=
Subject key identifier: 3F:88:81:1E:80:34:0C:C6:D5:EE:9B:C8:3A:5B:B2:B7:76:D8:41:34
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019FEDCBE8832EDB261C4BC4F32AFE410CC3
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/P4iBHoA0DMbV7pvIOluyt3bYQTQ.roa
Signing time: Mon 10 Aug 2026 22:29:51 +0000
ROA not before: Mon 10 Aug 2026 22:29:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 103.151.103.0/24 maxlen: 24
103.152.17.0/24 maxlen: 24
103.155.127.0/24 maxlen: 24
138.249.104.0/24 maxlen: 24
138.249.105.0/24 maxlen: 24
138.249.106.0/24 maxlen: 24
138.249.107.0/24 maxlen: 24
138.249.108.0/24 maxlen: 24
138.249.109.0/24 maxlen: 24
138.249.110.0/24 maxlen: 24
138.249.112.0/24 maxlen: 24
138.249.131.0/24 maxlen: 24
138.249.132.0/24 maxlen: 24
138.249.139.0/24 maxlen: 24
138.249.151.0/24 maxlen: 24
138.249.153.0/24 maxlen: 24
138.249.154.0/24 maxlen: 24
138.249.155.0/24 maxlen: 24
138.249.156.0/24 maxlen: 24
138.249.157.0/24 maxlen: 24
138.249.158.0/24 maxlen: 24
138.249.165.0/24 maxlen: 24
138.249.167.0/24 maxlen: 24
138.249.168.0/24 maxlen: 24
138.249.169.0/24 maxlen: 24
138.249.170.0/24 maxlen: 24
138.249.184.0/24 maxlen: 24
138.249.185.0/24 maxlen: 24
138.249.186.0/24 maxlen: 24
138.249.188.0/24 maxlen: 24
138.249.189.0/24 maxlen: 24
138.249.190.0/24 maxlen: 24
138.249.191.0/24 maxlen: 24
138.249.204.0/24 maxlen: 24
138.249.205.0/24 maxlen: 24
138.249.206.0/24 maxlen: 24
138.249.207.0/24 maxlen: 24
138.249.208.0/24 maxlen: 24
138.249.209.0/24 maxlen: 24
138.249.211.0/24 maxlen: 24
138.249.212.0/24 maxlen: 24
138.249.213.0/24 maxlen: 24
138.249.214.0/24 maxlen: 24
138.249.215.0/24 maxlen: 24
138.249.218.0/24 maxlen: 24
138.249.220.0/24 maxlen: 24
138.249.221.0/24 maxlen: 24
138.249.222.0/24 maxlen: 24
138.249.223.0/24 maxlen: 24
138.249.226.0/24 maxlen: 24
138.249.231.0/24 maxlen: 24
138.249.232.0/24 maxlen: 24
138.249.233.0/24 maxlen: 24
138.249.234.0/24 maxlen: 24
138.249.235.0/24 maxlen: 24
138.249.236.0/24 maxlen: 24
138.249.237.0/24 maxlen: 24
138.249.238.0/24 maxlen: 24
138.249.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ed:cb:e8:83:2e:db:26:1c:4b:c4:f3:2a:fe:41:0c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Aug 10 22:29:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f88811e80340cc6d5ee9bc83a5bb2b776d84134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:62:8e:41:b9:3a:fb:d4:9a:3b:ee:23:61:
4f:0b:47:f9:4b:49:a4:88:5f:d3:f8:8d:4f:3a:65:
84:96:b3:87:00:71:7a:56:e9:f1:1b:a6:4e:f0:6f:
61:a1:fd:58:50:16:d6:35:5c:6b:83:86:7f:81:54:
fe:e3:63:20:d2:25:ee:a1:0d:cb:a7:ed:65:7e:3a:
e7:21:de:22:a2:9e:23:23:ca:3b:0e:ed:d3:41:9f:
fa:27:50:69:f8:e8:00:8d:3e:44:99:06:ce:dc:9d:
0f:4e:e7:a0:a6:9f:b6:03:16:bd:68:fc:d3:b8:2a:
67:21:97:6a:44:cd:95:9d:4a:b0:a0:5e:92:ad:68:
34:fa:74:58:ce:00:02:be:e1:4a:93:3f:fe:65:0c:
f3:9e:4a:fd:13:c8:31:c5:1a:25:d6:43:d3:b7:4a:
da:87:1b:10:b8:bd:0b:c8:e5:52:ad:fc:d8:a4:db:
d9:de:ce:e1:50:f6:6b:db:c0:8e:8b:00:c1:bf:e4:
67:4a:7c:e2:3c:14:dd:e0:a2:f4:bf:7f:d7:0e:2a:
a5:14:f8:fb:05:21:55:ed:0b:44:24:97:3d:5e:ff:
11:cb:6d:e2:09:e6:32:2d:54:d3:69:1a:2e:28:9c:
b8:50:6e:91:3e:a0:62:b3:ba:78:80:56:a3:10:67:
8f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:88:81:1E:80:34:0C:C6:D5:EE:9B:C8:3A:5B:B2:B7:76:D8:41:34
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/P4iBHoA0DMbV7pvIOluyt3bYQTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.151.103.0/24
103.152.17.0/24
103.155.127.0/24
138.249.104.0-138.249.110.255
138.249.112.0/24
138.249.131.0-138.249.132.255
138.249.139.0/24
138.249.151.0/24
138.249.153.0-138.249.158.255
138.249.165.0/24
138.249.167.0-138.249.170.255
138.249.184.0-138.249.186.255
138.249.188.0/22
138.249.204.0-138.249.209.255
138.249.211.0-138.249.215.255
138.249.218.0/24
138.249.220.0/22
138.249.226.0/24
138.249.231.0-138.249.239.255
Signature Algorithm: sha256WithRSAEncryption
29:d7:18:8f:a1:c0:1c:05:3b:05:0f:cc:ad:16:b7:89:f2:15:
bd:0c:75:87:d4:96:e7:f2:1f:ad:4a:59:20:c4:0e:70:96:32:
24:92:2f:32:17:f0:16:b3:a4:84:2e:e1:cd:9e:f6:84:5e:ac:
df:94:31:b4:3c:3b:9a:99:e8:52:f8:a0:31:56:79:d8:4d:53:
1f:5c:db:d9:49:2a:d4:2e:10:d2:a8:dd:0c:c2:6f:dd:32:a5:
72:51:52:2b:c3:64:96:9f:16:ba:17:1e:b1:a2:52:cd:77:cd:
c4:16:35:d3:46:4c:d4:81:48:df:66:fb:87:23:58:cf:0d:da:
26:74:8e:f8:73:86:40:ec:e5:06:8f:9d:d4:ac:f4:17:3f:4c:
33:b2:f9:0d:f7:13:3d:98:6b:b4:e1:77:ab:2e:7f:3c:ce:27:
cb:f4:d6:d1:65:0c:01:21:d4:6f:32:2a:a9:52:2d:05:07:9e:
e2:32:b8:b6:5c:a4:70:d5:fc:18:bb:f9:8d:4f:61:60:d1:51:
f3:3e:95:e6:88:e8:ba:00:9f:8e:a7:a1:90:55:f9:84:1b:c7:
c2:0a:9a:06:a9:f2:c5:02:80:9d:ae:2f:3d:19:7c:01:8e:0e:
03:63:c9:28:a7:a8:94:a5:e0:37:02:ec:c9:c3:6a:8c:90:06:
b5:5b:7d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 14:09:48 2026 by rpki-client