Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6WkvrjlyWEDsZ74TJyS7pQmbdpA.roa
File: 6WkvrjlyWEDsZ74TJyS7pQmbdpA.roa (raw, json)
Hash identifier: bBOC4s6YhHcz/kp21Y2jP2p2wozCDvwvWGTmbGNvE04=
Subject key identifier: E9:69:2F:AE:39:72:58:40:EC:67:BE:13:27:24:BB:A5:09:9B:76:90
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0E8B9055AB94175C867621A9131A3DF4E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6WkvrjlyWEDsZ74TJyS7pQmbdpA.roa
Signing time: Mon 28 Sep 2026 15:53:54 +0000
ROA not before: Mon 28 Sep 2026 15:53:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399989
IP address blocks: 103.47.59.0/24 maxlen: 24
124.158.113.0/24 maxlen: 24
124.158.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:b9:05:5a:b9:41:75:c8:67:62:1a:91:31:a3:df:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 28 15:53:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e9692fae39725840ec67be132724bba5099b7690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:70:f9:ca:9b:3c:4a:01:86:14:6a:89:16:28:
3e:b6:d3:3f:e5:ee:fe:d8:b0:2f:3d:68:0b:c2:c3:
7d:e9:9e:e9:c5:bd:25:7f:02:aa:2c:dd:6e:6d:d2:
eb:8b:73:73:39:f9:e0:3d:ba:eb:69:c2:20:4c:b4:
bc:09:cf:a3:ac:75:1b:27:68:f7:47:6e:e8:7c:d2:
6c:ab:c1:a1:07:d1:7a:51:a9:9a:15:e6:12:9c:80:
92:40:11:57:a0:36:ed:fc:66:f3:66:22:98:0e:73:
47:fb:6c:70:a7:db:83:0d:9b:25:9c:68:d4:30:78:
72:8c:6a:29:57:f1:b3:e4:0b:ec:d0:f2:48:38:3d:
d5:4b:5f:51:73:bc:02:34:6e:5a:0b:c2:5c:60:72:
a8:88:e6:ea:6a:5a:f5:cd:97:0d:6c:ba:b0:0f:a2:
3d:f2:07:f7:66:7d:cf:d1:6f:28:c4:04:40:91:b1:
ce:bc:0e:5c:8c:1b:84:cd:65:32:34:52:6c:7b:76:
2c:1d:ac:f6:d8:07:e7:af:81:29:a0:0c:11:48:9f:
8a:8f:fe:65:ad:28:28:6a:1a:f4:ed:12:eb:67:dc:
0a:a3:8e:fb:12:7b:38:48:bc:51:92:4f:16:29:ba:
1b:d8:a7:4c:2e:63:af:fa:50:9a:1a:b7:2e:d7:b8:
7f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:69:2F:AE:39:72:58:40:EC:67:BE:13:27:24:BB:A5:09:9B:76:90
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6WkvrjlyWEDsZ74TJyS7pQmbdpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.47.59.0/24
124.158.113.0-124.158.114.255
Signature Algorithm: sha256WithRSAEncryption
69:92:cd:f0:e4:4c:57:1a:4b:a8:a4:39:4f:1f:b2:6a:73:84:
b0:fa:19:84:a2:95:ce:bb:fd:37:01:ab:34:c6:7e:f1:83:13:
4a:a1:f8:05:81:3e:89:67:70:33:42:d4:75:67:28:ef:04:30:
9c:30:dd:c9:aa:50:af:c9:4a:45:c0:00:57:92:99:14:4f:a1:
b0:7c:71:a3:dd:f4:21:5f:f2:83:60:44:8b:b0:43:80:b2:d6:
a5:76:92:f1:e4:d4:06:84:88:f2:d7:1a:a7:64:72:19:c0:65:
1c:79:bf:4f:97:cb:60:13:60:e0:87:6a:ed:90:d3:e2:0f:d2:
b3:4f:2d:17:ee:1d:ab:1a:de:05:ca:5a:70:03:f8:51:c4:be:
6e:62:58:a1:00:fd:9a:d6:c5:76:44:c4:60:56:8e:59:ae:42:
65:a7:84:d6:a7:3e:71:81:68:ee:0f:f1:b5:ef:b3:bc:cd:f0:
b7:34:b4:fd:ed:71:90:ac:25:bd:88:c7:78:0c:43:72:4d:9a:
99:94:92:56:ca:54:2b:50:4b:99:c1:1a:cb:ac:42:07:18:59:
95:40:99:8b:61:05:62:10:54:d8:76:37:8a:65:54:5b:a0:55:
15:91:cf:03:9e:9c:0f:36:b9:19:16:e4:47:0c:bc:fe:1d:da:
8a:af:1b:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 20 07:27:47 2026 by rpki-client