Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/SswvJjX5xiAHsDcAwhfJqsa2qks.roa
File: SswvJjX5xiAHsDcAwhfJqsa2qks.roa (raw, json)
Hash identifier: t5yoTlXXpwy00bGCjGToJ93kuqRl5AuFbdBx3Xb369o=
Subject key identifier: 4A:CC:2F:26:35:F9:C6:20:07:B0:37:00:C2:17:C9:AA:C6:B6:AA:4B
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 01A13558BF5F85E4F71591320304F292DC71
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/SswvJjX5xiAHsDcAwhfJqsa2qks.roa
Signing time: Tue 13 Oct 2026 12:59:30 +0000
ROA not before: Tue 13 Oct 2026 12:59:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218731
IP address blocks: 103.27.157.0/24 maxlen: 24
132.243.212.0/24 maxlen: 24
132.243.221.0/24 maxlen: 24
132.243.223.0/24 maxlen: 24
132.243.225.0/24 maxlen: 24
132.243.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 08:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:58:bf:5f:85:e4:f7:15:91:32:03:04:f2:92:dc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Oct 13 12:59:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4acc2f2635f9c62007b03700c217c9aac6b6aa4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:26:13:93:89:04:49:3d:a2:ed:10:3c:86:
fe:d6:fa:06:30:0a:e3:b7:7e:7c:2e:78:53:00:b2:
ab:56:2f:15:83:0f:25:bf:5f:c5:d1:54:f2:24:e3:
fc:c1:ea:9d:3c:a4:dc:f8:7b:d9:73:c5:d5:92:0e:
77:b0:c2:2c:6b:5f:95:71:c7:55:10:1c:bb:a3:9c:
e2:78:df:48:ce:25:56:60:6b:5f:a6:c9:50:ea:3c:
08:46:77:61:68:56:e9:b1:a2:3c:85:f7:b8:b4:c0:
04:72:e5:24:1b:f1:dd:a6:6d:4d:9e:09:72:40:23:
91:7c:e5:db:26:6e:ba:48:6d:b9:cd:ff:7f:de:75:
da:ee:23:62:b3:7b:b7:d8:d5:73:46:7f:fc:43:f8:
3f:17:09:51:ea:4f:0f:8b:43:4f:b2:30:9a:bf:ad:
27:2d:df:d7:9c:69:ce:bc:78:80:fc:1e:48:04:62:
f0:f7:c1:bf:15:c6:02:d6:ed:13:b3:66:41:fa:73:
12:74:8d:b7:45:80:a7:cc:a6:da:69:3b:59:73:34:
bc:ea:dc:cb:24:17:51:9a:89:b3:71:0c:ac:94:49:
c4:27:e2:8b:18:41:85:37:3f:32:94:e0:d5:cb:c9:
cb:89:e6:ea:38:6d:c6:1f:f6:c1:a3:81:e1:96:86:
9b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CC:2F:26:35:F9:C6:20:07:B0:37:00:C2:17:C9:AA:C6:B6:AA:4B
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/SswvJjX5xiAHsDcAwhfJqsa2qks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.27.157.0/24
132.243.212.0/24
132.243.221.0/24
132.243.223.0/24
132.243.225.0/24
132.243.231.0/24
Signature Algorithm: sha256WithRSAEncryption
54:0d:8e:91:a9:84:da:d3:27:b7:a9:54:07:c3:d0:97:16:42:
9e:14:20:b7:8a:94:f4:2a:d8:9b:c5:9a:96:7f:7c:0f:ee:76:
15:a9:eb:b9:7e:a2:b7:53:12:c8:cc:a5:ab:b3:9e:b7:6b:3e:
05:4a:32:66:34:d0:94:94:8d:2d:d2:a4:34:b6:fc:83:2d:88:
d0:f4:e6:d0:7f:6e:14:17:2d:2a:79:5b:1f:99:1c:dc:ae:54:
3e:e8:5c:27:a6:46:4e:b1:6d:48:cf:7f:ff:f2:e8:1e:05:d3:
eb:9b:4a:d4:b2:f0:a5:5c:ec:93:6c:f9:c8:26:3a:58:81:cd:
8c:c9:7f:25:b2:cb:51:37:97:f5:94:88:50:88:f5:50:67:be:
23:96:cc:ec:24:5c:33:ed:47:d5:27:a4:62:ca:74:80:58:2e:
16:14:12:98:49:ad:f6:12:90:cc:63:3d:f9:35:a2:14:30:5e:
8f:66:71:00:d1:de:cb:b8:75:b5:e0:ac:a0:33:2a:24:57:b4:
cf:5c:11:9e:5b:c3:bf:ab:f3:8b:3f:4d:66:f9:8f:b5:26:1d:
ed:23:36:1d:d4:45:5c:e8:4c:5a:88:92:97:a7:5d:17:ae:41:
fe:b3:37:b0:10:0a:c3:8d:4f:07:19:b0:a4:48:62:bd:2d:ab:
ed:6c:f5:96
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAaE1WL9fheT3FZEyAwTyktxxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx
MGY5M2YwHhcNMjYxMDEzMTI1OTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWNjMmYyNjM1ZjljNjIwMDdiMDM3MDBjMjE3YzlhYWM2YjZhYTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6wmE5OJBEk9ou0QPIb+1voGMArj
t358LnhTALKrVi8Vgw8lv1/F0VTyJOP8weqdPKTc+HvZc8XVkg53sMIsa1+VccdV
EBy7o5zieN9IziVWYGtfpslQ6jwIRndhaFbpsaI8hfe4tMAEcuUkG/Hdpm1Nngly
QCORfOXbJm66SG25zf9/3nXa7iNis3u32NVzRn/8Q/g/FwlR6k8Pi0NPsjCav60n
Ld/XnGnOvHiA/B5IBGLw98G/FcYC1u0Ts2ZB+nMSdI23RYCnzKbaaTtZczS86tzL
JBdRmomzcQyslEnEJ+KLGEGFNz8ylODVy8nLiebqOG3GH/bBo4HhloabxwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFErMLyY1+cYgB7A3AMIXyarGtqpLMB8GA1UdIwQY
MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt
NDMwMTNiMjhkOWQ2LzEvU3N3dkpqWDV4aUFIc0RjQXdoZkpxc2EycWtzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2
LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAZxudAwQA
hPPUAwQAhPPdAwQAhPPfAwQAhPPhAwQAhPPnMA0GCSqGSIb3DQEBCwUAA4IBAQBU
DY6RqYTa0ye3qVQHw9CXFkKeFCC3ipT0KtibxZqWf3wP7nYVqeu5fqK3UxLIzKWr
s563az4FSjJmNNCUlI0t0qQ0tvyDLYjQ9ObQf24UFy0qeVsfmRzcrlQ+6FwnpkZO
sW1Iz3//8ugeBdPrm0rUsvClXOyTbPnIJjpYgc2MyX8lsstRN5f1lIhQiPVQZ74j
lszsJFwz7UfVJ6RiynSAWC4WFBKYSa32EpDMYz35NaIUMF6PZnEA0d7LuHW14Kyg
MyokV7TPXBGeW8O/q/OLP01m+Y+1Jh3tIzYd1EVc6ExaiJKXp10XrkH+szewEArD
jU8HGbCkSGK9LavtbPWW
-----END CERTIFICATE-----
Generated at Mon Oct 26 19:44:53 2026 by rpki-client