Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/dH_1OzAPPrfylvenJVqfoXRFDIE.roa
File: dH_1OzAPPrfylvenJVqfoXRFDIE.roa (raw, json)
Hash identifier: j8nt7xmODifPjkHjnPEW6mSS5TaB2f9JmW3fq4nu5ko=
Subject key identifier: 74:7F:F5:3B:30:0F:3E:B7:F2:96:F7:A7:25:5A:9F:A1:74:45:0C:81
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019EFEF6EF483D48A89253E3BB23170B09E6
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/dH_1OzAPPrfylvenJVqfoXRFDIE.roa
Signing time: Thu 25 Jun 2026 13:27:36 +0000
ROA not before: Thu 25 Jun 2026 13:27:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 103.17.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:f6:ef:48:3d:48:a8:92:53:e3:bb:23:17:0b:09:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jun 25 13:27:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=747ff53b300f3eb7f296f7a7255a9fa174450c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:b3:3b:ba:6c:79:1c:a2:74:1c:a8:83:8e:
f5:89:b4:21:55:40:3b:c2:64:0c:36:50:1a:9b:37:
f4:0e:f3:dd:ea:f2:74:51:85:a2:8d:9e:31:04:ff:
3e:3e:5c:b4:9a:9d:ce:e7:a0:72:71:ca:40:b5:7b:
a5:2e:40:91:bb:3e:d0:cb:e9:11:43:38:87:16:ae:
f5:c0:af:e8:82:97:62:e9:63:c4:7e:96:52:95:b7:
07:f8:46:fa:82:70:62:ff:2e:d6:23:f3:18:e5:10:
a5:32:92:12:16:b6:8c:bd:29:78:5e:6c:02:2d:aa:
8f:bd:aa:ff:2b:63:f2:d9:42:5a:0a:60:c6:e1:53:
92:39:95:88:d1:e7:2c:da:19:f9:f3:0a:91:3b:05:
f3:21:1f:26:45:63:2f:f2:1a:b7:81:b2:cd:83:92:
9b:f6:8c:8a:5b:91:44:37:fd:8c:74:dd:5f:50:1c:
15:5c:bd:9e:58:70:26:96:34:84:44:d1:de:67:52:
74:9e:67:1d:e8:f7:03:32:18:2f:36:3c:6b:22:f9:
ed:2c:fc:2c:6c:e2:f7:45:15:6f:41:f7:e1:db:d9:
79:71:93:c8:b7:8c:b4:b7:06:fb:a9:f2:1b:25:48:
ee:6d:86:4e:75:55:58:f9:4a:41:d0:14:5d:4c:77:
45:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7F:F5:3B:30:0F:3E:B7:F2:96:F7:A7:25:5A:9F:A1:74:45:0C:81
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/dH_1OzAPPrfylvenJVqfoXRFDIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.17.203.0/24
Signature Algorithm: sha256WithRSAEncryption
95:b5:17:c0:64:23:ee:76:da:bc:fe:3e:13:cc:d4:d0:79:ed:
45:ba:50:6b:44:2f:b6:fc:34:9f:b9:c7:9d:1c:11:4b:e6:eb:
db:01:b7:b1:6b:e0:e6:fb:c2:06:29:60:b1:1b:af:62:85:87:
02:9e:a3:54:9b:16:70:c8:2a:93:f5:c9:d5:4a:74:13:d0:26:
35:f1:01:06:90:a8:58:a2:7b:3e:77:e7:35:81:20:ee:90:9a:
0e:58:50:b5:b1:9a:b0:a2:94:89:fb:6b:ef:2b:ed:01:22:7f:
ae:08:1e:7f:ee:c5:da:46:dc:d2:46:7b:16:f9:6f:1c:57:9e:
8a:db:8b:70:64:8a:7e:98:70:d9:0c:54:cc:9a:f0:77:63:43:
57:46:4b:07:e5:c1:d8:06:dc:9f:a0:1f:23:41:36:ae:b5:a3:
e0:4d:b9:08:ff:56:b3:2d:bb:27:71:72:21:f2:8f:08:32:47:
7a:12:dc:59:ca:c0:ec:5f:4c:d2:36:9c:91:cc:10:bc:88:ab:
52:d5:7a:fc:b5:7e:ee:0e:5b:70:ee:e7:0e:84:3f:08:d9:62:
a3:fa:71:9e:d0:35:55:87:91:35:cf:71:f0:16:0f:6c:60:94:
2d:1c:80:3d:a9:f5:f8:73:cc:f6:9d:77:ef:52:47:14:8f:af:
5d:25:c8:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7+9u9IPUioklPjuyMXCwnmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjYwNjI1MTMyNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDdmZjUzYjMwMGYzZWI3ZjI5NmY3YTcyNTVhOWZhMTc0NDUwYzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl+zO7pseRyidByog471ibQhVUA7
wmQMNlAamzf0DvPd6vJ0UYWijZ4xBP8+Ply0mp3O56ByccpAtXulLkCRuz7Qy+kR
QziHFq71wK/ogpdi6WPEfpZSlbcH+Eb6gnBi/y7WI/MY5RClMpISFraMvSl4XmwC
LaqPvar/K2Py2UJaCmDG4VOSOZWI0ecs2hn58wqROwXzIR8mRWMv8hq3gbLNg5Kb
9oyKW5FEN/2MdN1fUBwVXL2eWHAmljSERNHeZ1J0nmcd6PcDMhgvNjxrIvntLPws
bOL3RRVvQffh29l5cZPIt4y0twb7qfIbJUjubYZOdVVY+UpB0BRdTHdFiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHR/9TswDz638pb3pyVan6F0RQyBMB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEvZEhfMU96QVBQcmZ5bHZlbkpWcWZvWFJGRElFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxHLMA0G
CSqGSIb3DQEBCwUAA4IBAQCVtRfAZCPudtq8/j4TzNTQee1FulBrRC+2/DSfuced
HBFL5uvbAbexa+Dm+8IGKWCxG69ihYcCnqNUmxZwyCqT9cnVSnQT0CY18QEGkKhY
ons+d+c1gSDukJoOWFC1sZqwopSJ+2vvK+0BIn+uCB5/7sXaRtzSRnsW+W8cV56K
24twZIp+mHDZDFTMmvB3Y0NXRksH5cHYBtyfoB8jQTautaPgTbkI/1azLbsncXIh
8o8IMkd6EtxZysDsX0zSNpyRzBC8iKtS1Xr8tX7uDltw7ucOhD8I2WKj+nGe0DVV
h5E1z3HwFg9sYJQtHIA9qfX4c8z2nXfvUkcUj69dJchx
-----END CERTIFICATE-----
Generated at Sat Jun 27 23:48:12 2026 by rpki-client