Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sTlEVnYem26s5QUr5CYWqThRznM.roa
File: sTlEVnYem26s5QUr5CYWqThRznM.roa (raw, json)
Hash identifier: FNlLwXkz/NMg32AD83gxIkILaxjz7efp5HCvx+1SlJQ=
Subject key identifier: B1:39:44:56:76:1E:9B:6E:AC:E5:05:2B:E4:26:16:A9:38:51:CE:73
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A086B3D66B52BFFF9DCF624F8522E37F7C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sTlEVnYem26s5QUr5CYWqThRznM.roa
Signing time: Wed 09 Sep 2026 15:05:27 +0000
ROA not before: Wed 09 Sep 2026 15:05:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 103.114.41.0/24 maxlen: 24
2a0a:2d02::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:b3:d6:6b:52:bf:ff:9d:cf:62:4f:85:22:e3:7f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 9 15:05:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b1394456761e9b6eace5052be42616a93851ce73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5f:8f:0b:d7:fe:69:27:0a:27:55:67:1b:44:
62:a3:ec:a7:2e:da:1a:3c:a8:c0:a4:41:d9:ac:f3:
36:dd:da:17:7d:08:f6:3f:8f:db:d8:ec:cf:32:27:
99:c6:f5:03:2b:9d:ab:1a:5e:50:03:87:5b:6d:2e:
69:e0:41:37:05:77:07:ec:20:8d:26:90:fe:f0:ee:
7e:af:f3:4c:21:bd:95:d6:17:bd:3b:d9:f1:41:93:
61:2b:eb:dc:7f:86:90:e5:eb:e8:cb:64:28:37:8c:
0e:d7:56:1a:d6:2c:61:5f:50:8d:ec:89:6f:72:9e:
92:4e:64:ab:5f:31:8a:ac:44:11:44:1c:de:16:d2:
84:bc:86:e3:81:88:a5:d2:6f:70:61:9a:76:1d:53:
5b:2e:cf:56:c0:b3:c3:44:dc:ef:be:f9:5d:09:62:
c1:d1:f5:3d:db:72:2d:f8:7f:0b:d2:d2:48:e9:81:
cc:c8:95:a3:51:8a:76:2b:d2:86:a4:b0:53:aa:85:
d0:28:9f:f1:d9:a3:b5:56:4b:22:f3:f4:e7:cf:67:
8d:f0:97:38:05:52:6a:f5:ff:df:21:c8:36:c6:6f:
47:4d:35:a6:61:f8:a5:5c:cd:51:a9:65:66:b4:3d:
7d:96:cf:e9:70:70:fe:06:0b:43:44:f2:a1:b9:d9:
ec:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:39:44:56:76:1E:9B:6E:AC:E5:05:2B:E4:26:16:A9:38:51:CE:73
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sTlEVnYem26s5QUr5CYWqThRznM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.114.41.0/24
IPv6:
2a0a:2d02::/32
Signature Algorithm: sha256WithRSAEncryption
81:46:8b:ed:ab:04:e0:cb:d0:47:7e:1e:2a:52:dc:7a:85:32:
d3:f3:f8:2d:f5:ce:8c:f6:02:e8:05:ac:4e:59:8f:9a:cf:86:
cb:f4:35:f0:11:0f:84:49:af:c2:2c:2b:05:0c:75:50:f3:b8:
bb:22:87:dc:61:90:0b:31:8b:ef:59:6d:06:25:b6:92:10:0d:
c3:4e:d5:79:31:3b:63:62:19:11:74:6e:d6:c8:15:61:70:08:
83:3a:9c:39:18:27:7c:22:55:33:0d:d4:a2:a9:ae:01:95:d7:
f1:37:21:f7:1b:f8:d7:0b:19:59:20:35:26:46:3d:6a:bf:7c:
2d:3e:cc:3d:e4:a3:ca:cf:e9:02:13:74:59:f6:08:9c:01:5d:
60:e5:4f:61:a8:05:1f:2b:01:52:ae:a1:0c:c5:ff:14:3e:e1:
8a:7d:16:6c:ca:57:23:34:56:98:2c:29:02:37:e1:27:ec:14:
dc:66:cc:e9:0c:23:8a:86:be:57:57:0a:32:f4:ba:d1:1d:01:
5b:52:dd:99:b6:98:4c:50:9a:d0:6d:93:d6:77:00:ed:67:a6:
ed:13:df:23:82:52:e1:89:24:33:fa:7f:f0:6b:f8:2e:7d:ec:
b1:a7:69:f5:98:ee:e5:39:1a:7a:49:c6:ee:8d:b8:c0:84:b7:
96:d4:6a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:55:26 2026 by rpki-client