Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/2u17C709S7Y5w-m6-YYv-vhXmUI.roa
File: 2u17C709S7Y5w-m6-YYv-vhXmUI.roa (raw, json)
Hash identifier: 9wcYIAnvHzNv3l4Jwl0uMnowYji6Dg57ushf/zN2oFc=
Subject key identifier: DA:ED:7B:0B:BD:3D:4B:B6:39:C3:E9:BA:F9:86:2F:FA:F8:57:99:42
Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial: 019FF508042501ACA3E720DDE11FB461C297
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/2u17C709S7Y5w-m6-YYv-vhXmUI.roa
Signing time: Wed 12 Aug 2026 08:12:51 +0000
ROA not before: Wed 12 Aug 2026 08:12:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58026
IP address blocks: 103.124.182.0/23 maxlen: 23
103.250.174.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:08:04:25:01:ac:a3:e7:20:dd:e1:1f:b4:61:c2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Validity
Not Before: Aug 12 08:12:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=daed7b0bbd3d4bb639c3e9baf9862ffaf8579942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:8c:b3:6e:7d:45:07:65:b2:f0:dc:ca:eb:
12:40:2a:21:d1:5c:47:6e:c8:74:c3:f7:67:84:c7:
93:06:6b:06:64:3b:22:e9:24:d1:d9:80:38:ee:a5:
f1:a9:9c:a5:02:4a:86:68:9c:77:9f:d2:ee:33:1e:
a7:3b:98:4d:cc:70:bb:18:e1:b8:d9:02:f9:bc:a5:
68:64:36:07:71:61:0e:87:db:ac:d3:cf:c3:bf:37:
6a:2b:e7:6a:24:13:16:5f:e0:8e:4a:18:49:d3:ac:
c8:c2:78:12:5a:cf:fc:f0:8c:66:78:47:36:01:52:
a2:11:d8:5d:88:5e:57:a3:29:0b:51:9e:aa:6a:d5:
39:f1:56:0c:fb:f9:c8:dc:0a:04:d4:f2:a8:2d:01:
25:95:50:65:59:90:52:93:9a:8c:30:c5:2b:f9:5a:
c8:52:22:3a:48:da:33:e3:e3:f6:f3:4c:3b:84:ec:
7c:8d:59:b5:ab:fc:41:92:09:fc:95:9c:c7:97:e4:
b0:8f:ae:75:7e:93:9c:13:16:4f:a2:21:5a:69:d6:
9a:40:aa:a7:07:e9:39:dc:59:74:1e:5d:2c:6d:98:
5d:ae:ca:70:d9:ec:03:59:30:27:3e:77:44:9d:df:
e8:66:3f:38:37:4e:f3:8d:ab:5b:3d:bb:86:de:4e:
33:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:ED:7B:0B:BD:3D:4B:B6:39:C3:E9:BA:F9:86:2F:FA:F8:57:99:42
X509v3 Authority Key Identifier:
keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/2u17C709S7Y5w-m6-YYv-vhXmUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.124.182.0/23
103.250.174.0/23
Signature Algorithm: sha256WithRSAEncryption
06:1c:c7:fa:79:a7:07:7e:f9:ea:fe:7d:db:8c:7f:78:e7:6c:
37:42:f7:95:3c:e8:bf:fd:fe:1a:4d:21:f0:a2:b6:69:ad:75:
ff:72:14:38:61:c5:c6:4c:cf:0d:c8:75:84:b0:52:ef:44:64:
8d:ec:5b:6b:36:84:af:65:3c:f4:11:6f:5c:ac:f9:ee:ad:72:
43:51:72:2f:38:e5:ca:cd:00:72:77:b1:2e:b6:a8:a8:e4:f0:
df:7e:85:7f:bc:3e:dc:27:1a:e8:a2:ea:95:d0:ec:00:95:8a:
dc:ed:c1:b1:3d:6d:bd:f4:df:04:dc:86:58:91:5e:b3:1e:03:
44:12:36:3a:ee:d6:01:a0:a6:17:5e:ac:e6:db:6f:ba:28:4b:
b0:50:85:c0:73:72:1c:18:83:df:9a:7a:34:6d:e4:4c:d9:7c:
73:d6:37:f3:9d:fb:1e:fa:72:f1:51:c8:6f:3f:7e:45:31:ac:
5d:b7:bc:3c:f8:a6:d5:ce:03:6b:f3:6c:1b:ca:6d:fb:54:f9:
bb:69:80:7e:f4:21:99:13:c2:23:30:7f:80:42:bb:3d:ca:1f:
86:eb:90:93:31:f8:2c:5d:02:2a:99:b1:91:e9:44:74:2d:08:
44:4d:94:1a:b8:db:37:38:a5:a4:c1:bc:f9:0a:69:2c:c1:26:
51:37:79:aa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/1CAQlAayj5yDd4R+0YcKXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MDRjYzBlMDM4ZWIwZTY5N2VjNmU3YWU0OWQwMjg2MTQ2
ZTBjMWEwHhcNMjYwODEyMDgxMjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWVkN2IwYmJkM2Q0YmI2MzljM2U5YmFmOTg2MmZmYWY4NTc5OTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7eMs259RQdlsvDcyusSQCoh0VxH
bsh0w/dnhMeTBmsGZDsi6STR2YA47qXxqZylAkqGaJx3n9LuMx6nO5hNzHC7GOG4
2QL5vKVoZDYHcWEOh9us08/DvzdqK+dqJBMWX+COShhJ06zIwngSWs/88IxmeEc2
AVKiEdhdiF5XoykLUZ6qatU58VYM+/nI3AoE1PKoLQEllVBlWZBSk5qMMMUr+VrI
UiI6SNoz4+P280w7hOx8jVm1q/xBkgn8lZzHl+Swj651fpOcExZPoiFaadaaQKqn
B+k53Fl0Hl0sbZhdrspw2ewDWTAnPndEnd/oZj84N07zjatbPbuG3k4zMwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNrtewu9PUu2OcPpuvmGL/r4V5lCMB8GA1UdIwQY
MBaAFLQEzA4DjrDml+xueuSdAoYUbgwaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEFUTURnT09zT2FYN0c1NjVKMENoaFJ1REJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hYmUxNmItOTJjYy00OGUzLWI1Yjkt
ODZhMmYwNjdiNGU4LzEvMnUxN0M3MDlTN1k1dy1tNi1ZWXYtdmhYbVVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9hYmUxNmItOTJjYy00OGUzLWI1YjktODZhMmYwNjdiNGU4
LzEvdEFUTURnT09zT2FYN0c1NjVKMENoaFJ1REJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBZ3y2AwQB
Z/quMA0GCSqGSIb3DQEBCwUAA4IBAQAGHMf6eacHfvnq/n3bjH9452w3QveVPOi/
/f4aTSHworZprXX/chQ4YcXGTM8NyHWEsFLvRGSN7FtrNoSvZTz0EW9crPnurXJD
UXIvOOXKzQByd7Eutqio5PDffoV/vD7cJxroouqV0OwAlYrc7cGxPW299N8E3IZY
kV6zHgNEEjY67tYBoKYXXqzm22+6KEuwUIXAc3IcGIPfmno0beRM2Xxz1jfznfse
+nLxUchvP35FMaxdt7w8+KbVzgNr82wbym37VPm7aYB+9CGZE8IjMH+AQrs9yh+G
65CTMfgsXQIqmbGR6UR0LQhETZQauNs3OKWkwbz5CmkswSZRN3mq
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:26:32 2026 by rpki-client