Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/IeDXwGVOfElOpoUVKW6XzrWRiBI.roa
File: IeDXwGVOfElOpoUVKW6XzrWRiBI.roa (raw, json)
Hash identifier: GHESyQes+1oGspk175UTydlQx1R9pgMNNVb0bk9BmB0=
Subject key identifier: 21:E0:D7:C0:65:4E:7C:49:4E:A6:85:15:29:6E:97:CE:B5:91:88:12
Certificate issuer: /CN=c5f152b6a0d004627d285d879aa83e58461ab2df
Certificate serial: 019C8AC141DC5507F3FB9B7472E51634D758
Authority key identifier: C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/IeDXwGVOfElOpoUVKW6XzrWRiBI.roa
Signing time: Mon 23 Feb 2026 13:47:26 +0000
ROA not before: Mon 23 Feb 2026 13:47:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28686
IP address blocks: 103.55.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8a:c1:41:dc:55:07:f3:fb:9b:74:72:e5:16:34:d7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f152b6a0d004627d285d879aa83e58461ab2df
Validity
Not Before: Feb 23 13:47:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21e0d7c0654e7c494ea68515296e97ceb5918812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:76:35:9a:12:ef:fc:de:1d:13:0a:7d:e5:a0:
8a:76:bc:d3:cc:b9:21:4b:48:a4:5d:18:fa:24:7b:
b2:b0:99:b0:e6:92:a7:8d:8e:22:be:40:37:ec:8d:
66:5e:d0:21:46:14:a1:26:ea:2b:eb:69:00:48:55:
ce:ab:bb:b7:b7:b5:07:6b:51:dd:54:27:9a:67:80:
a8:cf:28:72:6d:c9:7d:d0:e0:63:11:38:7a:cc:b0:
34:07:94:61:0b:8e:91:92:7e:c9:49:16:80:15:20:
d0:84:43:54:b9:8a:aa:6a:a8:d5:d7:3f:1d:48:11:
17:73:5c:69:18:0f:26:b6:7d:22:d7:9c:d3:b3:fd:
4e:f2:af:4c:79:ad:77:a2:5a:fa:a2:28:91:59:9b:
0c:6f:dd:0b:09:46:93:0c:85:02:ca:a7:02:80:75:
6d:40:93:cb:d9:58:f0:94:20:39:f4:ec:d7:5f:7a:
33:e2:25:58:67:21:16:a1:68:c8:95:c7:ec:8b:60:
e6:8e:c0:a9:d5:8a:1b:8a:7e:28:c7:c7:f7:d2:20:
a0:c8:39:a1:3b:7d:e5:1d:00:43:26:dd:f7:67:e1:
ea:ff:f1:61:39:cb:15:0e:9f:4d:c3:fd:ab:ba:b2:
54:ce:3f:52:6d:22:cb:74:73:26:35:d3:af:f3:37:
57:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E0:D7:C0:65:4E:7C:49:4E:A6:85:15:29:6E:97:CE:B5:91:88:12
X509v3 Authority Key Identifier:
keyid:C5:F1:52:B6:A0:D0:04:62:7D:28:5D:87:9A:A8:3E:58:46:1A:B2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfFStqDQBGJ9KF2Hmqg-WEYast8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/IeDXwGVOfElOpoUVKW6XzrWRiBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53ad5a-0a37-4f65-a6c6-737e78c87012/1/xfFStqDQBGJ9KF2Hmqg-WEYast8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.55.232.0/22
Signature Algorithm: sha256WithRSAEncryption
49:81:04:9c:e1:f3:3c:f0:92:4a:a2:3f:be:a8:61:a2:e2:d9:
45:bc:85:0d:ad:e2:4c:2f:91:e2:74:4c:cf:e2:2b:05:73:28:
89:11:8d:f7:73:02:ce:9b:68:9f:27:d1:16:d6:0b:3b:84:37:
4e:d3:01:a4:0d:95:dd:5a:54:ee:44:f1:f2:07:ca:f3:d0:d6:
0c:a3:ed:cc:8d:f5:68:6a:21:76:88:01:84:5c:8c:8a:94:7a:
98:1b:30:87:b2:5f:0e:67:77:ab:40:75:17:7f:62:95:17:71:
4b:4a:03:1e:8c:80:cc:a9:1c:ca:ac:4a:5c:1a:a8:91:86:70:
a7:5b:63:82:89:a4:86:d0:fe:ad:28:5c:00:9f:aa:38:f9:cb:
33:04:54:82:ca:2b:b3:35:61:89:61:e0:e9:d6:60:e3:a8:0a:
30:89:70:ef:c6:b4:92:55:a7:90:4f:74:5c:25:5b:cc:76:5c:
c8:b5:42:fb:ee:b9:80:25:40:c5:38:bd:15:a7:33:2f:eb:f3:
43:fd:16:fe:5a:2a:11:50:23:bf:e9:ff:6e:35:38:7b:dc:ce:
5e:c0:c6:d3:23:31:bb:97:73:f6:97:fd:69:af:9e:93:88:93:
a6:ab:00:93:e2:db:61:1d:fe:2f:ef:1f:54:64:83:10:11:f4:
f5:5b:35:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:54:22 2026 by rpki-client