Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xWiJouzhk6L3obWZn1lctRvOSQ4.roa
File: xWiJouzhk6L3obWZn1lctRvOSQ4.roa (raw, json)
Hash identifier: qdq19ehN1RXtOyzH3l2EtOdcZ8zPwOl+lYOnk4Wa2rs=
Subject key identifier: C5:68:89:A2:EC:E1:93:A2:F7:A1:B5:99:9F:59:5C:B5:1B:CE:49:0E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019C8B5A292229B07EB1160AFA642D8D7CBB
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xWiJouzhk6L3obWZn1lctRvOSQ4.roa
Signing time: Mon 23 Feb 2026 16:34:27 +0000
ROA not before: Mon 23 Feb 2026 16:34:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 103.114.41.0/24 maxlen: 24
2a0e:5a80::/29 maxlen: 29
2a13:18c2::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8b:5a:29:22:29:b0:7e:b1:16:0a:fa:64:2d:8d:7c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 23 16:34:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c56889a2ece193a2f7a1b5999f595cb51bce490e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a4:80:1b:d0:66:3e:83:9d:71:9d:f1:62:8f:
49:e1:cb:20:cb:da:36:ca:ea:19:b5:b7:e1:d0:10:
a9:bd:a8:b4:44:5b:e6:b3:df:38:f2:f7:f5:59:86:
40:c5:94:a1:cf:ae:c1:b9:da:0a:92:54:79:82:80:
e5:2b:21:81:61:07:bc:bf:a3:c1:a2:57:bc:58:6b:
92:13:6a:c5:e4:2b:54:67:10:2f:af:c4:15:13:11:
7b:e9:f2:a2:28:b0:c2:7d:f3:6d:8a:97:e3:3c:f7:
d4:13:7a:f5:be:8f:17:6b:55:90:e8:05:05:ce:42:
e3:a2:73:34:e7:f9:72:25:23:c1:78:8b:b1:75:2b:
e6:da:3e:58:ad:39:7a:bb:9c:9d:bf:e9:80:cb:13:
82:c1:be:3f:1a:53:ad:a2:77:a9:91:67:60:4c:a5:
f4:ae:3a:16:96:fd:c2:36:9e:7a:a4:bb:26:de:25:
9d:6a:df:68:5f:38:67:96:86:f9:38:65:1b:a6:59:
e2:b1:3d:e6:48:fb:a4:08:56:77:93:5f:88:59:2f:
5a:7b:eb:5f:cb:7b:e9:aa:52:99:8e:2c:af:bc:59:
ec:56:68:fd:51:f7:a8:59:19:bd:41:52:44:37:5d:
2d:f4:d2:22:7d:24:ea:c6:7f:ac:b0:ad:89:4a:21:
e2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:68:89:A2:EC:E1:93:A2:F7:A1:B5:99:9F:59:5C:B5:1B:CE:49:0E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xWiJouzhk6L3obWZn1lctRvOSQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.114.41.0/24
IPv6:
2a0e:5a80::/29
2a13:18c2::/32
Signature Algorithm: sha256WithRSAEncryption
43:ec:77:87:de:0a:57:5e:b0:41:60:34:41:4f:eb:53:af:aa:
97:13:6d:c3:4b:53:9d:c3:99:6f:ce:d0:c1:63:f8:7f:af:58:
33:5a:d8:7f:68:11:44:4d:a7:db:f2:f6:d0:ec:06:e0:32:ac:
bc:16:9a:34:77:7a:75:48:ca:ca:21:bc:05:8f:a7:5b:fb:c8:
c6:6b:30:68:c8:56:15:29:07:2f:5b:7b:a4:cd:f1:1a:08:f3:
67:40:71:66:2d:4d:32:79:ea:d3:d7:db:a3:86:3c:27:f1:f6:
41:71:d1:21:00:eb:27:32:36:95:90:4a:40:70:f1:a5:06:cf:
4d:01:2c:73:16:6d:89:d3:61:ef:cc:c5:1a:77:4c:c6:9a:a8:
5f:d1:63:7f:4c:20:45:c1:f9:2a:e2:a6:18:85:9a:19:25:cd:
c9:b4:c9:7a:38:30:48:85:0c:73:42:91:5a:1a:38:7a:9a:16:
f8:01:97:03:29:de:a7:61:20:2f:86:e5:d3:ba:d8:2b:c3:09:
d2:a4:96:e3:84:2e:4b:ef:47:4d:e8:61:65:7b:74:84:30:fb:
bc:d6:27:df:9b:ad:34:0f:0f:60:93:89:d4:8a:c4:7b:91:1a:
99:d6:5f:7c:bd:61:f6:8b:4b:63:9e:6e:75:a7:c7:79:90:87:
2a:bf:54:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:01:51 2026 by rpki-client