Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/BEfiB8Ofj3dy9k6ut7ucAiAaeWA.roa
File: BEfiB8Ofj3dy9k6ut7ucAiAaeWA.roa (raw, json)
Hash identifier: ld2i/c644xy/PeKcwaW0wlZ1HJhat/nQKOKjClAcII4=
Subject key identifier: 04:47:E2:07:C3:9F:8F:77:72:F6:4E:AE:B7:BB:9C:02:20:1A:79:60
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019C53C2FB9A2711347FD1E4821F6B7B83C8
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/BEfiB8Ofj3dy9k6ut7ucAiAaeWA.roa
Signing time: Thu 12 Feb 2026 21:30:13 +0000
ROA not before: Thu 12 Feb 2026 21:30:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26383
IP address blocks: 103.31.76.0/24 maxlen: 24
103.31.77.0/24 maxlen: 24
103.110.65.0/24 maxlen: 24
103.110.66.0/24 maxlen: 24
103.146.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Feb 2026 11:20:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:53:c2:fb:9a:27:11:34:7f:d1:e4:82:1f:6b:7b:83:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Feb 12 21:30:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0447e207c39f8f7772f64eaeb7bb9c02201a7960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ff:f8:c1:8b:d1:7d:8b:0e:9a:fc:23:17:39:
d0:63:e0:80:62:e6:79:a8:71:11:5a:f0:cd:ab:02:
2a:b1:29:fd:69:87:64:7d:32:41:97:41:89:36:4e:
dd:70:2c:43:e1:02:aa:d8:9a:26:8d:eb:cc:e8:29:
6e:67:5d:f3:21:61:ea:56:b8:72:f3:45:d5:7b:d2:
20:19:1a:83:ee:48:60:22:0a:68:58:eb:e5:07:e1:
44:e4:f6:42:17:43:ad:26:ae:67:ec:1c:26:c6:c4:
a1:53:63:e2:c4:96:c3:9a:6b:db:77:be:bd:44:4e:
82:98:ff:26:24:87:6f:2a:15:97:69:bb:f4:f6:90:
86:7d:3e:1b:7c:8e:38:bd:d8:f3:d4:0e:7d:04:fd:
2d:d1:47:5a:47:21:a9:9b:e7:2d:a9:5b:ad:b4:b2:
c5:7d:5c:0f:79:35:20:6d:09:64:6d:f8:d9:50:c1:
2e:f7:79:eb:98:72:18:3f:a5:5e:85:67:8f:af:fb:
16:be:91:d7:ab:61:2e:17:27:f9:05:af:09:dd:71:
72:e5:48:52:37:8f:7a:8f:6a:11:90:c4:f5:e7:fc:
e7:23:e8:2b:f6:8e:2e:db:3e:cc:3b:3f:d9:2b:50:
68:b7:62:d6:05:3b:40:53:ec:7f:06:5b:7a:67:f8:
7a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:47:E2:07:C3:9F:8F:77:72:F6:4E:AE:B7:BB:9C:02:20:1A:79:60
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/BEfiB8Ofj3dy9k6ut7ucAiAaeWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.76.0/23
103.110.65.0-103.110.66.255
103.146.119.0/24
Signature Algorithm: sha256WithRSAEncryption
71:b7:40:3a:52:31:b7:a5:3a:73:b7:f3:51:30:81:04:21:85:
84:5b:43:be:90:6f:c0:41:6a:54:0d:e6:56:44:5f:5a:34:2e:
1e:ee:34:9b:6c:13:2e:24:e3:0e:20:5c:72:97:5d:a9:34:04:
0e:e7:24:2a:65:63:b0:84:89:c6:82:f2:f5:de:f7:6e:5b:fc:
d2:5d:cb:b7:30:45:e9:1a:63:7f:a8:73:c6:11:93:8c:12:74:
51:17:3c:4b:12:c2:ea:53:8e:3c:4c:bc:f2:23:83:25:70:be:
7c:13:a4:e1:27:13:a9:6a:42:4f:e1:86:ab:16:0e:8f:38:60:
73:b5:7a:21:ff:30:81:31:bf:4b:16:64:cc:8b:fc:9f:d8:8c:
0f:7d:36:c4:79:2e:d6:3a:80:c0:52:b7:9c:fa:75:bc:15:7a:
c3:06:d9:1b:68:fe:6f:29:3c:0b:e9:7c:e5:e7:b4:7f:3c:b9:
dd:3d:3b:b8:dc:30:82:32:11:99:43:05:fb:63:3e:bc:5c:37:
2f:c8:8a:f7:88:10:6c:45:32:46:62:7c:8a:2e:55:72:ed:4d:
bd:53:9a:0e:a1:1c:4a:7f:6e:c6:c6:0e:14:07:89:d7:be:37:
2f:b9:fb:86:0a:79:da:2b:f4:ab:ff:68:a9:d2:fd:80:34:3a:
22:99:7c:79
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZxTwvuaJxE0f9Hkgh9re4PIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx
MGY5M2YwHhcNMjYwMjEyMjEzMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDQ3ZTIwN2MzOWY4Zjc3NzJmNjRlYWViN2JiOWMwMjIwMWE3OTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP/4wYvRfYsOmvwjFznQY+CAYuZ5
qHERWvDNqwIqsSn9aYdkfTJBl0GJNk7dcCxD4QKq2JomjevM6CluZ13zIWHqVrhy
80XVe9IgGRqD7khgIgpoWOvlB+FE5PZCF0OtJq5n7BwmxsShU2PixJbDmmvbd769
RE6CmP8mJIdvKhWXabv09pCGfT4bfI44vdjz1A59BP0t0UdaRyGpm+ctqVuttLLF
fVwPeTUgbQlkbfjZUMEu93nrmHIYP6VehWePr/sWvpHXq2EuFyf5Ba8J3XFy5UhS
N496j2oRkMT15/znI+gr9o4u2z7MOz/ZK1Bot2LWBTtAU+x/Blt6Z/h62wIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFARH4gfDn493cvZOrre7nAIgGnlgMB8GA1UdIwQY
MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt
NDMwMTNiMjhkOWQ2LzEvQkVmaUI4T2ZqM2R5OWs2dXQ3dWNBaUFhZVdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2
LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBZx9MMAwD
BABnbkEDBABnbkIDBABnkncwDQYJKoZIhvcNAQELBQADggEBAHG3QDpSMbelOnO3
81EwgQQhhYRbQ76Qb8BBalQN5lZEX1o0Lh7uNJtsEy4k4w4gXHKXXak0BA7nJCpl
Y7CEicaC8vXe925b/NJdy7cwRekaY3+oc8YRk4wSdFEXPEsSwupTjjxMvPIjgyVw
vnwTpOEnE6lqQk/hhqsWDo84YHO1eiH/MIExv0sWZMyL/J/YjA99NsR5LtY6gMBS
t5z6dbwVesMG2Rto/m8pPAvpfOXntH88ud09O7jcMIIyEZlDBftjPrxcNy/IiveI
EGxFMkZifIouVXLtTb1Tmg6hHEp/bsbGDhQHide+Ny+5+4YKedor9Kv/aKnS/YA0
OiKZfHk=
-----END CERTIFICATE-----
Generated at Mon Feb 23 20:00:30 2026 by rpki-client