Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/Ra1fWYBpzkKUqUA-_S5CwDjuQoc.roa
File: Ra1fWYBpzkKUqUA-_S5CwDjuQoc.roa (raw, json)
Hash identifier: 4WfqueHJ1dqkVVahyA4rVNi4plbcl2JaLoq5NwK9xSw=
Subject key identifier: 45:AD:5F:59:80:69:CE:42:94:A9:40:3E:FD:2E:42:C0:38:EE:42:87
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019E2DC700184C6B1AF8EB937A43267C3EDB
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/Ra1fWYBpzkKUqUA-_S5CwDjuQoc.roa
Signing time: Fri 15 May 2026 22:34:36 +0000
ROA not before: Fri 15 May 2026 22:34:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 103.27.156.0/24 maxlen: 24
103.31.76.0/24 maxlen: 24
132.243.194.0/24 maxlen: 24
132.243.195.0/24 maxlen: 24
132.243.198.0/24 maxlen: 24
132.243.199.0/24 maxlen: 24
132.243.201.0/24 maxlen: 24
132.243.205.0/24 maxlen: 24
132.243.207.0/24 maxlen: 24
132.243.208.0/24 maxlen: 24
132.243.209.0/24 maxlen: 24
132.243.212.0/24 maxlen: 24
132.243.213.0/24 maxlen: 24
132.243.224.0/24 maxlen: 24
132.243.228.0/24 maxlen: 24
132.243.234.0/24 maxlen: 24
132.243.235.0/24 maxlen: 24
132.243.236.0/24 maxlen: 24
132.243.244.0/24 maxlen: 24
132.243.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2d:c7:00:18:4c:6b:1a:f8:eb:93:7a:43:26:7c:3e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: May 15 22:34:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45ad5f598069ce4294a9403efd2e42c038ee4287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:99:7c:3a:fd:16:2f:5b:44:a7:43:9b:c1:d5:
77:9a:ea:d8:de:2b:eb:cc:6a:91:ea:fe:2c:19:b9:
22:b8:4a:28:af:bb:2f:1b:cf:61:04:be:8c:27:14:
b2:d7:c6:69:8b:db:bd:c7:88:41:f3:89:9e:bc:25:
e3:28:68:57:c6:4f:c6:c8:62:84:6c:79:53:aa:7e:
6d:ca:49:fc:ac:c9:04:00:5a:ed:62:c2:e1:85:1c:
ba:28:37:87:6c:c4:a1:7f:f0:65:e6:d6:cd:37:50:
c2:00:44:62:58:e6:46:67:88:62:71:3d:48:b6:bf:
d2:29:73:50:13:13:82:d0:dd:46:86:d0:e2:53:24:
84:8d:5c:66:98:32:e8:0f:13:6a:70:d6:ca:88:59:
6f:72:f2:37:9c:7b:73:f6:fd:ad:1b:4c:a7:30:21:
35:53:c2:61:96:fe:75:d0:3c:13:24:5f:22:de:06:
77:df:e9:03:f3:af:0c:3f:e4:80:23:ce:b6:88:d7:
0e:02:a5:b0:43:67:84:04:78:3a:86:b8:5b:fc:6f:
9d:5c:0a:8d:89:40:6a:e0:df:5f:bb:1c:de:df:93:
6e:c1:f1:bb:7a:0a:fe:08:c9:24:79:be:b0:67:40:
cd:fc:55:ee:7a:0d:d4:27:51:0d:f7:0c:b8:4f:d9:
92:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AD:5F:59:80:69:CE:42:94:A9:40:3E:FD:2E:42:C0:38:EE:42:87
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/Ra1fWYBpzkKUqUA-_S5CwDjuQoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.27.156.0/24
103.31.76.0/24
132.243.194.0/23
132.243.198.0/23
132.243.201.0/24
