Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/DaIOsBAUTocNWtQ487tz4YWipHI.roa
File: DaIOsBAUTocNWtQ487tz4YWipHI.roa (raw, json)
Hash identifier: N5y0DRMQWN6Af00LwwQvS7RkqXX2njRLKRlsnfJp9Do=
Subject key identifier: 0D:A2:0E:B0:10:14:4E:87:0D:5A:D4:38:F3:BB:73:E1:85:A2:A4:72
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 019F3B9891AC37859E3F3D1E93CFC87C4103
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/DaIOsBAUTocNWtQ487tz4YWipHI.roa
Signing time: Tue 07 Jul 2026 08:01:22 +0000
ROA not before: Tue 07 Jul 2026 08:01:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402236
IP address blocks: 110.172.188.0/24 maxlen: 24
114.69.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:98:91:ac:37:85:9e:3f:3d:1e:93:cf:c8:7c:41:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Jul 7 08:01:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0da20eb010144e870d5ad438f3bb73e185a2a472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0a:73:da:f5:89:2d:ef:17:06:b8:23:8a:56:
69:2f:19:fc:f9:a7:64:1b:20:eb:98:da:04:73:4e:
41:50:7a:78:1c:88:5e:61:f9:6e:2e:39:71:2b:79:
5c:28:c6:d3:46:1d:5f:6f:97:c7:d9:78:aa:5b:d0:
d8:60:0e:ec:ef:76:25:44:8c:4e:63:d6:f6:e0:b0:
7f:4b:65:ab:5a:a3:0b:8f:f3:4e:ae:df:c2:96:f6:
e6:dc:ce:9c:87:10:45:18:68:fe:a0:88:11:ab:b2:
f4:35:31:f1:51:f2:e4:c2:b6:52:ef:f0:3c:4b:0a:
5b:77:5e:a0:d7:51:5c:f5:f4:d0:a1:1b:10:48:4c:
0b:3b:8c:09:0b:0e:71:86:fb:0b:c0:d1:9a:50:29:
1d:ca:88:82:27:37:c9:25:c6:42:7c:21:d7:24:8c:
f0:bb:f3:2f:e7:81:7f:cc:28:2a:c8:a9:0c:5e:3c:
99:7c:b3:6c:46:52:7a:07:18:73:94:f0:ee:94:9e:
82:cb:7d:8e:8e:bb:af:77:83:57:24:47:c4:29:dd:
a1:4e:52:fa:32:76:78:ba:bd:d0:87:9d:2e:c0:2a:
30:77:cb:8c:2d:92:42:1b:d5:91:3c:86:98:f6:8a:
46:33:b8:78:4c:9a:14:e7:ad:64:f6:71:a1:11:e3:
03:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A2:0E:B0:10:14:4E:87:0D:5A:D4:38:F3:BB:73:E1:85:A2:A4:72
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/DaIOsBAUTocNWtQ487tz4YWipHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.172.188.0/24
114.69.246.0/24
Signature Algorithm: sha256WithRSAEncryption
59:95:69:c8:98:4a:d6:1c:98:e4:b3:2e:62:fe:00:74:42:18:
df:fb:66:3e:0e:eb:a0:2b:fa:27:45:a1:bf:34:cd:9b:49:87:
1d:ef:06:f5:95:7c:85:7d:3f:21:f9:a9:60:d2:30:23:70:cc:
bd:03:fc:77:1b:27:b0:5f:c4:47:72:b0:e6:11:c2:c8:16:d7:
21:c6:ee:86:b8:72:80:61:69:60:32:e3:f9:64:b0:8e:e8:f5:
57:48:3a:7d:27:98:61:96:fb:6e:f9:0e:ef:b3:71:d8:c9:18:
ee:05:0e:d6:e5:19:c2:ce:e0:3f:cf:16:62:d3:f1:c4:39:e5:
4b:b2:bb:95:55:f1:03:3e:04:4c:a6:6b:4c:b5:45:d8:d0:4b:
a4:06:c9:f2:1e:2a:f9:68:42:53:df:e4:7b:ca:09:56:db:79:
2a:28:ac:fb:a1:91:2b:b3:68:63:53:63:a1:81:90:91:31:5e:
f4:d5:f8:67:c6:de:93:1d:31:7e:fe:23:64:65:86:9f:46:05:
81:8e:43:2f:17:09:25:0c:68:a1:fb:d0:d4:43:27:8d:7f:b0:
fe:40:4b:31:59:84:c1:9b:13:f6:38:d7:71:4f:65:4e:59:e3:
72:a2:06:4d:85:a7:9a:ea:ea:17:53:12:a1:7b:ed:47:aa:6e:
64:05:36:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:21:26 2026 by rpki-client