Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/ibuOotCa1pQHC2BddXe7q1dCKhU.roa
File: ibuOotCa1pQHC2BddXe7q1dCKhU.roa (raw, json)
Hash identifier: QLsHWD8zB1jsPoj6Ww3W3pc0/jw9TRBNYOmFoZnHhBI=
Subject key identifier: 89:BB:8E:A2:D0:9A:D6:94:07:0B:60:5D:75:77:BB:AB:57:42:2A:15
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019EAE0A00ACF7B9AC005A8114FD8EBEDC6F
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/ibuOotCa1pQHC2BddXe7q1dCKhU.roa
Signing time: Tue 09 Jun 2026 20:19:11 +0000
ROA not before: Tue 09 Jun 2026 20:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213702
IP address blocks: 103.27.157.0/24 maxlen: 24
132.243.212.0/24 maxlen: 24
132.243.221.0/24 maxlen: 24
132.243.223.0/24 maxlen: 24
132.243.225.0/24 maxlen: 24
132.243.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:27:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ae:0a:00:ac:f7:b9:ac:00:5a:81:14:fd:8e:be:dc:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Jun 9 20:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89bb8ea2d09ad694070b605d7577bbab57422a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2a:99:71:43:a1:9d:99:49:c3:1c:c3:e0:6d:
a9:33:08:ea:dd:ff:6e:4a:5d:26:15:42:82:c4:61:
a2:76:c4:3e:09:0f:b4:c5:7e:dc:18:0e:20:c6:9f:
db:c4:07:3b:47:d2:6e:6c:3e:d6:2b:5c:33:b0:1e:
29:39:6a:6e:45:81:22:4e:f4:6f:f6:1c:db:64:0f:
fe:ea:72:d3:e8:73:4a:5d:10:c3:1a:88:89:b5:9b:
17:2c:c5:1a:f9:6f:22:c1:b5:88:1f:b7:1d:99:f7:
9b:2f:d1:73:08:93:3c:2b:9d:99:de:95:f2:ff:e6:
4e:6c:18:3e:88:4e:a9:59:94:99:26:80:9c:42:45:
97:2c:4a:19:65:6b:98:17:86:10:05:0f:2a:f7:d4:
d3:19:3d:c5:38:c6:4c:75:89:35:29:be:7c:79:d1:
12:ac:cb:3c:d3:65:a1:03:ed:72:10:e0:ef:e7:48:
2e:1f:01:5d:ba:9f:36:d2:28:c6:9d:db:9d:69:b9:
02:72:e0:33:c0:f1:60:a3:94:db:bb:41:65:4e:f4:
4b:7b:f8:09:a6:fc:68:8f:0c:5c:e3:54:64:79:45:
71:c6:bf:18:36:c8:e8:66:cb:7a:77:af:c2:77:7a:
68:42:2b:48:28:58:a8:d9:a1:25:e2:8c:8b:27:31:
df:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BB:8E:A2:D0:9A:D6:94:07:0B:60:5D:75:77:BB:AB:57:42:2A:15
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/ibuOotCa1pQHC2BddXe7q1dCKhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.27.157.0/24
132.243.212.0/24
132.243.221.0/24
132.243.223.0/24
132.243.225.0/24
132.243.231.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:9a:d6:d2:12:39:1c:0d:0e:56:a5:80:56:d6:10:e9:30:83:
36:2d:e3:00:19:0a:66:f8:b7:15:59:ee:75:06:a2:06:79:3c:
a9:f4:64:a1:09:dc:d2:ad:48:c2:ce:73:d1:ca:18:7e:e1:72:
81:7c:21:99:80:42:f7:24:cd:c3:95:39:ee:c2:a3:a1:5f:a5:
a4:52:a9:36:86:a4:9d:2f:79:cf:7c:9d:ea:04:9a:12:95:3b:
6c:c9:84:a3:12:e9:6b:bd:26:19:68:20:8b:bf:90:9a:7b:39:
37:68:1d:e9:5b:4c:ef:f0:7c:d1:cd:6f:53:43:d3:9d:e2:57:
7b:ad:e9:d9:9e:37:9a:73:8e:95:69:65:3a:e9:7d:dd:55:51:
69:41:78:57:67:5c:f1:d9:aa:d8:2b:78:3a:2e:50:d7:5f:c0:
97:13:71:81:7d:37:ff:ec:06:50:85:28:72:ff:08:ee:c3:04:
b5:c2:a4:69:c6:0f:4d:4f:cb:24:aa:49:9d:94:80:a5:03:aa:
42:f3:9b:0e:ad:8d:bd:52:92:4c:ab:fc:c3:14:34:b8:cd:33:
9c:35:1f:d3:ac:f4:ad:60:5c:8e:63:5f:7a:97:98:db:4e:02:
a4:23:6e:53:f5:58:ca:4c:8f:35:79:7c:49:84:c5:f7:96:ca:
34:b0:e3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:55:20 2026 by rpki-client