Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/QlL0Y25_hyW9Mg3_d6IyQ67j-yU.roa
File: QlL0Y25_hyW9Mg3_d6IyQ67j-yU.roa (raw, json)
Hash identifier: kqgkoq+qNYXeszkJJClKYoG0p0XyZIflUkxXiyvRKL4=
Subject key identifier: 42:52:F4:63:6E:7F:87:25:BD:32:0D:FF:77:A2:32:43:AE:E3:FB:25
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 01A15201D66BC0139B32619479DB848185B1
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/QlL0Y25_hyW9Mg3_d6IyQ67j-yU.roa
Signing time: Mon 19 Oct 2026 02:33:34 +0000
ROA not before: Mon 19 Oct 2026 02:33:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 103.27.156.0/24 maxlen: 24
103.31.76.0/24 maxlen: 24
132.243.194.0/24 maxlen: 24
132.243.207.0/24 maxlen: 24
132.243.208.0/24 maxlen: 24
132.243.209.0/24 maxlen: 24
132.243.213.0/24 maxlen: 24
132.243.224.0/24 maxlen: 24
132.243.228.0/24 maxlen: 24
132.243.234.0/24 maxlen: 24
132.243.235.0/24 maxlen: 24
132.243.236.0/24 maxlen: 24
132.243.244.0/24 maxlen: 24
132.243.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 08:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:01:d6:6b:c0:13:9b:32:61:94:79:db:84:81:85:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Oct 19 02:33:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4252f4636e7f8725bd320dff77a23243aee3fb25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b1:e6:59:0d:c7:56:c2:02:ff:d8:89:72:50:
e6:fa:d9:0f:a1:0f:a8:36:fd:53:e8:50:e5:91:e9:
58:06:88:a4:7c:17:de:9f:f2:d5:2b:cf:a6:88:27:
12:3d:a8:b8:fa:8e:db:4e:49:b3:f1:70:da:bd:f9:
46:91:d1:5a:28:69:f4:82:b7:e4:ff:a4:4f:e8:78:
dd:61:51:8d:0b:0e:97:a7:08:81:ec:55:37:ea:30:
cd:74:22:24:21:17:52:0d:b8:62:73:28:7a:8b:c6:
1b:7b:9f:52:93:83:e3:76:cc:3a:be:04:6a:7f:be:
04:c9:64:c2:2c:7f:da:70:ad:3b:41:bd:fd:9f:84:
69:61:e2:c0:47:8d:11:a1:6f:02:e9:75:95:e7:75:
bd:c7:40:e3:7a:4a:4e:53:e1:68:83:e1:9e:ab:fe:
09:ea:fe:3e:70:f7:42:64:36:ac:60:ed:ab:69:1e:
83:ad:d4:fe:0c:34:ef:a8:92:c0:4b:9f:49:69:43:
25:00:22:08:1a:a8:ca:fe:6f:26:a0:20:f5:07:93:
46:11:2a:9e:b0:ef:ed:f7:8a:2e:40:0e:9c:03:6d:
6e:98:da:88:65:3c:6b:07:4c:79:a6:dc:6f:41:60:
a2:a6:9f:5c:0e:47:b3:89:12:93:66:ed:20:fb:d8:
7e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:52:F4:63:6E:7F:87:25:BD:32:0D:FF:77:A2:32:43:AE:E3:FB:25
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/QlL0Y25_hyW9Mg3_d6IyQ67j-yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.27.156.0/24
103.31.76.0/24
132.243.194.0/24
132.243.207.0-132.243.209.255
132.243.213.0/24
