Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/X8lHoCI_XuG2lZU9q_MGZ55f1yI.roa
File: X8lHoCI_XuG2lZU9q_MGZ55f1yI.roa (raw, json)
Hash identifier: vZBSUVqnI+tpvLJqqkciKtkc4pg+x3Jha3UTkIiAGbY=
Subject key identifier: 5F:C9:47:A0:22:3F:5E:E1:B6:95:95:3D:AB:F3:06:67:9E:5F:D7:22
Certificate issuer: /CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
Certificate serial: 019CD1A5830EFF1626E88BF6ECF96449BDE2
Authority key identifier: 7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/X8lHoCI_XuG2lZU9q_MGZ55f1yI.roa
Signing time: Mon 09 Mar 2026 08:10:10 +0000
ROA not before: Mon 09 Mar 2026 08:10:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201746
IP address blocks: 103.226.194.0/23 maxlen: 23
103.226.194.0/24 maxlen: 24
103.226.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d1:a5:83:0e:ff:16:26:e8:8b:f6:ec:f9:64:49:bd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
Validity
Not Before: Mar 9 08:10:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fc947a0223f5ee1b695953dabf306679e5fd722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:62:e2:e7:57:c9:39:29:c0:ad:70:2c:da:04:
ff:b0:12:37:0a:ea:2e:d7:f2:9a:b5:ec:ed:11:32:
d7:2a:d9:bf:45:e8:b5:44:83:6e:6d:00:41:4b:86:
a3:fe:63:60:48:71:45:b0:ef:d4:b1:c7:da:db:c1:
a5:a3:8f:36:57:62:81:6b:4a:25:7a:49:8b:45:0d:
ac:bd:8e:93:93:05:7b:c9:b9:01:07:0f:ee:b2:a7:
87:1e:0a:a1:e7:f6:76:ad:3c:d3:93:16:23:28:12:
b5:0e:6b:cc:28:c2:49:2d:02:20:8f:64:d7:ee:c8:
76:8d:5b:3c:24:08:d7:1b:c7:70:6c:78:65:cb:23:
d8:24:83:55:03:96:9d:10:4c:d9:e8:a0:32:10:c2:
25:ed:18:e3:aa:98:ad:21:41:6f:a0:8b:48:73:06:
8b:d7:23:e7:e4:17:13:68:97:da:44:a9:bd:37:71:
9b:ed:86:8b:66:26:ad:0d:c1:28:ba:be:df:70:7f:
fa:5b:3c:3e:37:da:30:5f:03:24:e0:db:6a:67:3b:
83:cf:e7:b9:89:b4:6d:02:e9:05:fe:55:cc:6a:a0:
db:03:ea:06:79:62:24:f4:ab:88:d2:9b:3a:1a:78:
d2:49:af:5c:e1:5b:40:61:a8:f1:5f:22:cc:89:aa:
1e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C9:47:A0:22:3F:5E:E1:B6:95:95:3D:AB:F3:06:67:9E:5F:D7:22
X509v3 Authority Key Identifier:
keyid:7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/X8lHoCI_XuG2lZU9q_MGZ55f1yI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.226.194.0/23
Signature Algorithm: sha256WithRSAEncryption
91:5e:81:f0:ba:33:82:b0:f8:37:a8:8c:4c:f3:95:ad:2f:97:
1e:7b:56:4b:52:8a:38:9f:5f:d3:b5:df:42:91:65:c6:4e:72:
98:d9:1f:6a:68:76:c5:ac:72:25:b0:79:36:79:86:14:c4:ae:
37:7d:b1:d2:76:e6:fd:c5:45:1e:91:ab:29:51:e9:54:1b:e4:
f8:0b:5a:72:f5:c0:f2:ee:ed:8b:17:4e:ed:7e:c9:ec:b5:3b:
fb:0b:ed:86:12:5b:96:1c:f5:e7:ab:26:69:31:1d:de:57:39:
96:fc:9c:c4:c8:13:9a:8a:c3:87:c4:bb:21:86:31:91:21:fe:
8d:41:f9:39:10:a8:ab:6a:1d:3e:85:62:32:c6:0e:16:c8:4a:
ef:7a:b7:40:80:29:66:37:ae:e5:cf:a8:46:6d:9b:09:7a:eb:
99:a1:92:a1:c4:64:30:08:1a:92:92:92:04:03:6d:e1:cb:ff:
30:c6:81:9d:1a:28:ef:3d:51:56:ff:7a:9e:72:5c:60:ec:fe:
49:0a:72:da:4f:14:05:a9:ca:7d:d1:72:ad:7a:e0:79:ed:48:
48:6c:47:17:db:c3:39:33:48:1f:44:ee:87:8f:76:13:ba:fa:
28:94:b8:e1:ab:b4:87:71:56:0b:86:66:47:a2:30:06:65:f8:
74:9b:e3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 09:46:42 2026 by rpki-client