Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/o2yjql9uyRNN4yVlCQT0XP8Xs_o.roa
File: o2yjql9uyRNN4yVlCQT0XP8Xs_o.roa (raw, json)
Hash identifier: CZoHYC/jmzttH0ioHTYAE0Acuu6D0VgKXvJRlVgV1nY=
Subject key identifier: A3:6C:A3:AA:5F:6E:C9:13:4D:E3:25:65:09:04:F4:5C:FF:17:B3:FA
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019FF97DAEB79C98B2B04EAA216018049E16
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/o2yjql9uyRNN4yVlCQT0XP8Xs_o.roa
Signing time: Thu 13 Aug 2026 04:59:51 +0000
ROA not before: Thu 13 Aug 2026 04:59:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149457
IP address blocks: 103.25.84.0/24 maxlen: 24
146.19.135.0/24 maxlen: 24
188.253.0.0/24 maxlen: 24
188.253.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:7d:ae:b7:9c:98:b2:b0:4e:aa:21:60:18:04:9e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Aug 13 04:59:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a36ca3aa5f6ec9134de325650904f45cff17b3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:06:e6:d2:07:fb:ad:fe:25:65:a1:57:2d:8d:
0a:52:9f:9b:5e:f9:ee:c8:73:b7:99:79:1f:f2:44:
76:c4:57:ea:c6:08:84:30:a6:e4:4a:41:7a:42:c4:
53:f0:ed:b8:bb:11:36:bd:8e:cb:dd:f6:e7:47:80:
74:f6:67:df:50:60:3d:4f:fc:00:96:4b:dd:b1:79:
e5:99:5d:5a:b4:6d:63:1a:90:c4:f3:fd:89:e5:8b:
3c:91:7c:9e:a9:1f:b5:68:a9:65:1c:41:23:f1:8c:
73:37:00:57:f9:91:d6:d4:cd:de:19:83:1c:a1:04:
7a:6c:08:3d:fb:aa:4d:85:e8:6b:e8:1d:5d:09:cc:
98:cb:22:b1:9e:48:fa:e0:ea:4c:b0:9b:4b:54:fc:
63:ab:9d:b8:66:e6:cb:56:fb:43:69:67:d1:03:6d:
96:b7:e4:21:cf:9b:3f:03:56:a3:72:9d:0c:2f:f5:
41:74:b2:5b:e5:3e:b7:2c:c2:f3:89:60:6c:78:d9:
e2:0e:9f:74:31:77:b1:47:0b:39:90:63:7b:de:f8:
a3:70:0c:32:7a:49:98:06:16:97:ed:69:5b:e4:52:
c9:f4:f8:f6:cf:e2:25:a6:ae:ea:43:f4:3e:a1:f8:
5b:4d:0b:4a:95:cb:ac:3f:10:79:8c:f2:c8:fb:bf:
f3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6C:A3:AA:5F:6E:C9:13:4D:E3:25:65:09:04:F4:5C:FF:17:B3:FA
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/o2yjql9uyRNN4yVlCQT0XP8Xs_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.25.84.0/24
146.19.135.0/24
188.253.0.0/23
Signature Algorithm: sha256WithRSAEncryption
42:5a:63:0b:72:8f:49:b7:48:0b:7a:af:f2:47:e9:38:86:a4:
6c:e2:cc:22:f8:45:6e:c0:f1:44:8f:cd:a1:e9:a8:a4:07:81:
4f:a4:9a:95:d7:be:75:67:ff:a3:8e:da:fc:78:9a:ab:61:96:
9e:83:38:84:39:56:ec:f2:9a:52:3b:94:53:79:46:43:95:aa:
fb:c4:d3:73:7a:e4:de:cd:64:25:a0:6c:d5:e0:f2:b5:62:28:
d7:be:c5:d7:be:bc:fb:4c:7d:15:81:e1:66:86:73:5a:09:19:
3c:5d:f6:47:ea:a8:5c:13:91:11:23:28:55:96:87:a7:9e:08:
08:ef:28:a9:21:70:bc:fd:96:2e:e1:2d:3e:b7:1d:72:fd:cc:
89:e5:86:d3:be:e5:4e:67:d6:45:b1:f3:2e:19:fe:ee:d1:ae:
b7:2d:9a:d9:54:9d:f0:68:94:83:fd:1c:2c:02:fd:fa:69:99:
3b:f0:c5:f0:48:98:4e:d1:3b:08:72:5f:63:cb:33:f3:15:49:
ed:98:84:d5:a8:4d:fc:f1:03:8a:3f:f7:3c:57:aa:99:e3:36:
6e:a7:6b:c4:8d:1b:db:54:66:6d:44:98:3b:d7:38:bc:4a:28:
7e:1d:eb:c2:86:e0:62:bb:95:f3:3a:22:61:c6:a7:c8:60:b8:
9c:85:0a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:58:54 2026 by rpki-client