Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/JCq6WNuR5hL2h0zeFfwTOCZq2oc.roa
File: JCq6WNuR5hL2h0zeFfwTOCZq2oc.roa (raw, json)
Hash identifier: Dvsh/Zg0VzFWJXu5m5Xjv4uJg+a9rFvqtc587AyoLJU=
Subject key identifier: 24:2A:BA:58:DB:91:E6:12:F6:87:4C:DE:15:FC:13:38:26:6A:DA:87
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 01A15D362DC216663E5972256AC3A940FE4B
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/JCq6WNuR5hL2h0zeFfwTOCZq2oc.roa
Signing time: Wed 21 Oct 2026 06:46:34 +0000
ROA not before: Wed 21 Oct 2026 06:46:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 110.172.189.0/24 maxlen: 24
114.69.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 02:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:36:2d:c2:16:66:3e:59:72:25:6a:c3:a9:40:fe:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Oct 21 06:46:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=242aba58db91e612f6874cde15fc1338266ada87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:aa:4f:f4:d8:64:97:e2:f4:d1:2b:41:0a:5c:
bc:07:d5:14:1a:7d:67:7f:fe:d8:b7:f3:8d:bb:23:
9c:a7:20:73:0d:2e:6e:e6:50:3c:35:8e:70:45:3b:
6e:a4:06:85:17:ee:ed:c0:33:c0:de:38:22:00:18:
c6:36:93:69:bc:38:b0:c0:2b:81:7d:b3:f5:fe:32:
4a:8d:31:7e:67:d8:67:83:be:da:04:de:b9:8d:49:
30:3c:5d:33:5d:53:47:d7:de:14:22:5b:08:68:b5:
bd:9d:e4:76:a8:9f:90:41:8f:3a:39:88:7b:59:66:
05:c6:e8:67:8a:98:d9:b6:fa:82:bc:16:fe:3f:28:
56:1d:0c:46:b5:86:1e:57:de:33:d2:11:b5:05:a8:
86:52:bc:41:7e:b2:50:32:fc:03:ee:c5:e5:d2:72:
7c:99:37:3d:9c:43:2e:39:42:ec:9f:46:08:4b:77:
4e:96:dc:20:45:a1:94:a6:c6:b6:a7:91:5b:ea:0c:
c1:d7:b0:6f:30:f1:49:c8:84:f6:7e:8f:27:6d:18:
37:eb:44:bc:5b:22:a4:46:3a:bb:90:47:e5:ee:38:
73:dd:65:57:62:1f:4c:9d:4c:d3:06:63:04:5b:70:
fc:d1:2d:e6:f0:3e:04:bf:37:c2:09:b7:f3:5d:3a:
f3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2A:BA:58:DB:91:E6:12:F6:87:4C:DE:15:FC:13:38:26:6A:DA:87
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/JCq6WNuR5hL2h0zeFfwTOCZq2oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.172.189.0/24
114.69.247.0/24
Signature Algorithm: sha256WithRSAEncryption
42:4d:3d:a7:8d:04:eb:ac:15:b0:db:5c:fe:40:70:35:9e:9a:
b0:7d:c4:52:1f:55:0f:43:7a:7e:53:ea:3c:c7:1a:53:93:11:
05:9d:20:54:1e:06:d2:fa:63:f9:88:b5:6c:65:62:9d:d6:53:
f7:a9:07:31:d3:56:e8:2a:a0:8e:d3:07:14:13:28:6e:a7:64:
fc:31:b4:4a:f1:07:ff:17:0e:ac:6d:a5:3c:b0:a0:c5:7a:a1:
86:b1:53:b1:3e:c1:b2:86:9e:57:a0:32:53:ec:c8:f3:b3:92:
39:70:2d:64:8f:a6:f4:2a:94:b8:ac:31:49:36:1a:8c:cf:bb:
42:21:65:b7:93:68:40:a4:2c:3d:be:27:f3:ef:c3:59:4c:79:
6f:1f:c7:25:74:51:6d:cb:f4:46:5f:05:ca:b2:41:29:06:a7:
d8:92:60:a0:9e:40:e8:d4:c4:43:69:4a:91:ed:42:01:06:a9:
19:f5:3f:88:db:42:f6:86:ac:19:82:70:4f:74:f7:04:5d:43:
21:98:30:b2:e7:7e:e6:bd:36:37:f1:38:9e:25:ff:1f:a3:b7:
76:3b:a5:ad:90:3a:ef:40:dd:c9:a1:c1:78:b8:1d:d0:0f:cc:
18:22:ef:95:2e:96:49:a4:62:81:72:5e:9a:8c:68:37:98:36:
2e:91:80:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:03:28 2026 by rpki-client