Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/xkhil0GWieUCqVfJ8laq9c-3qQM.roa
File: xkhil0GWieUCqVfJ8laq9c-3qQM.roa (raw, json)
Hash identifier: G+ESSkLYam22esTyVuV9NN6JJG6qDTvB7U4JwfCOSco=
Subject key identifier: C6:48:62:97:41:96:89:E5:02:A9:57:C9:F2:56:AA:F5:CF:B7:A9:03
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019FE8B5855878C3E51C3E2EB276D81F9CC9
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/xkhil0GWieUCqVfJ8laq9c-3qQM.roa
Signing time: Sun 09 Aug 2026 22:47:17 +0000
ROA not before: Sun 09 Aug 2026 22:47:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216472
IP address blocks: 103.17.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 00:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e8:b5:85:58:78:c3:e5:1c:3e:2e:b2:76:d8:1f:9c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Aug 9 22:47:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6486297419689e502a957c9f256aaf5cfb7a903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ac:37:ca:06:5b:17:00:7a:a2:19:9a:25:97:
05:b9:10:25:57:7a:b4:1b:7b:2f:03:46:f8:a6:4f:
3c:e8:78:3a:5e:c4:36:27:3c:e8:90:d5:41:5e:4d:
a7:d8:47:36:3f:b2:51:01:ce:e2:4c:fb:4f:57:00:
25:09:54:b3:0b:1f:05:9b:37:4d:59:68:d1:d2:11:
a0:bf:5a:e3:62:34:4a:28:bc:c4:f2:98:64:2c:70:
d2:c4:b8:bf:1f:cb:59:45:6b:1d:23:7e:63:e6:72:
00:c0:c1:fc:8a:13:48:33:92:3c:af:bf:22:88:0b:
db:a8:4e:4e:20:15:11:80:c5:85:f9:eb:3b:11:19:
fd:20:3c:67:aa:51:7b:8d:3c:2d:90:e7:bd:c7:6c:
a8:73:d5:ff:42:96:7d:d4:be:f1:6c:ee:48:da:ea:
a5:a8:45:2f:f6:62:c5:61:93:a9:23:b4:0e:bc:4d:
46:92:d5:10:15:48:83:c4:28:ba:8c:67:cd:72:14:
a1:48:92:15:ff:1f:c5:7a:e0:09:59:5b:31:2b:6e:
b7:e1:e7:b9:55:58:a7:3c:4f:0a:07:06:8e:09:a2:
61:4c:be:25:45:56:e5:96:03:c1:5b:47:5f:79:ee:
c9:6d:21:e4:af:ec:64:fa:4d:98:db:31:74:f2:51:
bd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:48:62:97:41:96:89:E5:02:A9:57:C9:F2:56:AA:F5:CF:B7:A9:03
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/xkhil0GWieUCqVfJ8laq9c-3qQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.17.202.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:41:f4:0e:4c:d4:9a:5c:fd:f1:86:69:a7:07:e3:45:1f:0c:
b3:1d:3e:c9:aa:62:a3:cf:62:a3:24:91:bf:3a:1d:14:6f:35:
54:de:e0:4e:90:a3:35:6c:f9:c3:2f:18:a2:84:ad:ba:99:08:
5e:49:a0:43:30:fd:6a:bd:e4:bb:da:cc:98:c4:f7:71:a9:b2:
3b:f9:21:d3:c0:d3:f7:34:35:1f:e7:d6:b7:a9:bf:ce:41:65:
18:fd:13:42:9b:93:89:3c:3b:7c:ec:2e:86:f6:eb:75:93:38:
03:36:62:ea:b8:11:94:14:5b:b9:6b:57:1d:4d:9a:b2:2f:67:
25:51:6b:94:ee:1f:18:48:c6:32:26:da:dc:d3:42:83:b9:69:
90:c7:f4:16:75:ec:5e:5c:b1:8b:bb:02:46:95:04:f5:ca:e0:
44:9a:a8:44:ff:7a:cb:1b:16:e0:a3:7a:43:d4:34:fa:10:a4:
eb:03:45:63:ca:35:4d:ed:b6:6a:81:eb:c7:ca:d1:0a:6d:07:
1d:aa:e7:78:da:b6:45:62:40:8b:59:db:20:82:a8:39:2f:11:
b2:19:5b:46:ea:78:32:b8:2c:d0:ee:9a:fa:f0:24:d0:d8:c2:
29:ff:38:36:2f:c3:d5:c7:f7:16:c2:23:ad:ac:7c:96:65:71:
f2:ee:3b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:34:22 2026 by rpki-client