Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/KAju6zyAca3P5FIRBEeGylVEdlU.roa
File: KAju6zyAca3P5FIRBEeGylVEdlU.roa (raw, json)
Hash identifier: PrX5Lns4IgqPvufiNyJSLoBwhjQDa8lQkm+0jT7sQzE=
Subject key identifier: 28:08:EE:EB:3C:80:71:AD:CF:E4:52:11:04:47:86:CA:55:44:76:55
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019D2F729A3B4975D11D4F77190B9E478450
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/KAju6zyAca3P5FIRBEeGylVEdlU.roa
Signing time: Fri 27 Mar 2026 13:18:52 +0000
ROA not before: Fri 27 Mar 2026 13:18:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203156
IP address blocks: 103.86.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 15:47:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:72:9a:3b:49:75:d1:1d:4f:77:19:0b:9e:47:84:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Mar 27 13:18:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2808eeeb3c8071adcfe45211044786ca55447655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:21:70:b4:66:f9:5b:2c:78:f5:83:83:46:72:
98:a9:15:5f:42:5c:37:9e:af:d8:ee:73:3d:64:0e:
69:4f:63:a0:b3:86:1d:5f:54:9e:ad:43:33:86:c9:
af:e9:b2:05:2e:93:89:50:a7:29:c3:4b:79:71:f0:
ae:ba:da:82:ee:e7:9c:ca:42:94:bc:68:e6:55:52:
ac:f2:a2:db:1a:ab:c8:e5:1b:7c:2e:a2:9c:20:c1:
97:bc:a6:41:93:58:30:3d:5e:53:1e:5b:96:16:01:
89:02:ba:b3:91:fd:21:ee:a0:2d:fb:af:37:cd:7b:
71:2d:93:16:24:9b:53:90:50:2e:e5:a7:b3:97:a7:
1a:d3:78:70:66:22:0c:44:5f:31:47:52:72:dc:80:
b5:26:e6:60:60:2e:4b:4b:50:1b:ee:94:53:22:d0:
53:af:28:d5:6c:b5:30:ee:5a:6a:30:0c:0b:c0:8d:
6f:ca:a7:08:f5:2c:ce:f5:ed:67:0a:88:56:bd:9d:
a2:37:cb:f8:1a:f8:d9:e6:18:8a:35:9b:a7:36:5e:
31:f2:cd:cc:dd:a3:d0:cf:2b:27:2b:d7:23:be:4e:
10:a1:87:0a:0c:3a:93:46:16:a3:46:d2:02:b7:b8:
b7:73:6c:d9:71:da:4d:be:71:f1:7a:a6:37:69:9c:
af:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:08:EE:EB:3C:80:71:AD:CF:E4:52:11:04:47:86:CA:55:44:76:55
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/KAju6zyAca3P5FIRBEeGylVEdlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.86.36.0/24
Signature Algorithm: sha256WithRSAEncryption
92:41:e8:89:bb:fd:09:2e:42:0e:99:1e:2b:59:62:37:c8:c6:
5f:93:09:cf:ab:45:dd:37:15:42:c1:19:97:62:79:f8:1c:6c:
98:70:78:c0:72:69:22:50:46:12:50:a5:c5:9a:88:d1:71:08:
32:31:81:7e:f3:9b:ef:a5:1c:61:06:d3:f6:01:30:fe:ca:06:
c9:7e:6c:9b:15:a0:1e:e9:b3:36:cd:39:69:0e:a8:ca:3b:02:
a2:cf:59:95:4a:ee:9b:d0:da:fe:fb:45:98:67:e7:82:8f:47:
bd:1a:da:8c:c0:55:5b:fb:b7:09:cd:fa:3f:d5:3e:ef:0e:cc:
d7:72:78:b7:65:de:e7:dd:5b:66:11:6a:57:c7:55:a6:7e:b3:
6b:19:35:bd:d0:21:81:20:f8:4a:e1:d7:01:14:6c:42:a4:c5:
3e:59:a1:b6:93:d9:e3:b5:68:fc:d1:c3:5e:03:43:1c:d7:ef:
2f:cd:e8:35:0a:10:b0:2a:08:46:fc:2f:e5:37:ca:53:c5:66:
ef:82:c6:95:66:9c:04:74:7f:f9:cf:10:64:dd:5a:41:0c:32:
ac:17:cc:43:a8:b1:34:4a:2f:78:0d:0a:e1:98:4a:77:8d:9d:
6c:63:0e:af:f5:ff:d2:53:9d:e4:a0:76:11:1b:82:67:f1:9f:
41:35:aa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 23:58:38 2026 by rpki-client