Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/VrXhIxke9Eng6wFk89X_01h58ek.roa
File: VrXhIxke9Eng6wFk89X_01h58ek.roa (raw, json)
Hash identifier: Z3OA/vBhia80Nw5B0Nr3SRG0hjQuwP7wy5EuhIhow/I=
Subject key identifier: 56:B5:E1:23:19:1E:F4:49:E0:EB:01:64:F3:D5:FF:D3:58:79:F1:E9
Certificate issuer: /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Certificate serial: 019C2909B045846D38AB3C2CEF4ED60E1481
Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/VrXhIxke9Eng6wFk89X_01h58ek.roa
Signing time: Wed 04 Feb 2026 14:23:46 +0000
ROA not before: Wed 04 Feb 2026 14:23:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 103.110.160.0/22 maxlen: 32
103.113.29.0/24 maxlen: 24
103.195.144.0/22 maxlen: 32
103.219.212.0/23 maxlen: 32
137.59.4.0/22 maxlen: 32
185.72.240.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:29:09:b0:45:84:6d:38:ab:3c:2c:ef:4e:d6:0e:14:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Validity
Not Before: Feb 4 14:23:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56b5e123191ef449e0eb0164f3d5ffd35879f1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:43:87:be:ce:f0:66:9a:4d:20:8b:6e:6b:44:
96:f9:a7:87:fe:24:94:7e:fa:55:c4:f8:c7:f2:68:
73:59:9f:82:77:24:b3:8d:3c:69:11:70:e4:60:1d:
23:4d:12:0f:dc:31:a6:4e:ae:72:fa:42:be:2e:98:
44:95:20:29:b3:be:dd:6f:9e:f4:bd:42:45:92:8c:
e5:88:27:99:35:7d:7c:2c:e5:db:63:73:18:bb:3a:
7b:3e:2f:bd:ba:cd:06:36:24:cc:83:46:1c:b1:3f:
b8:99:6a:79:e1:1c:29:a9:27:81:83:38:bb:df:9d:
b7:d9:3d:75:46:2c:eb:db:ae:f7:59:31:5b:62:a8:
e8:ff:ad:90:95:dc:ba:08:5c:22:33:c2:4d:df:85:
b0:a2:e7:8d:01:38:3a:4d:e7:63:bc:60:cf:ae:30:
08:39:50:c2:01:28:96:25:e7:ca:3d:9f:a5:dd:7b:
3c:43:23:2f:1c:a4:64:65:06:b1:ed:aa:cf:ee:f2:
b1:20:24:31:68:bb:b7:53:b9:d2:7a:9d:d2:18:b3:
21:39:a6:60:a8:42:5a:a3:58:fa:c8:f4:cc:bf:48:
ea:d1:53:44:5a:af:2c:f9:47:56:e1:80:b1:ea:7f:
45:a8:c5:e4:95:73:d0:6f:dc:b8:1a:42:1b:48:a4:
aa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B5:E1:23:19:1E:F4:49:E0:EB:01:64:F3:D5:FF:D3:58:79:F1:E9
X509v3 Authority Key Identifier:
keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/VrXhIxke9Eng6wFk89X_01h58ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.110.160.0/22
103.113.29.0/24
103.195.144.0/22
103.219.212.0/23
137.59.4.0/22
185.72.240.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:73:14:be:51:c2:56:82:45:c8:e2:5d:f7:54:67:dc:e1:3f:
97:e1:32:1d:3b:e6:04:9b:48:ac:cd:12:6a:2a:2c:40:d7:d8:
bb:2a:05:99:18:26:24:6c:d2:b4:13:d3:96:8f:02:ed:05:58:
02:31:5f:71:a2:95:3e:ed:5e:b7:1c:83:8a:60:05:d5:1c:12:
5c:22:7b:02:2f:8b:62:b9:3d:9e:15:46:4f:f2:e8:f9:bd:2c:
5a:e3:18:71:64:a0:44:81:fb:f4:bf:3b:d3:6e:d2:0c:7c:ac:
a8:f8:d9:3d:e4:79:63:7f:80:41:c9:7b:83:98:6e:e3:fc:e5:
f6:20:77:5e:ed:38:a4:78:1d:8a:41:73:a1:1b:9b:ae:89:80:
81:14:fc:4c:54:6b:ce:c9:f7:d4:8c:5c:30:37:9a:d9:a3:58:
5b:d6:35:e5:a7:6b:8f:d7:6f:bb:1e:38:e2:4c:ec:d5:f1:b4:
d9:b8:0b:12:b7:80:9a:c6:47:70:f2:4c:10:2c:bf:47:6d:76:
51:bf:85:f9:7e:86:34:38:5f:f4:f0:b8:8d:47:bb:64:f7:10:
14:f4:c0:d1:71:bf:f1:75:a8:62:14:0d:22:92:0c:d8:d0:64:
e4:c0:de:05:16:be:b8:6b:95:96:87:3d:e3:eb:8c:fa:b8:1a:
ef:03:72:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:25:07 2026 by rpki-client