Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/6yxT7E_fdeCTQ-SymYhV5m-tiWQ.roa
File: 6yxT7E_fdeCTQ-SymYhV5m-tiWQ.roa (raw, json)
Hash identifier: J8COtkEejDGS53ctyJGexs9JjOIjhVnFEmRqNL9+E3c=
Subject key identifier: EB:2C:53:EC:4F:DF:75:E0:93:43:E4:B2:99:88:55:E6:6F:AD:89:64
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019D614810922CA57831119A3C2AB1F4AB96
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/6yxT7E_fdeCTQ-SymYhV5m-tiWQ.roa
Signing time: Mon 06 Apr 2026 05:33:25 +0000
ROA not before: Mon 06 Apr 2026 05:33:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141718
IP address blocks: 45.155.90.0/24 maxlen: 24
45.155.226.0/24 maxlen: 24
45.156.222.0/24 maxlen: 24
45.156.223.0/24 maxlen: 24
103.100.169.0/24 maxlen: 24
103.211.103.0/24 maxlen: 24
172.110.208.0/24 maxlen: 24
172.110.210.0/24 maxlen: 24
172.110.211.0/24 maxlen: 24
172.110.220.0/24 maxlen: 24
172.110.221.0/24 maxlen: 24
185.233.17.0/24 maxlen: 24
202.71.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:61:48:10:92:2c:a5:78:31:11:9a:3c:2a:b1:f4:ab:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Apr 6 05:33:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb2c53ec4fdf75e09343e4b2998855e66fad8964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:34:66:2d:10:9d:11:8c:e9:a5:02:da:82:02:
4a:9d:c1:a0:f7:a1:21:ea:9c:6b:9c:16:63:41:09:
d6:60:8a:23:d9:0a:d0:20:b2:46:c8:ff:4d:68:74:
0a:84:38:e2:13:fd:71:97:a2:58:ff:04:e2:b1:55:
da:ee:ee:50:30:a2:66:7f:6f:00:ad:cd:a9:0c:f0:
29:29:5b:c1:03:b9:37:65:2e:ad:3f:1c:ee:81:b7:
ed:6e:32:17:a3:7b:44:f2:a7:96:36:e1:c9:6f:65:
6c:81:41:44:74:38:8d:85:72:ab:5f:9d:26:90:95:
de:5d:53:1f:4f:aa:60:d3:d5:7d:b0:13:87:e6:77:
57:1e:7a:67:76:b8:08:ae:04:61:a0:92:83:58:c1:
8f:41:a7:de:dc:bd:60:29:05:59:81:10:f2:5c:5b:
f1:51:8a:c4:72:3c:24:e0:c1:c5:94:72:b0:37:95:
3e:be:66:c2:de:16:96:59:18:26:28:14:63:72:8a:
1d:55:54:db:59:3f:de:b3:06:55:cc:3f:7f:0b:fb:
47:4e:37:59:c9:ed:96:0d:91:0a:d5:8f:a7:59:2b:
25:a1:3a:15:85:c1:a2:d7:9e:05:d5:63:7e:71:9b:
a9:00:8f:ef:16:6a:00:4e:d5:41:e4:43:6a:b6:df:
25:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2C:53:EC:4F:DF:75:E0:93:43:E4:B2:99:88:55:E6:6F:AD:89:64
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/6yxT7E_fdeCTQ-SymYhV5m-tiWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.90.0/24
45.155.226.0/24
45.156.222.0/23
103.100.169.0/24
103.211.103.0/24
172.110.208.0/24
172.110.210.0/23
172.110.220.0/23
185.233.17.0/24
202.71.10.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:69:0f:21:2d:6b:55:52:56:3f:e8:0d:43:36:30:a8:16:0c:
d5:a3:1c:21:cd:aa:5b:69:d3:48:96:9e:d5:d8:66:71:95:21:
f3:ce:18:3e:3a:80:8a:00:71:8f:bc:00:e8:23:c9:75:c5:a6:
d1:6d:2e:5a:72:04:db:82:1f:64:0d:8c:31:a4:38:5a:4a:c0:
6b:c2:58:02:1e:f4:de:7f:fe:fb:fa:24:1e:a8:16:25:a7:b9:
a6:7e:98:9e:b1:35:1d:c5:4b:74:b4:02:61:45:e5:fd:d8:eb:
4b:73:63:9b:2f:8d:e8:81:fd:af:d5:14:ae:76:e6:24:58:fe:
6f:75:76:a2:50:da:b1:0f:00:27:c5:26:a1:b2:d9:c4:27:d4:
01:ba:14:12:65:d0:a8:5c:1a:a9:ad:af:e1:18:f9:22:7a:85:
76:dc:8c:a6:99:fd:5b:14:1d:e5:b2:82:55:c9:2b:4c:af:e8:
bb:83:bc:58:5e:55:ec:16:5b:34:92:7e:4e:33:fe:f4:28:08:
94:33:c4:c5:98:72:78:57:79:a9:4d:6b:72:82:02:b8:e5:31:
5d:7a:16:0d:4d:20:87:ef:3f:ab:2f:1d:19:3d:d3:bb:e9:12:
84:b0:54:48:fc:33:d2:81:8c:d6:c6:9b:19:c8:6d:e5:3c:bc:
fa:fb:6b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:18:20 2026 by rpki-client