Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/RpN8yNXdR3f4DSdXt3tk0xuMCyE.roa
File: RpN8yNXdR3f4DSdXt3tk0xuMCyE.roa (raw, json)
Hash identifier: 1alxNFlJvEY1BuW09S2xYs3ItiGO5a/H13N9dbNkTdw=
Subject key identifier: 46:93:7C:C8:D5:DD:47:77:F8:0D:27:57:B7:7B:64:D3:1B:8C:0B:21
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A0911F85E5A09C296E053CD97B33C84497
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/RpN8yNXdR3f4DSdXt3tk0xuMCyE.roa
Signing time: Fri 11 Sep 2026 15:39:17 +0000
ROA not before: Fri 11 Sep 2026 15:39:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218788
IP address blocks: 103.207.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:1f:85:e5:a0:9c:29:6e:05:3c:d9:7b:33:c8:44:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Sep 11 15:39:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46937cc8d5dd4777f80d2757b77b64d31b8c0b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:c4:22:53:f5:06:da:59:d9:2b:2e:94:56:
1c:9d:23:cb:32:19:82:46:c9:32:15:d3:33:bb:f0:
a0:01:c9:4c:da:80:7d:8b:c6:51:4b:52:d0:f1:30:
f7:8b:11:53:f1:19:d4:be:3a:dc:52:00:22:e8:f3:
1c:64:de:2f:34:53:3f:09:d0:c5:b4:0a:b9:e5:89:
fa:ed:8b:fb:79:b1:ee:24:21:f9:c0:8a:12:3f:fc:
e7:22:fe:3c:c1:de:7e:81:6b:97:55:03:dd:dc:f4:
06:14:27:90:20:37:95:2f:51:ec:15:1a:dc:cc:c1:
41:05:51:b2:2e:51:70:bb:f0:d5:71:f1:78:fd:65:
ea:8e:7f:8a:38:61:d4:a6:02:15:e7:4d:ac:c5:8f:
87:7d:45:59:a3:f0:76:a5:76:f5:a2:ee:d3:b6:0d:
68:b4:75:e8:ef:02:31:ac:8a:a3:ff:23:7b:21:c4:
55:43:8c:c7:10:82:c4:74:54:19:21:6a:5d:9e:28:
36:c6:ab:cb:8e:9c:a3:4a:8d:01:9c:1c:a2:4f:d7:
58:6b:a6:99:a3:5c:0d:92:95:32:70:17:13:02:b3:
5e:bc:3d:63:73:e4:13:df:fd:30:a7:88:df:a8:9a:
58:c1:e7:6b:48:f8:ae:69:81:42:d3:ff:bd:2a:09:
24:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:93:7C:C8:D5:DD:47:77:F8:0D:27:57:B7:7B:64:D3:1B:8C:0B:21
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/RpN8yNXdR3f4DSdXt3tk0xuMCyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.207.160.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:84:24:55:c1:01:72:71:92:ee:ea:35:ff:64:65:dd:2b:4b:
a0:39:1b:a3:64:9d:8c:da:78:77:43:8b:43:3d:ed:55:b9:2d:
3c:3a:fe:ec:f2:63:58:2e:69:7f:f9:f1:5f:3a:0e:b4:92:ab:
2b:41:3b:35:c3:e8:00:da:e8:e2:a8:e8:2d:fd:91:92:4b:23:
e4:e7:97:b7:48:c0:fa:09:ee:1c:24:21:14:1f:3f:b8:49:a0:
5c:9b:86:13:3a:60:8f:fc:47:15:ad:08:74:52:a0:f7:2d:e5:
cf:29:66:e9:e9:3a:a4:24:cf:49:44:e2:9c:92:6b:dd:18:bc:
2b:b9:23:8c:fd:c7:ef:8e:24:17:e8:a0:99:25:34:61:7d:a8:
12:c7:2a:a1:2e:18:14:79:b4:fe:b4:64:d1:97:37:2d:53:f8:
c6:e7:49:81:78:21:6e:b8:fa:4b:c6:a5:2e:0b:86:26:4e:16:
b8:ae:f4:7a:52:6a:f3:c6:41:47:b6:8c:b4:f4:74:b8:67:6d:
02:4b:af:4d:c8:59:06:5f:6f:5f:32:4c:75:47:a5:17:b3:17:
0f:fd:a8:f2:2a:ae:56:02:93:91:02:24:a8:4f:07:cf:88:b5:
d9:ce:97:52:ae:45:41:91:05:40:b7:14:8e:10:b4:32:81:18:
f7:cf:8f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:53:19 2026 by rpki-client