Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/laxmMFQ70A9hbGm3vgsAxZetL8w.roa
File: laxmMFQ70A9hbGm3vgsAxZetL8w.roa (raw, json)
Hash identifier: OX9ADiSLLP9cl4qIeUdloL4juSc2Kj0rzwOIr5agoQw=
Subject key identifier: 95:AC:66:30:54:3B:D0:0F:61:6C:69:B7:BE:0B:00:C5:97:AD:2F:CC
Certificate issuer: /CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Certificate serial: 01A0C4218914A988C96735B111A2C8A0D947
Authority key identifier: E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/laxmMFQ70A9hbGm3vgsAxZetL8w.roa
Signing time: Mon 21 Sep 2026 13:22:07 +0000
ROA not before: Mon 21 Sep 2026 13:22:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208348
IP address blocks: 36.255.240.0/23 maxlen: 23
36.255.240.0/24 maxlen: 24
45.142.160.0/22 maxlen: 22
103.30.226.0/23 maxlen: 23
103.244.146.0/23 maxlen: 23
170.117.202.0/23 maxlen: 23
193.3.241.0/24 maxlen: 24
2a0e:f240::/29 maxlen: 29
2a0e:f240::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:21:89:14:a9:88:c9:67:35:b1:11:a2:c8:a0:d9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d
Validity
Not Before: Sep 21 13:22:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95ac6630543bd00f616c69b7be0b00c597ad2fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7c:8a:da:0e:d2:d9:d1:3e:b4:57:05:99:ad:
94:e5:01:ae:70:8d:4b:02:a1:5b:1b:1d:de:44:68:
e6:20:0a:47:80:a8:2a:0d:0e:1c:df:91:db:6e:84:
bc:88:17:29:1a:6b:07:e2:0f:5e:91:2f:b7:df:df:
f1:62:fb:be:f8:d0:88:2d:c7:ce:88:c4:0b:fd:25:
eb:cc:f9:93:79:9a:ff:0a:a4:87:17:e1:f8:a8:1e:
a6:78:13:66:f0:ea:b2:67:56:fa:15:c2:4f:e4:9d:
18:90:25:ee:06:f8:1d:5f:d1:88:89:6c:45:d8:f6:
cb:ea:64:ce:03:5b:00:8f:44:dd:f4:20:e1:ef:07:
ad:29:66:f1:8f:7f:c2:8c:37:aa:24:24:48:12:7d:
a3:05:74:b5:49:79:c3:1a:8b:b9:70:5b:91:18:30:
15:61:b9:11:38:3d:e4:54:c6:fd:29:f2:67:64:e1:
ad:df:aa:bc:be:89:4b:69:11:ab:69:0c:2f:b9:f0:
06:70:5c:6f:89:60:dd:8f:7d:0e:7b:49:83:5c:aa:
61:40:3d:55:af:d7:e4:03:81:ed:f1:83:ff:bd:9b:
dc:f8:c9:31:70:f9:38:d5:d9:b7:3f:1b:22:e9:36:
79:82:0c:32:d2:c8:84:68:c2:1e:5e:c6:98:79:dc:
f8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AC:66:30:54:3B:D0:0F:61:6C:69:B7:BE:0B:00:C5:97:AD:2F:CC
X509v3 Authority Key Identifier:
keyid:E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/laxmMFQ70A9hbGm3vgsAxZetL8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.240.0/23
45.142.160.0/22
103.30.226.0/23
103.244.146.0/23
170.117.202.0/23
193.3.241.0/24
IPv6:
2a0e:f240::/29
Signature Algorithm: sha256WithRSAEncryption
1f:14:68:1d:ac:7a:da:81:1a:90:d8:45:e3:d2:55:29:35:4b:
4f:30:85:71:50:4c:22:b0:67:b0:a0:ad:15:b4:d5:2c:61:ee:
3c:ec:67:64:e6:23:fc:72:89:45:03:26:96:64:77:08:27:d4:
1b:e7:b8:98:28:17:af:c1:2c:24:4f:4d:f9:80:c4:99:eb:26:
ff:d6:3e:5d:fa:e4:b3:d5:0a:30:d6:ef:36:12:56:10:e4:bc:
96:f4:06:af:1f:3e:32:fd:b2:20:50:a0:e4:95:13:e2:2b:21:
45:5c:e3:19:24:12:75:30:02:30:0d:4b:c3:6a:f9:7f:81:ab:
fa:9b:27:49:4f:2e:38:33:c0:3f:78:a9:e0:45:3d:bb:ca:fb:
d5:76:68:6b:ee:0b:a1:c3:4c:fe:b1:6f:92:1f:dc:e8:58:90:
b4:c0:d4:74:fc:a3:49:c0:08:f7:90:45:14:20:ca:57:02:86:
1a:e4:f1:a7:a0:e9:15:4f:18:6a:7f:b1:6b:2c:9e:3a:56:44:
0b:2b:b0:00:5b:3f:d3:f2:ac:16:93:d7:5e:f0:02:fb:4b:c0:
c0:57:f5:92:8f:d4:b4:a9:45:d8:b1:ac:32:72:bc:79:f8:b4:
bc:92:74:03:ec:0a:45:e3:04:ab:82:0e:5e:b8:9f:62:d1:42:
b1:66:f1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:52:06 2026 by rpki-client