Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/8XyER-CzmO7sNmHUx2G8OSfYrTI.roa
File: 8XyER-CzmO7sNmHUx2G8OSfYrTI.roa (raw, json)
Hash identifier: OJt/khgHG2iLFdlQeu/0cbi3laTKO6RHDtoh5R9RHJ0=
Subject key identifier: F1:7C:84:47:E0:B3:98:EE:EC:36:61:D4:C7:61:BC:39:27:D8:AD:32
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 019E97BCC068F30886D9D5DEA2379F8B4ACB
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/8XyER-CzmO7sNmHUx2G8OSfYrTI.roa
Signing time: Fri 05 Jun 2026 12:23:10 +0000
ROA not before: Fri 05 Jun 2026 12:23:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 55933
IP address blocks: 103.76.84.0/23 maxlen: 23
103.76.84.0/24 maxlen: 24
103.100.158.0/23 maxlen: 23
103.100.159.0/24 maxlen: 24
103.212.32.0/23 maxlen: 23
103.212.32.0/24 maxlen: 24
116.206.95.0/24 maxlen: 24
144.48.8.0/22 maxlen: 24
144.48.8.0/23 maxlen: 23
144.48.8.0/24 maxlen: 24
203.189.234.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:97:bc:c0:68:f3:08:86:d9:d5:de:a2:37:9f:8b:4a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Jun 5 12:23:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f17c8447e0b398eeec3661d4c761bc3927d8ad32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f2:0b:b9:ef:d4:76:95:9f:62:59:c5:0b:b8:
12:e6:a0:17:f6:48:c0:36:68:0e:b9:21:37:92:7b:
f0:0f:f3:0c:df:6e:0b:0d:f5:0f:0d:23:3a:06:aa:
30:eb:ce:75:cd:b8:67:89:05:1f:1e:ec:57:36:1d:
16:93:e9:2c:1a:2c:ad:6f:4f:e1:aa:a2:c1:8a:67:
84:1e:cb:aa:24:ca:17:7a:63:68:dc:91:95:76:e4:
f0:a1:68:36:94:ea:24:46:bb:88:90:dc:79:5a:0f:
61:6e:ef:74:d9:3e:97:cf:32:69:76:16:14:50:2a:
4e:2f:4c:5e:dd:31:d7:fe:0e:cf:40:dd:e9:de:21:
5f:ec:ce:a5:24:b3:6e:28:f2:9c:c7:e9:2b:b0:d5:
f2:c0:df:7a:4f:48:f0:bc:48:2c:85:76:d4:ec:a2:
ca:16:f7:90:8f:ea:05:0a:b5:e6:85:c3:2d:b1:d9:
1a:c1:70:31:31:e4:65:cd:26:bf:66:24:f7:11:e9:
05:e3:4b:82:69:63:08:9a:78:e8:fc:64:27:8c:54:
58:d0:79:0c:fd:75:bf:0f:db:77:e2:6d:e4:0d:8e:
e4:c9:bc:0c:25:71:8a:17:ef:8d:99:3b:fb:c0:a1:
16:bd:36:64:ca:61:53:0e:ff:2c:ab:71:05:2f:82:
61:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7C:84:47:E0:B3:98:EE:EC:36:61:D4:C7:61:BC:39:27:D8:AD:32
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/8XyER-CzmO7sNmHUx2G8OSfYrTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.84.0/23
103.100.158.0/23
103.212.32.0/23
116.206.95.0/24
144.48.8.0/22
203.189.234.0/23
Signature Algorithm: sha256WithRSAEncryption
75:f2:c5:74:ce:89:ec:da:5f:74:34:4d:4a:74:2f:6e:9f:20:
b7:28:e1:fb:60:f9:81:20:70:1c:81:4f:bb:1f:ac:fa:f3:21:
b4:89:ea:cc:2e:8d:6b:74:56:89:d2:aa:c1:7d:58:08:cf:ff:
ae:11:35:96:7f:38:86:02:d8:69:8a:8a:08:50:cd:c1:d9:5a:
67:59:99:1c:28:0e:46:56:d5:8b:50:1e:36:51:37:ab:e5:fc:
f5:49:4c:9f:40:61:74:80:8d:6f:a6:45:05:d3:c9:cc:b0:dc:
f2:ac:1b:b2:ea:b8:84:bb:85:d2:34:59:a2:89:6d:07:e5:16:
99:b5:8f:b7:43:65:48:b9:f2:8f:8d:90:f0:bc:50:51:84:6f:
93:a3:13:59:13:45:6f:f8:e4:fc:5d:78:00:90:5c:24:fb:80:
af:73:8c:6d:2a:32:13:4e:a7:26:db:df:a8:26:0b:93:ff:5e:
47:3f:e3:aa:5d:8c:40:89:0f:4e:d1:8e:8c:0d:2f:7e:5e:1e:
f6:68:19:6a:c8:5f:73:d3:ff:2a:9f:7b:85:dd:96:80:b4:72:
ca:89:65:90:0d:0c:7b:ff:5f:e1:ee:98:0b:de:e9:eb:5a:24:
05:4f:e1:7c:bc:d8:34:f6:72:9b:dc:d8:dd:dd:f4:da:82:1c:
db:ca:42:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:37:14 2026 by rpki-client