Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/U1aab2MxbI-i9hTo8lZRAZ5efAU.roa
File: U1aab2MxbI-i9hTo8lZRAZ5efAU.roa (raw, json)
Hash identifier: APjZ82UUn6DyAQqo5G03W1Ri2QoSsmgGJvi9teJXAnw=
Subject key identifier: 53:56:9A:6F:63:31:6C:8F:A2:F6:14:E8:F2:56:51:01:9E:5E:7C:05
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019DB0CCD3DB631D1F42F6C90893FECE3500
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/U1aab2MxbI-i9hTo8lZRAZ5efAU.roa
Signing time: Tue 21 Apr 2026 16:08:26 +0000
ROA not before: Tue 21 Apr 2026 16:08:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26383
IP address blocks: 103.31.76.0/24 maxlen: 24
103.31.77.0/24 maxlen: 24
103.110.65.0/24 maxlen: 24
103.110.66.0/24 maxlen: 24
103.146.119.0/24 maxlen: 24
132.243.192.0/24 maxlen: 24
132.243.193.0/24 maxlen: 24
132.243.208.0/24 maxlen: 24
132.243.209.0/24 maxlen: 24
132.243.210.0/23 maxlen: 23
132.243.216.0/22 maxlen: 22
132.243.236.0/24 maxlen: 24
132.243.237.0/24 maxlen: 24
132.243.238.0/24 maxlen: 24
132.243.239.0/24 maxlen: 24
132.243.240.0/24 maxlen: 24
132.243.241.0/24 maxlen: 24
132.243.246.0/23 maxlen: 23
132.243.248.0/22 maxlen: 22
132.243.252.0/24 maxlen: 24
132.243.253.0/24 maxlen: 24
132.243.254.0/24 maxlen: 24
132.243.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:cc:d3:db:63:1d:1f:42:f6:c9:08:93:fe:ce:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Apr 21 16:08:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53569a6f63316c8fa2f614e8f25651019e5e7c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:be:96:f8:14:f7:1c:a4:f0:be:d0:c5:04:
c1:bb:d2:b3:86:ea:e3:d9:2d:72:59:1a:83:52:8c:
f4:38:b9:d8:a9:d0:b1:66:e3:5c:22:51:61:69:3a:
ed:38:71:0d:fa:00:2f:b1:0c:e9:64:6f:96:3b:38:
0a:8e:3a:b8:6e:fb:cd:85:d9:67:1c:6a:47:57:a8:
25:16:3e:d5:11:ea:4a:df:54:2a:d5:d7:a9:e3:fb:
0f:ab:ea:de:c5:aa:b4:7b:23:ca:be:cb:2f:83:c4:
0d:f7:2f:0b:57:39:56:5c:0b:d9:51:68:f7:7b:50:
21:2b:8b:a0:7b:0d:81:8f:eb:9e:c0:d0:89:2f:a5:
5c:1e:7e:f6:2c:9c:b0:c3:10:23:a4:d0:13:56:34:
78:ed:9a:0c:f5:45:2f:4f:98:df:77:bd:5e:8e:7c:
fb:db:51:e8:9a:01:b6:a5:62:94:b4:ab:fc:46:bb:
f5:67:9a:aa:44:a9:6e:fc:23:f4:aa:1b:67:02:ca:
1a:fc:90:7c:7e:ec:03:6a:f0:0d:f6:02:3b:bf:71:
c5:56:90:ff:6c:c3:c1:8e:1a:a4:34:ce:08:e2:a8:
be:f0:e5:2f:8c:ef:8b:86:08:30:fd:3b:0d:3e:03:
0a:fd:bb:cf:e8:7d:48:32:fd:f5:bd:62:8c:7b:9a:
c7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:56:9A:6F:63:31:6C:8F:A2:F6:14:E8:F2:56:51:01:9E:5E:7C:05
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/U1aab2MxbI-i9hTo8lZRAZ5efAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.31.76.0/23
103.110.65.0-103.110.66.255
103.146.119.0/24
132.243.192.0/23
132.243.208.0/22
132.243.216.0/22
132.243.236.0-132.243.241.255
132.243.246.0-132.243.255.255
Signature Algorithm: sha256WithRSAEncryption
18:ea:05:f7:82:7d:97:e8:47:f8:38:3a:4b:6b:05:c3:e3:cd:
1a:bc:31:e7:64:96:f1:b1:4a:8e:8d:22:80:3a:9f:58:fe:a2:
d3:26:ec:7e:ba:13:08:32:ce:c5:bd:2f:df:b2:25:e6:2b:5b:
8a:27:76:46:6c:0d:52:26:90:d6:ae:5b:d4:1b:d8:af:6d:cd:
c1:88:75:59:41:69:37:5d:22:24:d3:84:f7:a7:6f:19:9c:01:
c2:7b:62:c4:ea:ef:ba:c8:78:89:fe:d3:3d:c0:29:1c:19:dd:
75:4f:29:cd:83:cf:00:3d:81:48:82:55:9f:11:53:5e:a3:59:
09:be:d4:02:fe:cc:2e:04:20:a8:6a:97:f9:e5:f3:9c:8b:99:
b9:da:c2:b4:98:a1:ce:cc:c7:75:66:c8:dc:4a:07:b6:a2:64:
1f:11:26:92:5f:41:d8:b6:00:66:9f:8b:e7:ee:24:cf:4f:64:
f6:7e:92:4a:3b:a5:e9:60:12:7e:b6:1d:4f:bd:cc:92:23:e7:
8d:43:5d:3c:99:a4:01:1d:8b:0a:8a:05:37:87:ba:11:81:b3:
3c:75:a5:c8:dd:e3:6f:10:1d:58:9c:e3:c2:2a:2c:d3:11:f6:
3c:0e:b9:1e:e2:d0:11:6a:f9:4e:fd:21:ca:84:7b:db:52:29:
85:51:d0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:51:09 2026 by rpki-client