Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/b9HVxELSkUWjS8JHxN6EuFEVLgs.roa
File: b9HVxELSkUWjS8JHxN6EuFEVLgs.roa (raw, json)
Hash identifier: 1FsMHglhOQrNOheabccGL/jGW0Vs3V04/atVXnGsYRU=
Subject key identifier: 6F:D1:D5:C4:42:D2:91:45:A3:4B:C2:47:C4:DE:84:B8:51:15:2E:0B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019D88148B1C8247B86EA689001E7F8B0184
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/b9HVxELSkUWjS8JHxN6EuFEVLgs.roa
Signing time: Mon 13 Apr 2026 18:22:20 +0000
ROA not before: Mon 13 Apr 2026 18:22:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 103.114.41.0/24 maxlen: 24
2a0f:1740::/29 maxlen: 29
2a0f:e841::/32 maxlen: 32
2a13:18c2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:88:14:8b:1c:82:47:b8:6e:a6:89:00:1e:7f:8b:01:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 13 18:22:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fd1d5c442d29145a34bc247c4de84b851152e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fd:2e:47:ca:07:12:df:38:34:4d:d5:23:2e:
44:24:b5:58:f9:16:8e:85:d9:b6:63:62:bf:d8:eb:
64:b6:68:bb:a0:a5:8e:64:fb:72:6e:d2:cb:16:20:
b4:98:4d:30:82:ee:e5:69:ab:78:f1:06:dc:67:ef:
fa:c7:16:7e:29:03:9f:80:11:be:e5:df:e6:b6:d9:
69:ec:9c:6b:85:05:2e:5d:6a:74:ba:b6:fb:0a:52:
27:3c:ec:a2:88:7d:df:14:25:f2:45:8e:e0:cd:f4:
2a:82:71:41:56:8a:a0:9d:56:f4:3e:6e:9d:a7:4b:
b2:c5:94:1e:cd:e5:3b:0f:e0:e3:56:e7:0d:de:14:
d7:36:bb:fd:d8:aa:94:58:64:2e:53:b2:a0:f3:10:
07:63:58:d9:19:72:0c:54:c6:a9:a2:1f:90:cb:6d:
bf:a7:e0:0c:1d:c8:63:c4:ab:2c:97:9e:4c:7c:34:
32:28:34:dc:f2:fb:aa:10:be:56:6b:30:66:20:4e:
af:6e:72:08:1c:d5:74:e6:2b:f2:d2:07:b7:b6:3f:
69:d9:0e:24:64:09:54:c1:95:e4:77:2b:e6:2d:b0:
63:23:9c:a7:21:c2:f2:78:c1:f8:de:89:ee:0e:df:
3b:dc:e1:99:f3:75:d3:4c:78:ce:9a:ca:04:67:58:
46:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D1:D5:C4:42:D2:91:45:A3:4B:C2:47:C4:DE:84:B8:51:15:2E:0B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/b9HVxELSkUWjS8JHxN6EuFEVLgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.114.41.0/24
IPv6:
2a0f:1740::/29
2a0f:e841::/32
2a13:18c2::/32
Signature Algorithm: sha256WithRSAEncryption
90:f8:37:40:1f:89:49:49:0a:56:c0:b3:68:2a:0d:80:7f:38:
ca:5d:b7:b3:b7:17:ee:74:34:e3:1f:04:4e:02:32:82:ba:06:
a0:16:47:f3:c2:b0:38:35:aa:b8:23:23:e5:46:ff:6a:d8:8e:
1d:fc:e4:58:8e:65:2f:4d:f5:64:cf:3d:a9:6c:0d:8d:f9:53:
22:14:e2:49:86:5a:f1:42:11:eb:1d:88:d5:71:0b:4f:05:39:
5f:9d:1a:15:9f:8f:01:40:e7:1c:ab:c5:8e:78:1b:5b:69:9b:
a2:f0:8c:33:3c:b9:e8:b1:61:20:50:03:ca:60:9d:4d:70:cc:
0e:35:08:4e:52:5a:ef:fe:b8:b5:6e:1d:cd:f7:a9:3b:20:d7:
27:0a:39:8b:e9:2d:84:a6:a4:a2:a9:58:ef:7e:88:7d:bf:b7:
97:e6:44:8e:5d:d1:60:a2:40:67:4c:62:65:38:a8:7a:7e:46:
ec:ce:47:a7:db:e6:2e:e1:cf:c4:9a:eb:6d:9a:b6:59:f2:7e:
c5:86:a1:37:3a:18:66:de:92:e4:55:c9:65:b2:0e:39:a5:78:
8e:79:bf:15:58:2a:11:7a:87:10:5b:75:2d:ab:78:a4:37:e9:
69:a4:48:dc:8f:95:ef:88:33:98:fe:03:c9:8f:bf:ff:50:50:
7e:4f:bc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:39:30 2026 by rpki-client