Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mUmWXIJqeNFvAAyi0DqAnAXZgxQ.roa
File: mUmWXIJqeNFvAAyi0DqAnAXZgxQ.roa (raw, json)
Hash identifier: AG/bpa5gEjbJwuBljO3BrYEkkCKwceDGoxo3MPB/dO4=
Subject key identifier: 99:49:96:5C:82:6A:78:D1:6F:00:0C:A2:D0:3A:80:9C:05:D9:83:14
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019D6CAF9A34CC7611077B9493CB68537117
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mUmWXIJqeNFvAAyi0DqAnAXZgxQ.roa
Signing time: Wed 08 Apr 2026 10:42:20 +0000
ROA not before: Wed 08 Apr 2026 10:42:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140543
IP address blocks: 103.110.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:46:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6c:af:9a:34:cc:76:11:07:7b:94:93:cb:68:53:71:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 8 10:42:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9949965c826a78d16f000ca2d03a809c05d98314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ec:b3:0f:3b:92:0b:16:c3:0c:8c:ef:6f:20:
ac:c1:97:52:82:c5:a7:e1:69:ad:fe:20:b1:ab:5a:
a4:8b:f7:3e:93:66:43:b6:40:fb:dc:5f:bb:5a:e5:
28:c3:1d:18:2f:78:9f:2f:68:48:21:20:e1:6f:3c:
55:0f:96:53:41:be:52:c0:96:76:1b:d1:84:78:38:
68:75:7c:94:ef:b0:58:94:01:d8:a1:e7:97:a2:9a:
f2:69:c5:a3:23:07:d2:b9:c5:0b:86:6a:28:ea:a6:
29:3e:a6:13:c0:6a:b5:77:a1:de:ea:2f:3b:bb:88:
57:0c:d8:98:f8:2f:f4:4b:66:c7:a1:21:5b:e6:c7:
8d:19:22:94:3f:d2:d7:ac:36:c7:a4:89:d2:73:3c:
35:b0:30:fb:9e:aa:51:47:bf:cd:3c:b2:60:df:96:
d4:e8:22:c1:60:85:df:00:46:fc:4b:54:15:83:25:
da:3e:40:f4:74:87:35:6b:cc:e6:7f:6e:ac:ed:b3:
f8:ec:18:e7:c6:d6:54:ed:99:a1:3f:75:e8:1b:2f:
7b:84:2b:d6:85:65:b3:a7:71:d4:37:17:8e:ac:14:
d7:1b:7a:41:6a:8c:58:84:2b:85:62:85:ca:e7:22:
89:5b:fe:7a:e9:6c:f9:9b:8a:28:a2:7a:dc:b1:bd:
b3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:49:96:5C:82:6A:78:D1:6F:00:0C:A2:D0:3A:80:9C:05:D9:83:14
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/mUmWXIJqeNFvAAyi0DqAnAXZgxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.110.39.0/24
Signature Algorithm: sha256WithRSAEncryption
74:e4:71:a9:62:52:d5:8c:bf:3d:7b:6a:7d:16:39:b9:c8:5a:
24:cc:b4:0c:23:b2:96:21:59:4c:a8:be:70:eb:7a:c9:7d:4e:
d1:f4:e3:7b:dd:6f:4b:56:11:c1:be:f4:b5:ed:ef:4f:b2:e8:
d3:a8:8f:e1:02:20:7f:9a:bc:b9:78:85:35:88:4b:3d:65:02:
d6:e3:48:59:4d:10:d5:bd:99:f1:e3:f5:0a:33:7c:07:97:6a:
da:ac:61:8b:bf:6b:14:32:a6:92:3a:14:e7:8b:fb:d5:aa:ed:
25:54:a5:01:98:20:53:68:05:7c:94:0f:33:c2:fc:d4:69:3b:
aa:c5:c8:cb:10:a9:d3:4a:69:54:50:73:a0:1a:51:44:8e:69:
ae:7d:ad:ec:66:33:70:d0:2f:c8:e0:2d:d4:6d:79:0a:1d:1c:
df:55:bf:13:2c:16:fc:9d:f3:2f:0c:38:98:2d:85:28:c7:26:
2b:15:da:e6:4e:46:fd:54:a7:e3:b6:e0:1b:ce:c5:9c:45:80:
f3:3a:32:8b:aa:f9:1d:9f:3e:8b:15:b4:02:03:6d:b7:c6:66:
4e:b6:62:74:e8:3a:0c:7c:ca:71:c3:a9:76:87:47:f2:e7:76:
10:9a:68:85:01:9c:2d:07:76:06:f8:e1:4a:18:27:ae:4a:60:
6a:44:6e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:20:32 2026 by rpki-client