Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/RcbLaeTbCAZLw25p83aKvuQ5Erw.roa
File: RcbLaeTbCAZLw25p83aKvuQ5Erw.roa (raw, json)
Hash identifier: Xxfd9XbUnWx6HStvfPUJjN1K3bZrwPDQhwn+KQBjwWw=
Subject key identifier: 45:C6:CB:69:E4:DB:08:06:4B:C3:6E:69:F3:76:8A:BE:E4:39:12:BC
Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial: 01A1A5067646FAA776178356A4994DFCF3E8
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/RcbLaeTbCAZLw25p83aKvuQ5Erw.roa
Signing time: Wed 04 Nov 2026 05:27:06 +0000
ROA not before: Wed 04 Nov 2026 05:27:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211392
IP address blocks: 103.250.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a5:06:76:46:fa:a7:76:17:83:56:a4:99:4d:fc:f3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Validity
Not Before: Nov 4 05:27:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45c6cb69e4db08064bc36e69f3768abee43912bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:75:9e:1b:31:81:86:cc:65:9c:cc:c1:ab:
21:54:6e:a4:b4:49:18:f6:86:40:29:36:95:e1:7a:
27:51:52:e4:0e:38:a2:68:80:92:41:11:32:0c:ba:
6c:1e:47:38:ed:78:f4:55:78:93:c9:e0:b3:fc:f3:
6e:66:77:73:b4:8b:ee:c8:2b:a9:be:be:11:72:c0:
33:0b:39:39:19:18:67:8b:fb:da:10:72:fd:b4:f9:
e9:71:49:11:87:03:03:f7:91:fd:64:73:f9:13:05:
24:a5:1e:62:b5:90:13:aa:1c:c8:b2:f0:56:ca:58:
41:ee:27:97:4d:04:83:f5:3f:2b:31:91:7d:f0:19:
a4:e5:59:68:d3:12:aa:46:aa:fe:99:48:cc:2f:79:
00:a4:b9:07:73:0c:a6:10:80:69:36:7d:01:86:2f:
8b:c0:34:5b:7e:92:4f:7c:e1:95:a0:68:26:18:37:
fb:f1:03:3d:2a:15:ac:23:9a:96:7f:11:1a:7d:2f:
0a:8d:40:ef:25:70:b6:5a:10:60:f5:6b:66:82:c1:
fb:12:0d:b3:c1:28:2a:4a:a3:04:43:b4:a8:de:56:
59:94:e3:f0:25:5f:af:1f:a9:d8:e1:20:65:6b:e2:
22:f4:7b:62:29:d9:21:f0:fa:aa:2c:80:76:45:8b:
34:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C6:CB:69:E4:DB:08:06:4B:C3:6E:69:F3:76:8A:BE:E4:39:12:BC
X509v3 Authority Key Identifier:
keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/RcbLaeTbCAZLw25p83aKvuQ5Erw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.250.172.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:8b:0b:06:c1:74:69:01:cb:17:d5:4b:73:4c:03:bc:c1:a7:
07:9a:ce:cc:c6:50:48:5a:bc:39:d2:ae:80:1f:67:a0:6c:ff:
97:76:a9:a0:b4:8c:66:59:33:40:ba:fd:fa:8a:63:a0:3a:40:
18:55:dd:65:f4:a2:b1:7e:28:fa:a9:67:32:55:72:0b:33:17:
07:b6:29:a5:4b:e9:c8:6c:fa:41:91:61:e2:82:82:1d:4d:d3:
60:63:27:13:3b:d5:28:1f:d3:7e:9b:fa:28:e4:80:b0:31:8c:
ce:49:36:a1:a0:9e:36:0f:f8:2e:f4:0c:e1:e1:98:9b:12:c8:
b4:ce:90:a1:94:3e:f9:80:c4:4d:ea:02:72:02:94:ac:4a:4e:
40:d5:cd:ef:41:e5:8a:6b:ed:b9:ef:42:16:54:ad:ed:5a:c1:
28:57:c8:fb:5f:7a:06:4b:7c:4c:7d:1b:9f:24:6c:85:0c:1a:
c5:7f:8d:06:70:81:79:10:61:d1:d7:ea:7e:86:29:9e:56:06:
42:64:e5:9b:08:2f:72:86:81:ab:6c:84:a0:c7:e8:34:72:28:
70:0d:d5:23:dd:b9:d9:56:72:c0:96:c5:af:f8:bd:33:89:59:
33:35:9e:a0:c0:1c:62:45:e0:bb:76:57:09:e9:7e:96:35:29:
56:c9:a9:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGlBnZG+qd2F4NWpJlN/PPoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MDRjYzBlMDM4ZWIwZTY5N2VjNmU3YWU0OWQwMjg2MTQ2
ZTBjMWEwHhcNMjYxMTA0MDUyNzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWM2Y2I2OWU0ZGIwODA2NGJjMzZlNjlmMzc2OGFiZWU0MzkxMmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCN1nhsxgYbMZZzMwashVG6ktEkY
9oZAKTaV4XonUVLkDjiiaICSQREyDLpsHkc47Xj0VXiTyeCz/PNuZndztIvuyCup
vr4RcsAzCzk5GRhni/vaEHL9tPnpcUkRhwMD95H9ZHP5EwUkpR5itZATqhzIsvBW
ylhB7ieXTQSD9T8rMZF98Bmk5Vlo0xKqRqr+mUjML3kApLkHcwymEIBpNn0Bhi+L
wDRbfpJPfOGVoGgmGDf78QM9KhWsI5qWfxEafS8KjUDvJXC2WhBg9WtmgsH7Eg2z
wSgqSqMEQ7So3lZZlOPwJV+vH6nY4SBla+Ii9HtiKdkh8PqqLIB2RYs0dQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEXGy2nk2wgGS8NuafN2ir7kORK8MB8GA1UdIwQY
MBaAFLQEzA4DjrDml+xueuSdAoYUbgwaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEFUTURnT09zT2FYN0c1NjVKMENoaFJ1REJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hYmUxNmItOTJjYy00OGUzLWI1Yjkt
ODZhMmYwNjdiNGU4LzEvUmNiTGFlVGJDQVpMdzI1cDgzYUt2dVE1RXJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9hYmUxNmItOTJjYy00OGUzLWI1YjktODZhMmYwNjdiNGU4
LzEvdEFUTURnT09zT2FYN0c1NjVKMENoaFJ1REJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/qsMA0G
CSqGSIb3DQEBCwUAA4IBAQCjiwsGwXRpAcsX1UtzTAO8wacHms7MxlBIWrw50q6A
H2egbP+XdqmgtIxmWTNAuv36imOgOkAYVd1l9KKxfij6qWcyVXILMxcHtimlS+nI
bPpBkWHigoIdTdNgYycTO9UoH9N+m/oo5ICwMYzOSTahoJ42D/gu9Azh4ZibEsi0
zpChlD75gMRN6gJyApSsSk5A1c3vQeWKa+2570IWVK3tWsEoV8j7X3oGS3xMfRuf
JGyFDBrFf40GcIF5EGHR1+p+himeVgZCZOWbCC9yhoGrbISgx+g0cihwDdUj3bnZ
VnLAlsWv+L0ziVkzNZ6gwBxiReC7dlcJ6X6WNSlWyalh
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:55:25 2026 by rpki-client