Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2yhnwtEQim4Cj7LdICPptqajMYo.roa
File: 2yhnwtEQim4Cj7LdICPptqajMYo.roa (raw, json)
Hash identifier: fPoKqijvhgpsNPLaeYs1B0CpcJnvAWTfV/6mAHisDzk=
Subject key identifier: DB:28:67:C2:D1:10:8A:6E:02:8F:B2:DD:20:23:E9:B6:A6:A3:31:8A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A19B75B2B6EACEE67E7ADC2E56A6A4483C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2yhnwtEQim4Cj7LdICPptqajMYo.roa
Signing time: Mon 02 Nov 2026 08:52:24 +0000
ROA not before: Mon 02 Nov 2026 08:52:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 103.227.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:37:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:75:b2:b6:ea:ce:e6:7e:7a:dc:2e:56:a6:a4:48:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 2 08:52:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db2867c2d1108a6e028fb2dd2023e9b6a6a3318a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:2f:bd:6f:b3:3a:30:26:9e:9c:2a:7a:10:
94:d2:e9:05:f5:94:be:cb:ef:a9:29:b9:d1:61:c5:
47:8c:cd:a9:f0:a8:38:0b:79:c6:7b:d8:ca:60:4e:
b2:ec:0d:64:1b:15:37:d9:fe:1d:22:c6:52:7b:53:
50:95:9a:5d:81:20:c4:b6:cb:78:89:6e:e9:0f:22:
f9:7a:a9:8a:8b:73:25:19:bb:96:25:ed:4b:18:a3:
b3:53:f1:d9:9e:85:5c:7f:e0:20:78:13:cc:69:7b:
32:af:ff:b2:5d:27:fb:a5:23:02:ea:49:8f:f7:c5:
0a:d7:e1:41:2a:3c:e4:10:1f:f3:0c:b0:b8:45:07:
56:05:40:fa:ec:29:b4:11:85:c8:08:e0:3e:63:28:
01:89:70:3d:9b:fd:74:96:c1:1d:28:f4:f2:bb:7d:
42:38:0c:df:ac:d3:22:44:67:6e:01:b6:c3:cc:d0:
6f:45:37:6e:a7:1a:27:94:fe:6c:ff:ce:60:f3:20:
25:61:ca:a5:1b:2a:99:f3:78:be:c5:3f:43:89:a9:
73:5a:0e:3e:41:ef:29:b0:77:dd:b8:5c:18:91:77:
cf:d1:0f:3e:1a:98:57:c8:d0:51:3a:80:f3:69:3e:
23:5f:a3:61:35:60:ad:ad:64:23:5e:be:92:e0:5e:
c9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:28:67:C2:D1:10:8A:6E:02:8F:B2:DD:20:23:E9:B6:A6:A3:31:8A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2yhnwtEQim4Cj7LdICPptqajMYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.227.87.0/24
Signature Algorithm: sha256WithRSAEncryption
73:eb:1c:85:ab:13:2f:14:22:1e:fb:f3:2c:63:e0:82:0d:97:
dd:96:de:70:a9:9f:58:04:97:6b:db:8f:bb:a6:b1:f5:8a:12:
b4:48:e8:06:3e:87:b5:7b:0f:3a:e5:35:0b:7b:ee:7d:f0:eb:
55:63:0b:35:e4:ee:5d:bb:e2:ee:3b:7d:24:bc:75:2b:d4:60:
db:11:b9:04:7b:9b:c2:21:16:e3:8b:4e:56:87:a3:0d:61:f9:
0b:8d:59:78:a4:1e:46:19:e8:df:77:4a:2f:8f:ec:3e:e1:85:
cb:38:61:ba:26:fa:d3:7d:a7:ec:2e:63:d4:8e:e8:3f:de:6c:
34:46:31:2a:c3:8a:25:9a:72:4d:18:47:66:99:1e:f6:6d:b4:
6a:75:46:ff:3b:97:d5:6a:a4:81:29:85:87:91:12:33:fb:43:
9f:d5:01:85:ad:00:82:75:dd:b3:80:d6:27:cd:ca:e8:88:5e:
87:42:4d:27:b6:3e:68:f6:88:f6:ec:80:2d:19:67:9e:fc:09:
06:a3:55:0f:a9:1d:10:08:19:06:98:10:3d:c2:e1:b4:c8:7c:
36:e8:4e:dd:e9:5a:70:fe:4e:4c:15:d8:6f:51:11:56:51:ae:
29:f5:0e:1d:49:4a:f1:1b:09:9c:2a:d7:cb:6f:1e:f2:f1:80:
ce:47:5d:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGbdbK26s7mfnrcLlampEg8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYxMTAyMDg1MjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjI4NjdjMmQxMTA4YTZlMDI4ZmIyZGQyMDIzZTliNmE2YTMzMThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwovvW+zOjAmnpwqehCU0ukF9ZS+
y++pKbnRYcVHjM2p8Kg4C3nGe9jKYE6y7A1kGxU32f4dIsZSe1NQlZpdgSDEtst4
iW7pDyL5eqmKi3MlGbuWJe1LGKOzU/HZnoVcf+AgeBPMaXsyr/+yXSf7pSMC6kmP
98UK1+FBKjzkEB/zDLC4RQdWBUD67Cm0EYXICOA+YygBiXA9m/10lsEdKPTyu31C
OAzfrNMiRGduAbbDzNBvRTdupxonlP5s/85g8yAlYcqlGyqZ83i+xT9DialzWg4+
Qe8psHfduFwYkXfP0Q8+GphXyNBROoDzaT4jX6NhNWCtrWQjXr6S4F7JmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNsoZ8LREIpuAo+y3SAj6bamozGKMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvMnlobnd0RVFpbTRDajdMZElDUHB0cWFqTVlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+NXMA0G
CSqGSIb3DQEBCwUAA4IBAQBz6xyFqxMvFCIe+/MsY+CCDZfdlt5wqZ9YBJdr24+7
prH1ihK0SOgGPoe1ew865TULe+598OtVYws15O5du+LuO30kvHUr1GDbEbkEe5vC
IRbji05Wh6MNYfkLjVl4pB5GGejfd0ovj+w+4YXLOGG6JvrTfafsLmPUjug/3mw0
RjEqw4olmnJNGEdmmR72bbRqdUb/O5fVaqSBKYWHkRIz+0Of1QGFrQCCdd2zgNYn
zcroiF6HQk0ntj5o9oj27IAtGWee/AkGo1UPqR0QCBkGmBA9wuG0yHw26E7d6Vpw
/k5MFdhvURFWUa4p9Q4dSUrxGwmcKtfLbx7y8YDOR13Q
-----END CERTIFICATE-----
Generated at Thu Nov 5 18:51:29 2026 by rpki-client