Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/r8Ee1DcJBkO_x6yriTF_agi4YyU.roa
File: r8Ee1DcJBkO_x6yriTF_agi4YyU.roa (raw, json)
Hash identifier: oyY/Op6hyoNNLmnT/1PXG7kD7qth27WALVQ8radvXXI=
Subject key identifier: AF:C1:1E:D4:37:09:06:43:BF:C7:AC:AB:89:31:7F:6A:08:B8:63:25
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019DC5A0DBD304173C0C6694AE2790DB7C2A
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/r8Ee1DcJBkO_x6yriTF_agi4YyU.roa
Signing time: Sat 25 Apr 2026 17:12:26 +0000
ROA not before: Sat 25 Apr 2026 17:12:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215287
IP address blocks: 110.34.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c5:a0:db:d3:04:17:3c:0c:66:94:ae:27:90:db:7c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Apr 25 17:12:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afc11ed437090643bfc7acab89317f6a08b86325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b6:a6:ec:20:73:a2:bd:b5:32:c0:b5:a6:90:
1e:84:56:bf:43:1c:c5:ec:e5:0a:bc:f2:6a:1b:13:
50:08:90:dc:19:8b:6b:cc:c6:bc:b4:e3:74:e5:a1:
e5:5e:4b:9b:07:88:ba:a7:9d:27:4b:87:87:bf:de:
11:ff:5e:47:44:0d:41:d5:17:14:61:bb:c7:b3:22:
c5:36:17:01:ae:80:17:d0:f0:fc:b2:73:6f:ce:c8:
d8:2e:89:6b:56:12:3f:b2:0d:85:90:22:4c:67:94:
af:47:51:a5:7d:79:89:7d:a4:32:13:ce:a0:3d:9b:
63:be:d8:45:83:5a:02:a3:72:57:da:76:25:c4:45:
16:9d:d0:e5:12:10:6a:e7:f9:d3:f0:f0:60:6e:13:
b7:73:25:8a:59:85:e9:90:56:33:89:60:b7:96:10:
60:61:61:74:9c:c4:51:96:5d:e9:16:d4:f9:46:26:
4b:90:68:98:89:80:d2:3b:00:a3:e4:7f:c7:ff:11:
89:84:39:bc:be:f2:51:3b:d3:d9:0f:c9:8f:99:34:
ef:f2:3f:aa:c8:fd:cc:b6:43:79:18:5c:af:9a:49:
b2:56:c9:da:d0:6d:7e:43:bd:f4:90:9e:d9:40:b9:
26:82:67:72:f8:0d:d8:29:bb:4c:e2:28:c6:e5:68:
ad:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C1:1E:D4:37:09:06:43:BF:C7:AC:AB:89:31:7F:6A:08:B8:63:25
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/r8Ee1DcJBkO_x6yriTF_agi4YyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.34.38.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:00:c6:b5:1a:90:cc:34:0b:ee:22:91:21:50:32:fc:91:db:
d4:c0:c2:c4:60:99:13:58:fc:25:fe:87:e2:61:51:ae:e9:35:
b3:b6:ed:5f:69:26:39:60:82:67:12:c4:89:d0:af:21:b1:d4:
d9:b0:51:73:6e:4d:2a:2a:62:48:74:a2:a5:bf:74:46:8a:e7:
fe:02:a1:b7:ac:54:d8:ca:2d:2a:67:b6:d9:11:d8:fe:5e:00:
e2:8e:0f:02:6b:d8:95:80:5b:9f:c5:d9:28:99:b2:8d:6b:86:
1a:1a:c8:a9:db:16:3a:7e:4b:6e:7f:2d:d2:fa:93:24:16:e1:
b1:3c:60:ee:e5:4e:38:b5:fe:8d:a7:69:41:4d:d6:2e:e5:20:
18:ba:17:06:d1:9b:59:a0:86:5e:f7:46:94:d9:45:61:59:dd:
cd:37:21:98:b8:54:68:e7:4f:e0:7e:1e:b2:e4:6c:29:45:f5:
9c:6d:d9:82:3a:af:d8:6a:7c:61:d9:07:23:ae:b8:c3:f0:f0:
a3:b0:3c:08:b4:b6:91:5f:5e:80:c2:2a:e8:82:a9:4f:f9:78:
7d:fb:7f:31:2a:d5:3f:ff:6f:e0:b5:d0:b8:b6:c8:2a:ae:2c:
d8:21:23:1b:8f:c8:7d:e4:5a:f9:6e:57:aa:d0:86:65:b4:50:
c3:90:45:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:44:35 2026 by rpki-client