Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/x3F23iRQbtjJBNjfKFqgqyoJJL8.roa
File: x3F23iRQbtjJBNjfKFqgqyoJJL8.roa (raw, json)
Hash identifier: EUZDFPNG/vNavhD9eHX3iVCctpxXMUJXztOTBmE2pTU=
Subject key identifier: C7:71:76:DE:24:50:6E:D8:C9:04:D8:DF:28:5A:A0:AB:2A:09:24:BF
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019CB615CA46EA8740C57D1B7E65475C0620
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/x3F23iRQbtjJBNjfKFqgqyoJJL8.roa
Signing time: Tue 03 Mar 2026 23:43:27 +0000
ROA not before: Tue 03 Mar 2026 23:43:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11404
IP address blocks: 103.105.164.0/24 maxlen: 24
103.216.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b6:15:ca:46:ea:87:40:c5:7d:1b:7e:65:47:5c:06:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Mar 3 23:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c77176de24506ed8c904d8df285aa0ab2a0924bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7d:b1:af:d5:c5:5a:57:c2:07:1f:cb:19:93:
f7:dc:58:f5:05:bd:a1:b5:23:b6:8d:07:1f:0e:a0:
77:db:ad:f1:95:f1:93:ad:e4:18:38:13:81:2a:f1:
8c:43:5d:8a:f0:d4:e8:63:e3:ed:68:b9:9b:99:a7:
8f:de:c0:06:75:f1:ab:44:9f:0e:01:43:dc:ab:dc:
00:c9:cf:55:0e:82:a4:a8:47:ba:2e:97:82:94:13:
17:75:2c:56:25:c2:65:cc:56:21:52:eb:6a:8b:44:
5d:82:b7:68:28:a6:a5:c3:f0:52:cb:7b:8a:40:d0:
3b:4a:f8:c3:4b:11:30:13:bc:17:8f:82:11:f5:59:
5e:4a:da:88:24:4e:00:77:4c:41:54:c4:6b:e4:34:
47:2d:8f:99:d9:8e:63:a3:00:73:d8:8f:86:31:de:
28:96:42:22:64:29:0d:38:a5:40:ba:bf:84:b6:ee:
8d:ef:b2:f8:1a:62:07:d2:d3:9c:d5:97:06:59:9a:
e8:2b:b9:69:38:43:33:24:fd:9b:5f:94:57:dd:99:
2e:42:88:14:3e:a2:1b:2d:8d:12:e6:5c:7d:54:07:
98:83:de:ad:0a:2d:0e:bf:e2:7b:a4:a7:0d:16:9a:
c3:c3:07:06:b9:d1:c9:9a:35:d3:73:eb:95:f8:21:
27:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:71:76:DE:24:50:6E:D8:C9:04:D8:DF:28:5A:A0:AB:2A:09:24:BF
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/x3F23iRQbtjJBNjfKFqgqyoJJL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.105.164.0/24
103.216.196.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:e5:39:df:7e:fe:78:98:02:ab:a7:74:2a:8b:58:8c:2a:3c:
61:73:7b:4a:73:d1:f8:5b:e3:91:6c:72:f6:2b:c2:b6:a0:8d:
58:93:66:dd:03:5c:5a:10:c7:27:ca:fc:2a:e2:fb:31:30:74:
07:a4:9f:5f:49:17:c7:4b:c5:ec:5e:ef:7a:23:7b:7c:b1:63:
c0:ea:2d:c3:3e:22:ad:ad:0d:7b:3f:9f:8f:e2:82:45:0f:87:
b6:7a:18:40:e8:ba:91:b7:c0:b8:e7:9d:95:f3:14:a6:c3:4d:
9e:e2:3f:9a:fd:83:40:05:e3:79:89:98:4a:db:12:df:1c:ea:
1d:00:9b:aa:0e:62:4a:4f:94:63:a0:a9:cf:a1:73:89:f2:f2:
3a:9a:97:e8:17:96:d1:73:0d:5e:a6:ac:36:1a:16:13:be:17:
36:76:60:56:52:ce:fb:46:10:1a:71:c2:db:0d:87:18:20:b2:
dc:e7:a5:c2:fc:92:c1:8d:5b:7e:5c:2e:1b:2e:7b:ad:15:d8:
01:fe:a9:10:a1:0f:5e:a6:1e:5c:0a:ae:9c:30:9f:22:f3:ed:
ff:1d:a6:8c:c4:63:06:77:3f:eb:9c:8a:e4:f7:4e:e0:62:fa:
8c:e8:b8:93:22:b1:69:40:3b:c1:7e:85:68:b0:d5:8f:5a:f6:
9f:89:bf:c0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZy2FcpG6odAxX0bfmVHXAYgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjYwMzAzMjM0MzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzcxNzZkZTI0NTA2ZWQ4YzkwNGQ4ZGYyODVhYTBhYjJhMDkyNGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxX2xr9XFWlfCBx/LGZP33Fj1Bb2h
tSO2jQcfDqB3263xlfGTreQYOBOBKvGMQ12K8NToY+PtaLmbmaeP3sAGdfGrRJ8O
AUPcq9wAyc9VDoKkqEe6LpeClBMXdSxWJcJlzFYhUutqi0RdgrdoKKalw/BSy3uK
QNA7SvjDSxEwE7wXj4IR9VleStqIJE4Ad0xBVMRr5DRHLY+Z2Y5jowBz2I+GMd4o
lkIiZCkNOKVAur+Etu6N77L4GmIH0tOc1ZcGWZroK7lpOEMzJP2bX5RX3ZkuQogU
PqIbLY0S5lx9VAeYg96tCi0Ov+J7pKcNFprDwwcGudHJmjXTc+uV+CEnywIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMdxdt4kUG7YyQTY3yhaoKsqCSS/MB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEveDNGMjNpUlFidGpKQk5qZktGcWdxeW9KSkw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAZ2mkAwQA
Z9jEMA0GCSqGSIb3DQEBCwUAA4IBAQCK5Tnffv54mAKrp3Qqi1iMKjxhc3tKc9H4
W+ORbHL2K8K2oI1Yk2bdA1xaEMcnyvwq4vsxMHQHpJ9fSRfHS8XsXu96I3t8sWPA
6i3DPiKtrQ17P5+P4oJFD4e2ehhA6LqRt8C4552V8xSmw02e4j+a/YNABeN5iZhK
2xLfHOodAJuqDmJKT5RjoKnPoXOJ8vI6mpfoF5bRcw1epqw2GhYTvhc2dmBWUs77
RhAaccLbDYcYILLc56XC/JLBjVt+XC4bLnutFdgB/qkQoQ9eph5cCq6cMJ8i8+3/
HaaMxGMGdz/rnIrk907gYvqM6LiTIrFpQDvBfoVosNWPWvafib/A
-----END CERTIFICATE-----
Generated at Fri Mar 6 01:02:22 2026 by rpki-client