Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/vhjXwUxUHjnodkfGPP9oE-wn8JQ.roa
File: vhjXwUxUHjnodkfGPP9oE-wn8JQ.roa (raw, json)
Hash identifier: pzt6Tw+aFjj+nqYVhnhtqZPOWZ64o5R/mQIj9SS6SOA=
Subject key identifier: BE:18:D7:C1:4C:54:1E:39:E8:76:47:C6:3C:FF:68:13:EC:27:F0:94
Certificate issuer: /CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
Certificate serial: 019D2BA5C5D29FCE1F2B7AEB4E6F7C501535
Authority key identifier: 97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/vhjXwUxUHjnodkfGPP9oE-wn8JQ.roa
Signing time: Thu 26 Mar 2026 19:36:17 +0000
ROA not before: Thu 26 Mar 2026 19:36:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 103.156.184.0/23 maxlen: 24
103.156.184.0/24 maxlen: 24
103.156.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:a5:c5:d2:9f:ce:1f:2b:7a:eb:4e:6f:7c:50:15:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
Validity
Not Before: Mar 26 19:36:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be18d7c14c541e39e87647c63cff6813ec27f094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2f:8f:bf:03:bc:94:95:ad:b1:8a:ed:61:4d:
20:57:f3:25:a3:72:bc:91:87:e7:fa:e4:50:c1:1d:
ce:cf:ab:73:ea:c3:a1:75:8c:1e:77:ad:02:79:ed:
d6:cf:46:99:8c:c0:5f:6d:ef:8b:67:3d:30:e0:5d:
8c:04:02:f1:23:8f:bf:05:b9:3b:df:64:51:39:ca:
2c:d2:3a:c2:23:c9:1c:e7:96:13:b2:0e:df:25:99:
fb:fa:50:75:21:7f:90:74:68:58:6f:69:d9:9e:0b:
05:f3:ec:81:a5:90:24:5c:d8:b3:02:d6:6b:8c:78:
ce:38:4e:1c:61:5c:e8:35:2d:7f:ab:9a:f1:23:12:
05:d0:5c:63:64:7c:4f:87:16:d6:7b:98:24:38:13:
69:69:d4:ec:a7:0b:51:ff:42:98:67:26:44:90:b3:
d2:46:db:35:d5:63:a3:21:68:ef:94:85:db:c0:1c:
89:c5:1a:0d:fa:60:56:a5:90:17:82:6d:a6:91:2e:
2b:ce:33:b3:1d:6a:d4:3b:3b:fb:8e:e0:13:6c:b3:
50:ac:1f:98:9c:62:3e:6c:e5:66:c6:9d:e7:75:5d:
9a:6a:ba:b9:d4:39:ea:d7:61:5f:25:1e:d2:68:23:
dd:d6:01:58:b3:a7:49:71:1c:c5:40:f7:cb:68:94:
7e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:18:D7:C1:4C:54:1E:39:E8:76:47:C6:3C:FF:68:13:EC:27:F0:94
X509v3 Authority Key Identifier:
keyid:97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/vhjXwUxUHjnodkfGPP9oE-wn8JQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.156.184.0/23
Signature Algorithm: sha256WithRSAEncryption
14:17:85:5e:5a:90:84:af:08:da:7a:ef:cf:f6:ac:8f:43:23:
3e:f7:b5:92:1e:31:cf:0f:38:48:91:c4:e1:d3:66:e0:8d:8c:
5b:e3:c9:84:55:c9:0b:d4:f6:17:db:ef:ec:48:35:76:87:41:
60:1b:c7:fc:59:a9:ef:17:ab:fc:e8:3e:d8:df:70:26:a7:9a:
9b:ae:27:3f:da:87:bc:77:e9:a5:5b:8f:45:5d:4f:e7:0b:0d:
66:a3:c4:40:54:11:04:82:d4:be:ca:b4:3b:f5:03:c3:b3:fa:
42:70:ed:d8:12:7e:ee:08:e7:bf:ae:2a:3d:04:f6:c6:c7:47:
ad:bc:e5:dd:4a:dd:8f:3a:80:7b:5d:ed:fb:be:29:be:2e:dc:
37:53:9c:4f:04:fe:ac:e6:ec:88:43:24:98:45:f3:1b:6a:13:
ad:d7:f0:d9:ee:53:d8:07:9e:c5:84:e7:4b:3c:f0:01:78:79:
25:bc:c6:9a:20:ab:4e:46:81:db:8d:71:09:c7:b7:46:59:38:
35:5a:e6:21:87:78:24:09:5f:ee:ea:24:0b:a9:f8:cd:79:ca:
d3:22:30:98:d8:a1:a1:a0:49:38:56:20:95:d3:40:e3:ba:6b:
f5:fa:14:40:77:24:41:25:18:19:d4:73:19:fe:f6:3d:30:70:
01:7f:89:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:28:13 2026 by rpki-client