Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/myuy92beMwqRFtzOkZZnlOf0Hys.roa
File: myuy92beMwqRFtzOkZZnlOf0Hys.roa (raw, json)
Hash identifier: sAxDEM8ketC6eYYZbGS2CaU5IHsE0zbr7eVIyOLWKqc=
Subject key identifier: 9B:2B:B2:F7:66:DE:33:0A:91:16:DC:CE:91:96:67:94:E7:F4:1F:2B
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019DD9DD416AF836239BE8F2FE7FFBBBC543
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/myuy92beMwqRFtzOkZZnlOf0Hys.roa
Signing time: Wed 29 Apr 2026 15:30:49 +0000
ROA not before: Wed 29 Apr 2026 15:30:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198486
IP address blocks: 103.17.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:dd:41:6a:f8:36:23:9b:e8:f2:fe:7f:fb:bb:c5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Apr 29 15:30:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b2bb2f766de330a9116dcce91966794e7f41f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a3:69:26:4c:eb:61:ed:32:fe:cc:d2:4e:1f:
03:d2:a2:dc:7b:e1:d5:17:b6:4b:32:1a:1c:26:80:
51:35:b9:48:36:5e:7e:6b:c1:d0:63:25:60:e0:8f:
1d:3d:be:cb:7f:f3:cc:7a:c4:0a:a6:c5:10:ec:ad:
41:a3:3e:e7:0b:9c:28:1e:ef:7a:70:8b:af:83:12:
52:de:9c:83:a9:a4:8b:73:8e:a7:df:8e:25:ad:20:
40:87:ba:8e:dd:ec:a5:03:41:d4:6e:79:cd:54:9e:
6d:88:c1:7b:0d:e8:9a:67:96:38:2d:04:bd:e7:89:
4a:d5:fa:3b:c4:a1:16:47:62:5b:b9:58:4e:f1:36:
20:70:25:81:d6:12:0d:ae:38:42:c0:52:7d:c9:b4:
80:92:a3:26:f2:8b:2a:49:b9:cd:d4:47:67:c7:6d:
93:40:0d:89:de:54:98:3b:39:a8:aa:5b:42:da:60:
41:b3:9e:aa:42:0f:75:ec:bd:66:6b:2e:fa:c4:6a:
7b:37:e8:63:63:48:1d:1f:cb:39:b4:07:7a:ef:3c:
7a:83:31:69:35:ae:72:a5:3e:e6:d1:a2:ec:96:e8:
4e:18:5b:cf:a3:de:3e:3e:8c:aa:4d:6d:b7:45:5e:
f1:f2:46:76:3e:fc:b8:bd:0d:ba:4b:36:85:b5:8c:
f9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2B:B2:F7:66:DE:33:0A:91:16:DC:CE:91:96:67:94:E7:F4:1F:2B
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/myuy92beMwqRFtzOkZZnlOf0Hys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.17.201.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:b0:59:4e:5d:05:70:91:18:f1:f9:80:cd:32:59:40:97:06:
a9:33:6f:b5:fe:78:cd:2f:6c:1e:2c:dc:44:5d:96:f9:98:0a:
16:4d:ef:19:c9:ba:ea:4e:0d:66:ed:77:98:ed:32:74:b2:eb:
f1:8b:68:31:b7:c4:94:c7:71:22:1d:f1:c6:24:96:8c:12:68:
6a:d9:fa:15:04:ae:e6:fd:9a:4d:a9:a6:28:ef:af:17:83:58:
58:d2:d2:71:2c:90:94:a4:8b:a3:5b:07:26:45:54:aa:9c:9e:
5c:4e:93:1f:b2:ae:1a:8b:40:2f:4d:db:2a:6c:d6:f8:cb:97:
5c:22:de:47:16:6b:36:9b:c2:88:d4:e7:b5:1f:40:ff:9d:4f:
43:00:35:4b:a7:8e:06:c6:6d:3f:39:65:2c:bb:24:4e:2f:2e:
ea:c8:f9:93:f7:52:ff:0d:96:46:9d:da:c8:bc:f6:a4:a0:7d:
16:69:cb:94:fc:b6:4c:6d:e4:47:a7:7d:4c:59:46:b1:35:f6:
15:e4:cf:fb:1e:10:58:f7:ce:81:10:34:e3:96:cc:80:c9:a9:
0f:00:91:df:3a:56:95:d4:72:8e:2c:91:e4:79:fe:0c:a5:c2:
ca:f2:df:1c:e6:f5:bd:1e:f6:29:4d:66:ce:03:ac:74:29:76:
49:98:ef:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 02:40:35 2026 by rpki-client