132.243.205.0/24
132.243.207.0-132.243.209.255
132.243.212.0/23
132.243.224.0/24
132.243.228.0/24
132.243.234.0-132.243.236.255
132.243.244.0/24
132.243.252.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ed:96:88:b4:43:9f:f0:f4:f0:03:21:d4:cc:a8:5d:b8:01:
f2:62:b5:fa:25:82:65:b1:ab:31:53:91:30:df:03:e0:11:a5:
d0:eb:b8:33:ec:af:a2:ed:17:48:66:56:10:c7:eb:cd:8c:63:
05:e0:de:20:59:ea:b5:d9:9c:3d:f4:ee:48:bb:d2:12:1c:6f:
05:d2:92:16:c8:49:b3:0d:64:b9:09:62:5d:e6:ba:fa:85:a4:
d3:d2:04:bb:bf:d6:d5:74:04:f3:16:0b:c6:3a:c9:97:8f:12:
15:86:72:f7:87:e0:10:d5:48:27:0e:4f:04:71:b5:d9:94:68:
d7:bb:e1:f4:b6:5b:62:cc:fd:9b:ae:f2:0b:d8:72:65:cd:8a:
d0:0b:97:bc:8e:ab:b2:99:d1:8e:7b:e5:f3:30:4e:ac:c3:a8:
2c:c2:c1:34:bc:c7:32:f9:10:a9:88:64:dd:4f:2a:b5:60:cc:
03:f8:46:fc:ef:4a:ca:8f:d7:bd:bc:e8:64:30:3d:4f:30:15:
3b:b0:d1:5f:a0:22:83:63:c7:53:a1:44:74:ea:31:a2:ae:f6:
04:cc:fd:19:f8:19:72:19:58:09:0a:2c:37:cd:02:bb:32:c7:
0d:47:e9:46:21:ce:ff:fb:d6:8d:db:ad:57:d7:87:83:06:32:
8f:ae:59:a1
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISAZ4txwAYTGsa+OuTekMmfD7bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx
MGY5M2YwHhcNMjYwNTE1MjIzNDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWFkNWY1OTgwNjljZTQyOTRhOTQwM2VmZDJlNDJjMDM4ZWU0Mjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpl8Ov0WL1tEp0ObwdV3murY3ivr
zGqR6v4sGbkiuEoor7svG89hBL6MJxSy18Zpi9u9x4hB84mevCXjKGhXxk/GyGKE
bHlTqn5tykn8rMkEAFrtYsLhhRy6KDeHbMShf/Bl5tbNN1DCAERiWOZGZ4hicT1I
tr/SKXNQExOC0N1GhtDiUySEjVxmmDLoDxNqcNbKiFlvcvI3nHtz9v2tG0ynMCE1
U8Jhlv510DwTJF8i3gZ33+kD868MP+SAI862iNcOAqWwQ2eEBHg6hrhb/G+dXAqN
iUBq4N9fuxze35NuwfG7egr+CMkkeb6wZ0DN/FXueg3UJ1EN9wy4T9mSQQIDAQAB
o4ICYTCCAl0wHQYDVR0OBBYEFEWtX1mAac5ClKlAPv0uQsA47kKHMB8GA1UdIwQY
MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt
NDMwMTNiMjhkOWQ2LzEvUmExZldZQnB6a0tVcVVBLV9TNUN3RGp1UW9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2
LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBkBAIAATBeAwQAZxucAwQA
Zx9MAwQBhPPCAwQBhPPGAwQAhPPJAwQAhPPNMAwDBACE888DBAGE89ADBAGE89QD
BACE8+ADBACE8+QwDAMEAYTz6gMEAITz7AMEAITz9AMEAITz/DANBgkqhkiG9w0B
AQsFAAOCAQEAcO2WiLRDn/D08AMh1MyoXbgB8mK1+iWCZbGrMVORMN8D4BGl0Ou4
M+yvou0XSGZWEMfrzYxjBeDeIFnqtdmcPfTuSLvSEhxvBdKSFshJsw1kuQliXea6
+oWk09IEu7/W1XQE8xYLxjrJl48SFYZy94fgENVIJw5PBHG12ZRo17vh9LZbYsz9
m67yC9hyZc2K0AuXvI6rspnRjnvl8zBOrMOoLMLBNLzHMvkQqYhk3U8qtWDMA/hG
/O9Kyo/XvbzoZDA9TzAVO7DRX6Aig2PHU6FEdOoxoq72BMz9GfgZchlYCQosN80C
uzLHDUfpRiHO//vWjdutV9eHgwYyj65ZoQ==
-----END CERTIFICATE-----
Generated at Sat May 16 18:36:59 2026 by rpki-client