Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/WrXo7eZXrLCYixM2GoSFLILnImI.roa
File: WrXo7eZXrLCYixM2GoSFLILnImI.roa (raw, json)
Hash identifier: aBAqoSrp2q5VuQZ6eatCiIBaYp9mu6cUyooOCZdewrc=
Subject key identifier: 5A:B5:E8:ED:E6:57:AC:B0:98:8B:13:36:1A:84:85:2C:82:E7:22:62
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019DC698F7524DCF94C35A0124FAF13E06E2
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/WrXo7eZXrLCYixM2GoSFLILnImI.roa
Signing time: Sat 25 Apr 2026 21:43:26 +0000
ROA not before: Sat 25 Apr 2026 21:43:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 103.27.156.0/24 maxlen: 24
103.31.76.0/24 maxlen: 24
132.243.194.0/24 maxlen: 24
132.243.195.0/24 maxlen: 24
132.243.198.0/24 maxlen: 24
132.243.199.0/24 maxlen: 24
132.243.200.0/24 maxlen: 24
132.243.201.0/24 maxlen: 24
132.243.204.0/24 maxlen: 24
132.243.205.0/24 maxlen: 24
132.243.207.0/24 maxlen: 24
132.243.208.0/24 maxlen: 24
132.243.209.0/24 maxlen: 24
132.243.212.0/24 maxlen: 24
132.243.213.0/24 maxlen: 24
132.243.224.0/24 maxlen: 24
132.243.228.0/24 maxlen: 24
132.243.234.0/24 maxlen: 24
132.243.235.0/24 maxlen: 24
132.243.236.0/24 maxlen: 24
132.243.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c6:98:f7:52:4d:cf:94:c3:5a:01:24:fa:f1:3e:06:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Apr 25 21:43:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ab5e8ede657acb0988b13361a84852c82e72262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:ec:1d:76:77:3e:31:28:74:08:6a:6c:e1:
d1:19:24:0f:9e:c3:8a:91:a0:34:4c:76:05:92:5f:
ef:50:c1:11:9c:5e:04:0d:93:cf:93:dd:4c:5a:22:
cb:ed:8c:b5:9b:56:95:ea:21:ba:3d:d4:ca:49:05:
71:0e:5a:e0:ab:ac:42:97:33:5b:eb:9b:bc:cb:40:
f4:aa:96:71:64:8b:0a:62:4f:8b:18:6f:36:1d:8e:
00:10:3e:c1:02:f8:72:d3:58:27:0f:e8:7b:02:ab:
93:57:c1:21:40:ca:7b:e3:51:dc:41:b0:8f:54:55:
72:cd:e6:41:a0:7d:81:db:b0:f6:6c:23:33:2f:fd:
08:18:6e:d8:25:b7:e5:e3:71:f5:77:00:3e:2a:2d:
cc:8f:2a:c7:2a:bb:41:f3:99:32:28:e4:53:b4:eb:
fc:6d:6b:99:16:de:9a:66:35:36:3e:4b:19:8e:c0:
db:d2:26:86:7e:23:7b:66:1f:2a:01:33:ef:42:95:
0c:8c:1f:e2:c3:23:45:07:4f:41:1b:a9:98:7d:f7:
0f:75:cc:9e:52:3e:29:98:08:0c:7b:99:25:8e:de:
ae:cc:c6:d9:d0:87:f4:90:b3:c4:14:03:5f:9b:32:
6c:f9:9a:15:bc:67:0f:b6:a6:43:e8:d6:ef:90:9e:
50:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B5:E8:ED:E6:57:AC:B0:98:8B:13:36:1A:84:85:2C:82:E7:22:62
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/WrXo7eZXrLCYixM2GoSFLILnImI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.27.156.0/24
103.31.76.0/24
132.243.194.0/23
132.243.198.0-132.243.201.255
132.243.204.0/23
132.243.207.0-132.243.209.255
132.243.212.0/23
132.243.224.0/24
132.243.228.0/24
132.243.234.0-132.243.236.255
132.243.252.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:22:41:ca:a2:f1:74:8e:6d:c7:92:6f:13:8d:47:d4:c6:53:
8f:69:76:93:bb:bf:58:e9:46:13:01:55:ea:bf:34:0c:e8:4d:
aa:48:69:34:16:02:7f:cd:91:8c:57:fb:2e:70:81:4b:51:b1:
3d:a9:81:c1:09:ee:ae:64:a4:8a:b9:3e:a1:ce:71:5c:3b:4e:
db:a5:9f:86:81:82:24:47:a1:90:6e:d6:d4:90:ee:21:40:b0:
4b:a4:e4:ac:ab:64:35:dc:23:c7:12:7b:de:e3:0a:37:60:a1:
e6:a0:c2:58:35:cf:cb:c0:84:74:a1:20:ae:07:21:7c:19:13:
e3:e6:1c:69:76:f4:88:0d:d6:b0:d4:92:38:c7:99:f4:8e:c7:
18:f9:96:43:45:b2:dd:d8:66:dc:b6:5e:2b:96:c4:9e:c2:1d:
50:99:39:ed:be:a2:8f:13:56:32:0f:a1:59:54:16:49:5d:42:
49:d5:e1:79:83:07:bb:bd:07:96:10:30:4d:38:89:84:c8:22:
d1:4b:57:6c:60:fc:59:4e:d5:ad:fd:47:cf:a8:ab:0f:26:71:
59:f3:dd:81:2e:61:6c:0b:bc:b6:60:e8:8e:38:32:d6:29:12:
08:7c:83:ab:60:65:d5:f4:f6:0e:58:6d:a3:38:8c:fd:2e:2d:
d1:f2:3a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:51:16 2026 by rpki-client