Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/7Wovjg0WK0CO0eA95rPBJeMNlzA.roa
File: 7Wovjg0WK0CO0eA95rPBJeMNlzA.roa (raw, json)
Hash identifier: L5VcjSfuJbBmd44K80gnuYivqpKsaPKZEEuWkNqqRyw=
Subject key identifier: ED:6A:2F:8E:0D:16:2B:40:8E:D1:E0:3D:E6:B3:C1:25:E3:0D:97:30
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019FF3476948052DA6A721A2F45272EDDADB
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/7Wovjg0WK0CO0eA95rPBJeMNlzA.roa
Signing time: Wed 12 Aug 2026 00:02:51 +0000
ROA not before: Wed 12 Aug 2026 00:02:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203156
IP address blocks: 103.86.36.0/24 maxlen: 24
222.167.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f3:47:69:48:05:2d:a6:a7:21:a2:f4:52:72:ed:da:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Aug 12 00:02:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed6a2f8e0d162b408ed1e03de6b3c125e30d9730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:ad:71:77:18:c1:91:e6:17:b5:52:bb:e2:
0e:89:8e:68:07:27:40:b8:8a:c9:02:08:fe:40:de:
86:40:16:52:5c:eb:81:47:63:50:d8:56:1f:d5:67:
8d:c3:54:f3:42:cd:62:fb:4b:2f:23:c9:1f:b5:fa:
7e:45:bd:44:ec:24:01:8d:55:87:a4:82:3b:95:55:
31:b6:e3:ee:47:33:61:e1:52:56:44:a5:c6:5e:b1:
d7:1f:e9:4a:7a:33:6e:b6:7a:84:0d:90:6c:f9:1c:
83:fa:72:86:aa:c7:f1:69:b6:44:b1:27:a5:9c:80:
97:85:dd:a6:50:39:8f:8a:1e:d7:5d:02:42:e9:95:
af:66:4f:f2:29:b9:27:c2:b0:c1:9b:1d:f0:0b:39:
be:fd:fc:89:02:b5:3e:22:26:8b:a3:8d:b7:fb:0a:
99:6f:62:28:ba:c7:fd:6c:8a:e8:aa:74:e9:e2:9b:
64:19:0b:05:63:03:4c:46:22:ed:6d:99:87:7c:e9:
91:4b:f1:e6:9b:b2:25:01:e2:63:2f:ee:8f:43:e1:
85:e9:6e:44:90:f9:55:56:75:43:d6:e0:05:2e:da:
07:9c:ff:ed:98:9c:81:81:bd:d6:dc:02:b0:1d:79:
28:b7:3a:9c:b3:6e:0d:7f:95:57:de:cc:69:9e:c7:
f7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6A:2F:8E:0D:16:2B:40:8E:D1:E0:3D:E6:B3:C1:25:E3:0D:97:30
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/7Wovjg0WK0CO0eA95rPBJeMNlzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.86.36.0/24
222.167.227.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:89:d0:49:ab:59:70:45:15:47:dd:26:cb:d3:d3:26:f6:de:
04:3d:98:e5:8f:ca:e1:d2:1a:27:c9:cc:2e:01:1b:c1:41:72:
bb:f0:ae:05:48:c7:50:3e:46:c6:21:e8:17:85:70:82:c4:65:
50:82:2d:ff:d6:28:5c:5c:27:3f:2f:a6:8d:20:7c:2f:cf:07:
19:c9:c6:fa:36:01:63:c0:5d:9d:ed:da:9a:df:ca:50:44:da:
96:51:fb:ad:31:18:76:72:7d:02:e5:30:1e:0a:2d:a7:30:a8:
3d:91:ea:21:dc:d4:1f:55:b9:9e:ab:7f:07:4c:16:40:cd:ef:
58:15:fd:4f:10:a4:e5:b4:82:1e:15:4e:44:ea:30:19:7a:ea:
4b:49:ca:b6:73:31:a7:17:60:3e:54:5e:d2:05:3f:81:f8:50:
e4:7f:1e:b0:fe:be:1b:ef:97:f2:16:f9:88:a4:54:75:74:26:
ab:b4:99:ca:b4:76:f0:5b:92:e8:ea:63:f9:2e:11:db:ee:9c:
ea:5f:25:50:74:2d:79:6c:6c:5b:0c:01:5f:5e:ab:12:3b:24:
f0:70:5a:2f:42:63:eb:df:13:1c:b0:bc:57:15:8c:d4:d3:fd:
25:02:57:33:cf:0c:fa:87:78:0c:09:8b:33:ab:00:76:cb:11:
b8:bb:35:26
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/zR2lIBS2mpyGi9FJy7drbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjYwODEyMDAwMjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDZhMmY4ZTBkMTYyYjQwOGVkMWUwM2RlNmIzYzEyNWUzMGQ5NzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttitcXcYwZHmF7VSu+IOiY5oBydA
uIrJAgj+QN6GQBZSXOuBR2NQ2FYf1WeNw1TzQs1i+0svI8kftfp+Rb1E7CQBjVWH
pII7lVUxtuPuRzNh4VJWRKXGXrHXH+lKejNutnqEDZBs+RyD+nKGqsfxabZEsSel
nICXhd2mUDmPih7XXQJC6ZWvZk/yKbknwrDBmx3wCzm+/fyJArU+IiaLo423+wqZ
b2Iousf9bIroqnTp4ptkGQsFYwNMRiLtbZmHfOmRS/Hmm7IlAeJjL+6PQ+GF6W5E
kPlVVnVD1uAFLtoHnP/tmJyBgb3W3AKwHXkotzqcs24Nf5VX3sxpnsf3WQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFO1qL44NFitAjtHgPeazwSXjDZcwMB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEvN1dvdmpnMFdLMENPMGVBOTVyUEJKZU1ObHpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAZ1YkAwQA
3qfjMA0GCSqGSIb3DQEBCwUAA4IBAQAtidBJq1lwRRVH3SbL09Mm9t4EPZjlj8rh
0honycwuARvBQXK78K4FSMdQPkbGIegXhXCCxGVQgi3/1ihcXCc/L6aNIHwvzwcZ
ycb6NgFjwF2d7dqa38pQRNqWUfutMRh2cn0C5TAeCi2nMKg9keoh3NQfVbmeq38H
TBZAze9YFf1PEKTltIIeFU5E6jAZeupLScq2czGnF2A+VF7SBT+B+FDkfx6w/r4b
75fyFvmIpFR1dCartJnKtHbwW5Lo6mP5LhHb7pzqXyVQdC15bGxbDAFfXqsSOyTw
cFovQmPr3xMcsLxXFYzU0/0lAlczzwz6h3gMCYszqwB2yxG4uzUm
-----END CERTIFICATE-----
Generated at Thu Aug 13 01:19:25 2026 by rpki-client