Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/IVP2X2Ml3jBVvGUwCpKVtNW1Y8E.roa
File: IVP2X2Ml3jBVvGUwCpKVtNW1Y8E.roa (raw, json)
Hash identifier: BNy+KRg3HWL2yqFxbwhr+ZvtfuO5Rbmpf/Od+Lx66xw=
Subject key identifier: 21:53:F6:5F:63:25:DE:30:55:BC:65:30:0A:92:95:B4:D5:B5:63:C1
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 01A0734A8CE0BAD2D365C0A1EAB969CF3B31
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/IVP2X2Ml3jBVvGUwCpKVtNW1Y8E.roa
Signing time: Sat 05 Sep 2026 20:37:40 +0000
ROA not before: Sat 05 Sep 2026 20:37:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210980
IP address blocks: 103.110.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:73:4a:8c:e0:ba:d2:d3:65:c0:a1:ea:b9:69:cf:3b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Sep 5 20:37:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2153f65f6325de3055bc65300a9295b4d5b563c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:91:68:a1:b8:dd:62:8b:4a:9f:9d:b9:85:
af:50:45:e4:36:70:28:a4:d3:e7:2e:41:38:eb:6d:
22:95:84:04:19:e9:13:b2:cd:3c:b5:18:5f:a8:93:
e0:fa:37:e2:38:69:8d:d7:f2:1a:1d:95:f6:2b:a8:
8d:fc:d8:49:63:c7:2b:6b:9f:c9:85:c0:cd:88:d7:
e8:2f:62:c1:a1:b7:f4:28:c2:7d:df:7d:2f:f6:83:
92:d0:6c:39:c6:84:12:e3:87:87:2c:b3:8a:e3:e8:
01:13:b2:8c:ca:8d:2f:07:40:e4:2b:0e:bc:9b:d6:
7e:9a:74:21:47:88:2f:e3:8d:1c:58:a1:27:5b:da:
51:87:99:2c:49:8e:f7:11:46:c5:40:eb:b9:81:b2:
23:8a:0e:24:0a:b3:9f:84:c2:63:cb:ea:d8:76:88:
30:a5:e6:28:ac:d4:6d:19:d1:ce:52:bb:27:bf:d1:
b5:70:f7:21:90:de:c0:fd:37:1d:07:18:be:7d:42:
11:e7:03:55:ab:11:30:52:ad:01:ab:88:e4:69:dd:
bc:8d:62:1f:f1:e7:02:d5:20:c8:53:09:5d:ce:f5:
ad:54:5a:e4:66:20:a1:55:2d:3d:e6:48:71:a5:72:
85:1b:55:c1:d3:ad:df:dc:24:40:4c:30:90:91:62:
7c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:53:F6:5F:63:25:DE:30:55:BC:65:30:0A:92:95:B4:D5:B5:63:C1
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/IVP2X2Ml3jBVvGUwCpKVtNW1Y8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.110.67.0/24
Signature Algorithm: sha256WithRSAEncryption
66:9f:14:40:2b:31:31:d7:43:64:cc:dd:e3:6a:16:95:af:3b:
70:ea:01:c1:9f:2d:97:b1:02:2e:e1:94:f8:53:10:89:2c:10:
07:1a:f0:7f:d4:27:70:2b:49:1b:0c:6e:16:14:0d:b9:fb:b2:
cc:6a:6f:92:f1:1a:40:38:26:09:55:be:6e:02:b7:43:12:ff:
ae:c3:f6:1e:21:09:16:81:86:54:64:39:60:79:cd:71:cd:ef:
1b:a9:1d:7d:24:5e:90:f1:99:5b:c5:18:c3:7d:bc:41:d3:15:
5a:60:4e:fa:f9:d5:4a:d0:ba:fe:f4:d9:12:38:9a:9b:b3:20:
d9:45:bf:03:12:af:d0:e9:31:a5:5c:a0:29:7d:97:c7:79:4d:
1d:c1:79:16:21:0e:2a:d3:1c:64:8a:58:22:e3:f7:5c:d7:5a:
93:89:6b:69:df:68:68:a6:fd:92:c0:4a:b7:29:b6:7c:96:f2:
e9:1b:6a:69:35:46:a5:26:04:91:29:42:e7:d6:c6:3a:1c:a6:
c1:9e:d7:99:a7:04:e9:b4:56:0d:d7:cd:a9:da:a6:b3:31:88:
a6:cc:e7:96:aa:cd:ad:f6:78:29:25:3a:f6:78:62:69:40:6a:
1b:66:a4:35:fc:73:92:83:15:9d:6e:fc:4e:b3:39:ab:4d:0c:
98:96:a9:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBzSozgutLTZcCh6rlpzzsxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx
MGY5M2YwHhcNMjYwOTA1MjAzNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTUzZjY1ZjYzMjVkZTMwNTViYzY1MzAwYTkyOTViNGQ1YjU2M2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSqRaKG43WKLSp+duYWvUEXkNnAo
pNPnLkE4620ilYQEGekTss08tRhfqJPg+jfiOGmN1/IaHZX2K6iN/NhJY8cra5/J
hcDNiNfoL2LBobf0KMJ9330v9oOS0Gw5xoQS44eHLLOK4+gBE7KMyo0vB0DkKw68
m9Z+mnQhR4gv440cWKEnW9pRh5ksSY73EUbFQOu5gbIjig4kCrOfhMJjy+rYdogw
peYorNRtGdHOUrsnv9G1cPchkN7A/TcdBxi+fUIR5wNVqxEwUq0Bq4jkad28jWIf
8ecC1SDIUwldzvWtVFrkZiChVS095khxpXKFG1XB063f3CRATDCQkWJ87wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCFT9l9jJd4wVbxlMAqSlbTVtWPBMB8GA1UdIwQY
MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt
NDMwMTNiMjhkOWQ2LzEvSVZQMlgyTWwzakJWdkdVd0NwS1Z0TlcxWThFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2
LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ25DMA0G
CSqGSIb3DQEBCwUAA4IBAQBmnxRAKzEx10NkzN3jahaVrztw6gHBny2XsQIu4ZT4
UxCJLBAHGvB/1CdwK0kbDG4WFA25+7LMam+S8RpAOCYJVb5uArdDEv+uw/YeIQkW
gYZUZDlgec1xze8bqR19JF6Q8ZlbxRjDfbxB0xVaYE76+dVK0Lr+9NkSOJqbsyDZ
Rb8DEq/Q6TGlXKApfZfHeU0dwXkWIQ4q0xxkilgi4/dc11qTiWtp32hopv2SwEq3
KbZ8lvLpG2ppNUalJgSRKULn1sY6HKbBnteZpwTptFYN182p2qazMYimzOeWqs2t
9ngpJTr2eGJpQGobZqQ1/HOSgxWdbvxOszmrTQyYlqkB
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:45:26 2026 by rpki-client