Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/a_w3cz2IoJqv8FryB0JDMHFq3oY.roa
File: a_w3cz2IoJqv8FryB0JDMHFq3oY.roa (raw, json)
Hash identifier: XkLHvgSW92gqcvp8lFRPHtm1wEJvPZRmtyzeV++XJuU=
Subject key identifier: 6B:FC:37:73:3D:88:A0:9A:AF:F0:5A:F2:07:42:43:30:71:6A:DE:86
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019EB636E6D0825BA9CA9E3B6DB7B848E0AC
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/a_w3cz2IoJqv8FryB0JDMHFq3oY.roa
Signing time: Thu 11 Jun 2026 10:25:11 +0000
ROA not before: Thu 11 Jun 2026 10:25:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 103.27.156.0/24 maxlen: 24
103.31.76.0/24 maxlen: 24
132.243.194.0/24 maxlen: 24
132.243.198.0/24 maxlen: 24
132.243.199.0/24 maxlen: 24
132.243.201.0/24 maxlen: 24
132.243.207.0/24 maxlen: 24
132.243.208.0/24 maxlen: 24
132.243.209.0/24 maxlen: 24
132.243.213.0/24 maxlen: 24
132.243.224.0/24 maxlen: 24
132.243.228.0/24 maxlen: 24
132.243.234.0/24 maxlen: 24
132.243.235.0/24 maxlen: 24
132.243.236.0/24 maxlen: 24
132.243.244.0/24 maxlen: 24
132.243.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:27:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:36:e6:d0:82:5b:a9:ca:9e:3b:6d:b7:b8:48:e0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Jun 11 10:25:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bfc37733d88a09aaff05af207424330716ade86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:c2:f8:a6:3d:12:4f:0b:3d:cf:c8:10:25:
bc:dd:6e:05:35:c3:ad:cd:ca:21:65:6e:38:65:0f:
34:5f:cd:1e:1d:2b:7f:78:d1:7c:bf:23:f0:47:51:
08:e5:2a:19:7e:8d:45:80:b3:10:74:cb:a4:95:5d:
83:a1:5a:ba:12:1e:be:75:4d:a4:5e:66:c3:fd:fd:
52:59:68:b9:92:a2:87:9a:ae:ad:8c:83:e5:0b:a3:
b2:38:dc:28:6c:88:e8:53:41:fa:41:0b:c6:e4:2f:
53:c8:3b:8e:e9:1c:35:4d:79:af:51:29:e7:66:5f:
92:91:26:a5:8b:88:18:ba:3b:21:c1:ca:8c:84:af:
96:a7:62:ca:6e:c7:df:89:de:69:73:4f:c6:ef:aa:
d4:11:16:0a:c4:0f:e6:97:98:f6:a8:b0:13:21:3a:
9a:62:96:1b:1c:1c:db:98:50:cf:b7:67:a5:a7:9a:
1b:ba:5f:05:75:7d:85:7f:5c:3c:a3:e8:81:36:9c:
68:54:d9:70:7b:a4:5a:ea:4c:eb:8c:58:57:13:af:
fd:74:96:37:f0:0b:9c:1b:cd:92:c9:4b:e9:97:e7:
86:01:93:02:e1:30:ee:77:56:44:1f:70:91:0e:83:
fd:65:38:bf:7a:52:0a:d6:50:35:72:f3:98:42:da:
d4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FC:37:73:3D:88:A0:9A:AF:F0:5A:F2:07:42:43:30:71:6A:DE:86
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/a_w3cz2IoJqv8FryB0JDMHFq3oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.27.156.0/24
103.31.76.0/24
132.243.194.0/24
132.243.198.0/23
132.243.201.0/24
132.243.207.0-132.243.209.255
132.243.213.0/24
132.243.224.0/24
132.243.228.0/24
132.243.234.0-132.243.236.255
132.243.244.0/24
132.243.252.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:6e:85:1e:8e:8a:48:a6:44:d1:ac:ca:0c:64:5c:15:a6:67:
0c:7c:e7:c3:49:83:47:00:f7:91:d7:aa:4c:b7:eb:85:12:46:
0b:39:57:c5:2d:a2:b9:e2:93:de:aa:35:11:55:c3:7b:d8:af:
d4:79:7c:84:2c:2d:1b:8f:39:49:24:67:23:b5:e8:f0:f7:bd:
d3:87:fb:ca:c9:7a:21:40:86:27:81:94:37:a1:c5:47:d1:3a:
01:07:cd:a6:32:61:cb:91:1e:d9:f7:69:c1:e1:20:b9:69:0e:
a1:18:68:a8:e5:02:64:fc:f1:de:da:f1:9e:bc:b5:7c:0b:be:
ab:dc:80:cd:4a:04:9d:26:de:df:4e:8e:92:a6:ab:6d:19:c7:
c8:be:ff:51:8c:af:29:fd:32:95:dc:af:99:4d:f1:2e:47:4d:
09:0a:3a:e6:fb:09:79:52:ee:a4:a9:41:cd:01:66:a7:89:97:
9e:cd:1a:16:2a:d9:be:38:a3:b8:21:3c:08:51:93:54:3f:74:
10:4c:c3:df:6f:1e:90:13:af:15:31:a7:83:cb:43:bd:ae:9f:
1b:5d:8d:79:f9:8c:19:1a:2c:6b:fe:cc:e4:fb:00:10:c3:7b:
93:af:a1:fc:82:80:b8:76:e7:e1:2e:79:42:07:ef:d9:92:4e:
c5:5c:89:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:55:22 2026 by rpki-client