Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/A__uftTJfUQScTKvf0ZCZUS0aAc.roa
File: A__uftTJfUQScTKvf0ZCZUS0aAc.roa (raw, json)
Hash identifier: InE5+Cavsi4Z8kpY1c5G+Ux8kKsvzWwxBaCxmbKO2Io=
Subject key identifier: 03:FF:EE:7E:D4:C9:7D:44:12:71:32:AF:7F:46:42:65:44:B4:68:07
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A086EAC436449839593A2ADC99B67E97C5
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/A__uftTJfUQScTKvf0ZCZUS0aAc.roa
Signing time: Wed 09 Sep 2026 16:05:27 +0000
ROA not before: Wed 09 Sep 2026 16:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36137
IP address blocks: 103.124.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:ea:c4:36:44:98:39:59:3a:2a:dc:99:b6:7e:97:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Sep 9 16:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03ffee7ed4c97d44127132af7f46426544b46807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:18:84:2c:04:33:42:ec:a2:9b:59:26:61:b0:
ec:8a:41:fc:da:40:45:4f:d7:03:2d:67:d1:ce:e0:
4c:c8:88:90:80:0d:db:22:85:1d:75:d0:84:fa:c4:
29:92:f7:17:94:78:ab:cf:4b:37:be:eb:a0:f0:98:
b0:54:bb:13:c1:37:99:36:e7:71:c4:27:22:11:a0:
fd:75:20:9b:f7:55:92:83:0f:e4:1e:26:31:5d:0f:
d1:f6:47:75:95:bd:15:ff:da:c9:a7:f2:98:6b:b6:
6e:eb:e4:73:5d:a9:78:d1:44:c7:96:23:0f:0c:47:
01:43:da:da:f5:8d:7e:b8:c5:af:32:4d:cb:8d:8f:
43:11:1d:35:f0:ad:61:13:ec:96:33:a0:04:ce:59:
84:69:d5:85:39:c2:8e:8f:e2:40:37:11:7c:1a:bc:
cd:c9:3c:c6:da:be:b4:ec:21:20:8c:16:e6:ff:c1:
35:8c:35:67:c0:f5:c9:48:c6:7b:2e:9d:af:db:4d:
a7:cb:2d:12:ce:3e:30:7e:50:6e:83:ea:0f:89:9f:
be:be:e8:5b:81:e3:9f:30:cf:ab:00:9b:67:f7:61:
d4:a7:6f:f8:85:22:f4:95:1f:c5:ae:e6:d3:f7:55:
de:ce:13:76:36:3c:e0:6c:98:8c:93:dc:fd:25:cf:
b7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FF:EE:7E:D4:C9:7D:44:12:71:32:AF:7F:46:42:65:44:B4:68:07
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/A__uftTJfUQScTKvf0ZCZUS0aAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.124.156.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:aa:44:02:18:27:92:e4:ec:21:a4:48:e4:d1:15:7c:e5:01:
a8:76:80:ed:79:41:d6:12:4d:d9:eb:72:23:2f:ce:c6:9d:b1:
4d:71:46:d9:a7:a9:9c:bd:56:4f:f6:fc:89:19:5f:0b:c5:c8:
26:51:d8:ea:3d:50:9f:15:c1:34:67:13:e4:2d:89:2b:b2:0f:
f2:04:cd:8e:1d:18:ad:41:57:d7:1f:c1:ea:8a:45:a7:d3:b0:
72:05:6e:21:ce:80:4b:cd:4a:fe:be:b5:70:ca:fd:14:36:11:
32:78:eb:e3:8c:33:69:8c:13:45:90:bd:62:d6:b2:38:79:a4:
c1:92:f3:27:a8:3c:a7:82:1e:d0:9e:3f:c5:48:47:db:6d:e4:
d3:85:f2:42:d9:71:bd:7f:52:cc:ff:55:30:c0:b8:26:8f:84:
42:5b:ea:15:1a:d4:45:68:68:f6:e9:5d:42:07:ee:b1:e4:16:
50:72:8b:9e:62:5f:1e:c4:bf:99:c7:23:cf:3c:69:2c:7c:bf:
42:69:b3:2f:70:4a:17:f9:7d:84:a8:84:7d:4d:cf:e4:84:ea:
5f:41:a1:0a:a3:a8:09:ec:cc:93:0e:70:60:e1:56:75:4a:0d:
36:52:82:89:78:e1:e5:85:c0:53:8a:84:ab:da:56:0c:9a:d8:
2f:0f:78:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:32:21 2026 by rpki-client