132.243.224.0/24
132.243.228.0/24
132.243.234.0-132.243.236.255
132.243.244.0/24
132.243.252.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ee:61:95:cb:32:cd:7f:df:7d:c7:f3:4e:8d:07:b5:b2:3f:
23:e9:19:64:2f:69:37:2e:70:e3:d6:e6:e4:61:f0:53:82:85:
c4:54:ac:4e:42:41:84:66:b9:48:98:e4:69:91:94:b7:47:a1:
0c:37:1c:b9:ab:80:2a:49:e4:83:00:c2:72:e5:8c:63:c5:2b:
80:54:98:c7:bb:7d:76:cc:be:be:08:ea:e8:8d:cd:93:ed:42:
ce:9e:e4:49:20:fb:01:cb:6e:9f:a6:b5:36:bf:bf:86:fe:69:
07:49:19:cf:42:f5:f9:32:e0:8e:a9:d4:0c:7e:6a:72:c3:8e:
fa:9a:0c:ca:77:c5:bc:c8:18:0b:a3:56:66:ef:f0:a1:a2:fc:
5e:47:59:21:6e:0f:7b:78:a7:43:5e:6d:cb:59:e7:80:b7:eb:
e8:65:9f:e3:46:0b:f2:7e:36:c3:07:da:8f:f8:ca:4d:d2:b5:
f5:79:75:94:ae:75:6f:5a:56:f3:e1:62:28:1a:fa:79:d5:91:
b4:e0:8b:61:b3:50:4b:4b:6c:98:82:c4:7a:16:cc:6e:b6:2d:
64:65:6f:0c:4e:34:ba:66:f4:55:09:b3:b5:97:49:e7:57:3f:
d0:e0:42:ec:1a:e6:fc:a4:ca:83:cb:f3:d7:a3:0b:da:92:a0:
97:c1:81:df
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAaFSAdZrwBObMmGUeduEgYWxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx
MGY5M2YwHhcNMjYxMDE5MDIzMzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjUyZjQ2MzZlN2Y4NzI1YmQzMjBkZmY3N2EyMzI0M2FlZTNmYjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrHmWQ3HVsIC/9iJclDm+tkPoQ+o
Nv1T6FDlkelYBoikfBfen/LVK8+miCcSPai4+o7bTkmz8XDavflGkdFaKGn0grfk
/6RP6HjdYVGNCw6XpwiB7FU36jDNdCIkIRdSDbhicyh6i8Ybe59Sk4Pjdsw6vgRq
f74EyWTCLH/acK07Qb39n4RpYeLAR40RoW8C6XWV53W9x0DjekpOU+Fog+Geq/4J
6v4+cPdCZDasYO2raR6DrdT+DDTvqJLAS59JaUMlACIIGqjK/m8moCD1B5NGESqe
sO/t94ouQA6cA21umNqIZTxrB0x5ptxvQWCipp9cDkeziRKTZu0g+9h+PQIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFEJS9GNuf4clvTIN/3eiMkOu4/slMB8GA1UdIwQY
MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt
NDMwMTNiMjhkOWQ2LzEvUWxMMFkyNV9oeVc5TWczX2Q2SXlRNjdqLXlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2
LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQAZxucAwQA
Zx9MAwQAhPPCMAwDBACE888DBAGE89ADBACE89UDBACE8+ADBACE8+QwDAMEAYTz
6gMEAITz7AMEAITz9AMEAITz/DANBgkqhkiG9w0BAQsFAAOCAQEAeu5hlcsyzX/f
fcfzTo0HtbI/I+kZZC9pNy5w49bm5GHwU4KFxFSsTkJBhGa5SJjkaZGUt0ehDDcc
uauAKknkgwDCcuWMY8UrgFSYx7t9dsy+vgjq6I3Nk+1Czp7kSSD7Actun6a1Nr+/
hv5pB0kZz0L1+TLgjqnUDH5qcsOO+poMynfFvMgYC6NWZu/woaL8XkdZIW4Pe3in
Q15ty1nngLfr6GWf40YL8n42wwfaj/jKTdK19Xl1lK51b1pW8+FiKBr6edWRtOCL
YbNQS0tsmILEehbMbrYtZGVvDE40umb0VQmztZdJ51c/0OBC7Brm/KTKg8vz16ML
2pKgl8GB3w==
-----END CERTIFICATE-----
Generated at Mon Oct 26 19:02:19 2026 by rpki-client