Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/uBe3623tQijUkwma0-OJwEQ_tQM.roa
File: uBe3623tQijUkwma0-OJwEQ_tQM.roa (raw, json)
Hash identifier: hQ9/JU/GlylZ6IkkNLDFph/ZixNWGat6J58C7qPk77A=
Subject key identifier: B8:17:B7:EB:6D:ED:42:28:D4:93:09:9A:D3:E3:89:C0:44:3F:B5:03
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019F3C9FA762B4BBEB8FED504DD775F67FE7
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/uBe3623tQijUkwma0-OJwEQ_tQM.roa
Signing time: Tue 07 Jul 2026 12:48:43 +0000
ROA not before: Tue 07 Jul 2026 12:48:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 103.17.203.0/24 maxlen: 24
110.34.32.0/24 maxlen: 24
222.167.210.0/24 maxlen: 24
222.167.224.0/24 maxlen: 24
222.167.232.0/24 maxlen: 24
222.167.234.0/24 maxlen: 24
222.167.250.0/24 maxlen: 24
222.167.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:9f:a7:62:b4:bb:eb:8f:ed:50:4d:d7:75:f6:7f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jul 7 12:48:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b817b7eb6ded4228d493099ad3e389c0443fb503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:50:c7:11:6a:cf:62:01:ba:60:96:5d:47:
b5:9b:af:19:b0:e8:b4:9c:ba:42:be:78:0b:af:ab:
ea:ef:4b:10:b8:30:29:d2:7e:e0:9a:e1:bd:25:25:
c7:bd:84:e6:55:66:61:bb:bd:e2:8d:b4:77:d1:69:
22:ad:59:86:9a:56:d2:66:e5:fd:a5:88:7a:92:92:
ed:a9:b5:43:ee:6e:19:96:88:88:d3:ca:12:89:ff:
53:f3:d2:6f:0f:eb:f1:53:46:17:f7:15:14:88:2b:
3f:52:3a:f5:ff:ca:c1:45:1f:1d:de:e9:94:f3:5f:
f8:1a:6b:78:e4:0a:19:78:ff:e8:ec:8a:4f:06:6f:
b0:a1:0a:0c:b6:ce:71:8f:9a:24:fc:90:bf:18:06:
c1:14:ca:9a:ef:26:1a:b3:fd:b0:5e:14:5c:d0:6f:
6b:82:13:db:30:bc:4b:27:58:51:05:80:cc:9b:f6:
77:34:d5:bb:2c:99:b5:a6:c3:de:dc:24:cc:42:82:
73:46:34:ff:ab:be:70:be:11:a5:42:94:e7:10:1a:
56:eb:9d:88:3e:61:ec:f7:33:55:5b:17:49:0e:2a:
4b:82:b0:0b:32:39:6e:f7:d8:90:0e:80:9c:65:83:
b8:f3:03:07:93:11:56:78:7a:13:83:a5:44:f5:64:
27:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:17:B7:EB:6D:ED:42:28:D4:93:09:9A:D3:E3:89:C0:44:3F:B5:03
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/uBe3623tQijUkwma0-OJwEQ_tQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.17.203.0/24
110.34.32.0/24
222.167.210.0/24
222.167.224.0/24
222.167.232.0/24
222.167.234.0/24
222.167.250.0/24
222.167.255.0/24
Signature Algorithm: sha256WithRSAEncryption
43:89:24:e4:02:7a:1e:7c:93:f7:d1:3f:22:07:66:2f:07:6a:
73:55:19:90:f1:75:2c:30:d4:7b:20:24:25:76:14:89:5c:cf:
a6:c5:4a:bd:34:36:bc:86:8e:a3:af:0c:dd:51:17:c1:cb:ce:
11:f5:3d:c4:25:47:db:42:ff:3e:05:be:69:e5:41:26:9b:01:
cd:d0:1c:77:d8:77:eb:2e:67:08:37:0e:9b:f1:41:33:9a:2b:
73:1a:e0:3a:f9:69:4a:da:13:7f:e0:c9:72:0f:92:ce:a0:21:
34:4e:67:df:14:d2:e1:96:93:8a:22:2b:b2:3f:6b:57:e6:71:
f2:58:22:b4:39:5f:ea:85:22:15:cb:16:98:bd:ce:5b:a5:77:
65:ae:71:4c:3f:58:3e:dc:6b:41:30:ce:b9:b0:c5:36:b6:ff:
1f:ec:12:6b:fb:0c:51:9f:a7:23:f2:b5:c9:bf:66:c3:0f:e5:
d6:4e:61:a6:eb:bd:ef:d8:03:6c:cf:52:39:cc:52:9d:d8:e3:
ea:91:9b:27:02:f7:a7:6c:d7:26:6b:58:38:38:6d:f6:65:56:
b4:4e:c6:1c:34:b7:76:f6:e1:3e:00:9e:0f:73:e5:5c:ae:2f:
04:82:01:0d:32:d6:ac:7b:f4:57:ac:41:92:b0:3a:76:1a:40:
fd:d0:18:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 22:10:51 2026 by rpki-client