Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/49wISrZvaWfJmuYUokxBAxCFFnA.roa
File: 49wISrZvaWfJmuYUokxBAxCFFnA.roa (raw, json)
Hash identifier: fVyYSxQVcSLUIxvGvzkQ4MbdrWMkDcckbPhROtPlP1s=
Subject key identifier: E3:DC:08:4A:B6:6F:69:67:C9:9A:E6:14:A2:4C:41:03:10:85:16:70
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 019C1EAFE733E160CD96327C4C2408928189
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/49wISrZvaWfJmuYUokxBAxCFFnA.roa
Signing time: Mon 02 Feb 2026 14:09:30 +0000
ROA not before: Mon 02 Feb 2026 14:09:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62390
IP address blocks: 88.218.40.0/24 maxlen: 24
103.75.68.0/24 maxlen: 24
103.75.69.0/24 maxlen: 24
103.75.70.0/24 maxlen: 24
103.75.71.0/24 maxlen: 24
103.76.128.0/24 maxlen: 24
103.76.129.0/24 maxlen: 24
103.76.131.0/24 maxlen: 24
2a12:2100::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1e:af:e7:33:e1:60:cd:96:32:7c:4c:24:08:92:81:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: Feb 2 14:09:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3dc084ab66f6967c99ae614a24c410310851670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ac:b3:8c:4a:e3:f5:e1:86:17:31:19:6e:03:
0b:07:ac:c6:9a:2a:59:4a:72:31:22:f0:28:8b:6b:
ba:2b:5c:2b:d6:89:72:a5:79:cc:dc:c6:e0:37:39:
50:cd:98:0f:b8:8e:6e:88:23:2d:2c:3b:07:eb:da:
a8:64:c7:66:55:09:cd:ee:ef:7f:fb:28:5c:1c:8f:
1f:32:33:48:8d:07:30:9c:c1:a1:b4:a5:42:00:dd:
f1:7d:5b:6d:0d:d0:60:e5:c5:f5:af:d5:07:a9:54:
cb:22:2b:3b:ff:22:63:70:90:e4:e3:db:8d:d3:eb:
02:50:4f:e1:c1:a3:85:60:db:80:32:95:d7:aa:71:
0b:16:96:d6:8f:95:c0:1f:1b:3c:40:50:09:70:55:
5a:79:f9:77:98:63:48:e8:34:11:5f:44:4c:27:0b:
01:45:db:da:e9:72:89:fb:47:66:ec:e9:c8:1a:5b:
de:13:87:ce:6f:62:c1:18:11:5e:1f:7b:79:93:4d:
8a:6a:e7:03:be:ba:93:1b:7f:98:32:64:b5:1a:34:
68:1f:eb:1c:9b:a5:29:9e:58:f7:f6:ef:ed:ed:b2:
88:ac:71:94:e2:39:4c:7a:24:00:d9:0f:a6:af:e7:
4e:b9:3e:24:bf:3e:04:27:c9:d3:79:19:1f:fc:a2:
56:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DC:08:4A:B6:6F:69:67:C9:9A:E6:14:A2:4C:41:03:10:85:16:70
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/49wISrZvaWfJmuYUokxBAxCFFnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.40.0/24
103.75.68.0/22
103.76.128.0/23
103.76.131.0/24
IPv6:
2a12:2100::/32
Signature Algorithm: sha256WithRSAEncryption
8f:36:ea:bf:da:01:e8:36:cf:c2:e2:35:cb:70:e3:38:ce:ce:
50:25:f2:41:51:5a:21:17:9c:b8:87:8d:11:3b:24:1f:d3:b4:
89:52:c9:a7:98:ad:98:23:d3:d1:f2:1c:b8:e7:a9:af:37:fc:
3e:ea:d3:61:93:49:93:2d:e6:e0:7e:dd:ed:87:77:59:f8:e9:
20:05:d3:46:37:b2:df:fa:6f:7f:7e:57:25:0b:87:06:49:34:
e7:73:69:e2:22:53:b8:d7:6d:9e:17:30:a7:a2:41:d1:67:a8:
c6:a2:ea:81:b1:4d:86:8c:12:8a:45:07:00:de:4f:ce:be:85:
8a:b5:61:da:86:cb:d9:dc:bf:aa:5b:40:86:a6:2e:fe:bd:d5:
d2:80:0b:4c:47:bc:56:69:df:e9:06:06:25:f2:36:eb:b3:bb:
39:3b:f0:81:1c:07:d1:72:ff:e7:e2:2f:7c:20:37:e8:dd:cb:
39:31:5e:26:eb:73:59:80:cd:04:7b:22:ae:70:d6:c1:82:a7:
67:bb:c4:53:3d:9f:4f:63:0d:07:65:a3:a4:98:3a:97:0b:cd:
cf:1e:d5:7e:a8:77:b3:3a:89:e5:00:c2:d3:46:8c:6d:0b:e9:
9d:29:31:ad:75:b0:d5:6d:99:b9:e0:dc:6d:f8:6c:4a:f0:c9:
3b:34:b4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:18:27 2026 by rpki-client