Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/onTQ6z9CgNf9joxlSOniSA0mIiU.roa
File: onTQ6z9CgNf9joxlSOniSA0mIiU.roa (raw, json)
Hash identifier: rc1PukjDI8Q076newVi7INRfF2e1WyskRJPVql8YcXs=
Subject key identifier: A2:74:D0:EB:3F:42:80:D7:FD:8E:8C:65:48:E9:E2:48:0D:26:22:25
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A0CF731FAB6B72146E7531D59CEFBA77EC
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/onTQ6z9CgNf9joxlSOniSA0mIiU.roa
Signing time: Wed 23 Sep 2026 18:07:03 +0000
ROA not before: Wed 23 Sep 2026 18:07:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 103.151.103.0/24 maxlen: 24
103.152.17.0/24 maxlen: 24
103.155.127.0/24 maxlen: 24
138.249.104.0/24 maxlen: 24
138.249.105.0/24 maxlen: 24
138.249.106.0/24 maxlen: 24
138.249.109.0/24 maxlen: 24
138.249.110.0/24 maxlen: 24
138.249.112.0/24 maxlen: 24
138.249.131.0/24 maxlen: 24
138.249.132.0/24 maxlen: 24
138.249.139.0/24 maxlen: 24
138.249.151.0/24 maxlen: 24
138.249.153.0/24 maxlen: 24
138.249.154.0/24 maxlen: 24
138.249.155.0/24 maxlen: 24
138.249.156.0/24 maxlen: 24
138.249.158.0/24 maxlen: 24
138.249.165.0/24 maxlen: 24
138.249.167.0/24 maxlen: 24
138.249.169.0/24 maxlen: 24
138.249.170.0/24 maxlen: 24
138.249.184.0/24 maxlen: 24
138.249.186.0/24 maxlen: 24
138.249.188.0/24 maxlen: 24
138.249.189.0/24 maxlen: 24
138.249.190.0/24 maxlen: 24
138.249.191.0/24 maxlen: 24
138.249.204.0/24 maxlen: 24
138.249.206.0/24 maxlen: 24
138.249.208.0/24 maxlen: 24
138.249.209.0/24 maxlen: 24
138.249.211.0/24 maxlen: 24
138.249.212.0/24 maxlen: 24
138.249.213.0/24 maxlen: 24
138.249.215.0/24 maxlen: 24
138.249.218.0/24 maxlen: 24
138.249.220.0/24 maxlen: 24
138.249.222.0/24 maxlen: 24
138.249.223.0/24 maxlen: 24
138.249.226.0/24 maxlen: 24
138.249.231.0/24 maxlen: 24
138.249.233.0/24 maxlen: 24
138.249.234.0/24 maxlen: 24
138.249.235.0/24 maxlen: 24
138.249.236.0/24 maxlen: 24
138.249.237.0/24 maxlen: 24
138.249.238.0/24 maxlen: 24
138.249.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:73:1f:ab:6b:72:14:6e:75:31:d5:9c:ef:ba:77:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Sep 23 18:07:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a274d0eb3f4280d7fd8e8c6548e9e2480d262225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:73:02:d5:d8:4c:c9:e0:84:dc:82:25:94:
23:52:cc:06:98:46:33:a4:94:ef:f7:dd:85:66:06:
ee:59:50:f7:7c:19:d1:01:1d:79:a1:1e:30:3d:9a:
52:fd:44:78:5f:50:c3:d1:d5:dc:6c:62:10:bb:52:
5b:7a:1c:68:1a:3a:b5:9e:9e:b2:62:71:25:f1:22:
c6:2c:10:69:bc:41:77:59:e6:b2:64:d1:62:dd:de:
e3:45:3e:c0:c2:4c:d5:9c:bf:ee:4e:d6:6d:c5:9c:
ac:e6:73:2d:8b:34:3e:9e:cb:68:4f:d4:89:aa:9a:
78:ab:62:c5:3f:0c:56:62:4d:48:d5:e2:25:2c:2c:
e1:0d:51:b9:e9:3a:63:77:8d:67:6c:ae:e6:66:40:
af:03:8b:54:2d:a2:61:ce:78:d6:eb:3d:dd:48:bf:
be:e1:0e:6a:a8:4c:7c:89:2c:af:b5:0c:35:e2:c3:
52:d1:0e:d2:19:eb:fc:81:43:15:96:23:d5:c7:91:
c8:e2:51:27:c3:07:fa:4c:91:87:db:a1:f5:43:b2:
9c:25:93:db:2e:cd:56:e4:4f:51:f5:7d:88:96:c5:
25:2d:05:5b:c9:b0:a9:b1:a1:ca:4d:d4:81:3a:59:
da:66:c4:9a:81:be:69:bf:73:93:de:2c:81:fa:98:
76:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:74:D0:EB:3F:42:80:D7:FD:8E:8C:65:48:E9:E2:48:0D:26:22:25
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/onTQ6z9CgNf9joxlSOniSA0mIiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.151.103.0/24
103.152.17.0/24
103.155.127.0/24
138.249.104.0-138.249.106.255
138.249.109.0-138.249.110.255
138.249.112.0/24
138.249.131.0-138.249.132.255
138.249.139.0/24
138.249.151.0/24
138.249.153.0-138.249.156.255
138.249.158.0/24
138.249.165.0/24
138.249.167.0/24
138.249.169.0-138.249.170.255
138.249.184.0/24
138.249.186.0/24
138.249.188.0/22
138.249.204.0/24
138.249.206.0/24
138.249.208.0/23
138.249.211.0-138.249.213.255
138.249.215.0/24
138.249.218.0/24
138.249.220.0/24
138.249.222.0/23
138.249.226.0/24
138.249.231.0/24
138.249.233.0-138.249.239.255
Signature Algorithm: sha256WithRSAEncryption
33:88:e9:6b:a4:95:f7:bb:43:3b:d3:5c:57:39:77:c4:55:a2:
5f:35:04:4f:ab:42:8e:5f:c6:3a:0c:9f:8e:54:59:13:51:22:
61:d8:27:08:9a:31:5e:02:91:cb:34:c7:3f:61:79:db:f5:e1:
24:be:ed:a4:13:12:3c:79:c1:c2:91:d8:5c:c5:d6:1c:6d:a8:
ac:54:f1:96:48:0d:5c:98:48:9d:8c:f3:a4:68:89:c9:21:ca:
79:64:98:67:1a:3f:61:1b:32:3e:3b:a5:8b:1a:20:a8:fc:dd:
96:55:eb:e4:01:5b:48:2d:57:03:cb:91:81:df:7b:e6:4e:e1:
69:75:c7:43:26:d8:b0:ef:02:92:99:91:9a:32:e4:19:2c:98:
a4:cd:5a:0d:e9:92:ea:14:e5:eb:73:98:7d:0b:52:29:44:94:
d6:ee:e0:2a:22:fb:33:f9:7d:50:95:0a:fa:47:d6:68:92:e3:
26:83:1c:85:cb:b8:60:41:8a:53:ba:b3:3d:36:1a:a9:4b:e8:
95:4e:7e:c4:e1:65:77:aa:c5:c2:75:f6:56:1a:30:53:96:10:
6f:3c:b6:02:9d:f9:27:56:b3:22:62:fc:9d:4a:b8:db:e2:92:
f2:75:6a:9d:79:a0:bf:bb:a5:24:a0:e5:34:45:7e:2d:0c:42:
b2:7d:f9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:10:18 2026 by rpki-client