Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/NIlWiQEY3RuqoaUyaoDMEQwOomA.roa
File: NIlWiQEY3RuqoaUyaoDMEQwOomA.roa (raw, json)
Hash identifier: 2SReN7GjSlbbBzqYc2FsbGOus9FoN+9Ni58tpYY9o5I=
Subject key identifier: 34:89:56:89:01:18:DD:1B:AA:A1:A5:32:6A:80:CC:11:0C:0E:A2:60
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 019FC726C853C1ADAC11C32AEC5D6C18E701
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/NIlWiQEY3RuqoaUyaoDMEQwOomA.roa
Signing time: Mon 03 Aug 2026 10:23:55 +0000
ROA not before: Mon 03 Aug 2026 10:23:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49468
IP address blocks: 103.102.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:26:c8:53:c1:ad:ac:11:c3:2a:ec:5d:6c:18:e7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Aug 3 10:23:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=348956890118dd1baaa1a5326a80cc110c0ea260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:72:13:df:50:04:21:60:ef:fb:53:ba:e0:
d4:11:86:43:75:d6:0d:06:8a:ba:b1:0e:01:69:44:
67:0f:d1:9f:c1:cd:54:c2:01:c5:58:a4:dd:18:57:
98:93:05:02:75:c0:2f:8a:41:0e:2e:12:86:29:77:
74:42:c1:48:a9:cf:27:ef:8a:53:f1:5e:84:45:5e:
8e:09:86:01:15:bf:59:0f:a4:8e:e0:2b:41:c2:64:
cf:fa:ef:38:f7:21:c9:1a:d1:62:e2:a3:5b:33:a4:
25:25:f6:4b:b9:2f:37:50:6e:52:0d:32:b8:b9:4e:
1f:43:b7:c4:54:bd:e8:9c:61:f1:2d:9a:fc:02:43:
9a:b8:a0:d8:29:14:f2:9a:57:a7:a1:78:6b:90:5e:
7b:01:a1:20:08:8f:51:1b:7f:02:a0:f6:bd:11:c4:
90:f0:6e:7c:8b:ed:5f:47:5c:c8:56:0d:e9:c7:4e:
05:51:24:d9:cf:20:ed:1c:4b:7d:11:11:94:2e:aa:
f1:d7:ad:8b:db:e8:6b:b4:f8:83:f6:2a:b2:80:ba:
3c:7f:20:76:71:03:9f:38:71:80:a1:2d:57:6c:2a:
0c:86:98:de:8a:56:e2:68:51:ba:1a:34:37:d2:ab:
45:aa:14:37:78:66:de:40:a3:60:e7:0c:28:79:3a:
78:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:89:56:89:01:18:DD:1B:AA:A1:A5:32:6A:80:CC:11:0C:0E:A2:60
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/NIlWiQEY3RuqoaUyaoDMEQwOomA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.229.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b3:9d:30:81:75:a9:2a:57:e1:41:6c:a5:33:39:47:4a:88:
3f:ab:da:f7:ca:ff:f4:05:b9:44:21:b8:f2:bc:f7:1e:69:70:
fe:6c:9a:dc:32:ca:8f:be:56:a8:54:ad:c2:44:fe:95:c6:fe:
2d:e4:77:77:d3:25:17:c2:b7:ea:05:c6:20:7d:ac:08:45:15:
ab:ec:35:25:0d:2c:43:4c:a6:4a:7c:a6:81:6a:d2:07:f2:5c:
79:c9:f2:fe:b5:91:79:8d:89:4e:62:38:f3:5a:ad:47:d2:3c:
e3:93:7e:86:42:a9:5b:60:fe:01:aa:e5:91:2d:b4:05:81:4a:
42:05:1a:5b:d5:ff:b6:12:40:53:aa:29:d3:f0:8a:71:96:10:
c4:64:48:93:56:c2:20:2e:17:e8:10:7b:f3:af:df:c7:73:2b:
3a:fe:1c:66:a0:df:c3:f9:0b:d3:84:7e:aa:a7:82:24:3b:a6:
ec:a6:01:21:b7:ff:22:ad:75:7f:ee:c5:94:40:4f:b4:d4:df:
19:c4:7b:49:06:5e:b4:88:5c:f4:e0:44:be:ad:12:6f:da:4f:
24:e5:f3:f3:da:39:2e:c4:80:28:79:22:c1:99:03:e9:20:53:
67:54:45:58:7c:f8:33:08:0d:31:94:3d:47:0a:d2:d5:b1:da:
30:dc:1a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 17:12:29 2026 by rpki-client