Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/2837a8-eff3-42c7-8d27-ec7ed98d8cf2/1/sRnBSAYEX93NlYosZGi0uCLXAJw.roa
File: sRnBSAYEX93NlYosZGi0uCLXAJw.roa (raw, json)
Hash identifier: c4n05IDKWg5BA6+5bhXnSqqXfpc/RLH7YbTBEH9x7GY=
Subject key identifier: B1:19:C1:48:06:04:5F:DD:CD:95:8A:2C:64:68:B4:B8:22:D7:00:9C
Certificate issuer: /CN=88c3fb372ed0acc449c42c820994ee96cf9d9dbe
Certificate serial: 01A10FE7DE257BE67C12022754E4D24A3AB9
Authority key identifier: 88:C3:FB:37:2E:D0:AC:C4:49:C4:2C:82:09:94:EE:96:CF:9D:9D:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMP7Ny7QrMRJxCyCCZTuls-dnb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2837a8-eff3-42c7-8d27-ec7ed98d8cf2/1/sRnBSAYEX93NlYosZGi0uCLXAJw.roa
Signing time: Tue 06 Oct 2026 06:30:16 +0000
ROA not before: Tue 06 Oct 2026 06:30:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 203.18.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/2837a8-eff3-42c7-8d27-ec7ed98d8cf2/1/iMP7Ny7QrMRJxCyCCZTuls-dnb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/2837a8-eff3-42c7-8d27-ec7ed98d8cf2/1/iMP7Ny7QrMRJxCyCCZTuls-dnb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMP7Ny7QrMRJxCyCCZTuls-dnb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 21:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:e7:de:25:7b:e6:7c:12:02:27:54:e4:d2:4a:3a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c3fb372ed0acc449c42c820994ee96cf9d9dbe
Validity
Not Before: Oct 6 06:30:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b119c14806045fddcd958a2c6468b4b822d7009c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c2:1e:c3:f5:82:a5:94:08:a1:49:43:39:e7:
fc:3d:29:3c:56:f0:84:4b:41:41:02:53:a1:ad:68:
7a:2b:85:0b:12:55:c6:1b:14:c6:68:71:3c:85:3e:
30:8f:bf:d5:39:57:06:22:9e:34:ba:8b:6b:e6:29:
1f:31:14:71:18:6a:a6:7c:d5:75:de:21:dc:28:78:
14:fb:5a:85:52:d3:bc:d8:53:3a:a0:57:32:30:ca:
ef:27:65:66:c6:af:0d:03:e3:68:2b:89:70:b7:bd:
8d:e7:cb:08:36:22:cb:d5:c1:31:c7:7f:d2:44:db:
76:aa:1a:37:a8:64:f7:86:b2:2e:8d:29:60:22:91:
47:62:8e:62:10:b3:87:a8:47:e9:d6:bb:0f:2c:41:
ba:43:b5:bb:b6:36:1f:53:a1:dc:94:b6:89:e5:9c:
68:62:5b:64:21:43:5a:f2:47:0e:05:e7:02:17:60:
b4:99:46:82:9d:d8:97:6c:0a:26:e7:2d:6e:17:57:
d4:28:1d:8b:f7:99:3d:f5:2c:0c:97:8f:26:95:f3:
2f:a8:66:e5:90:bf:64:ff:70:a5:ac:9c:56:9c:ed:
b8:02:da:da:1f:30:9f:dc:cf:a8:3e:fa:fe:0d:58:
aa:85:d3:d7:b3:81:22:db:fb:b8:40:76:ca:69:ea:
82:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:19:C1:48:06:04:5F:DD:CD:95:8A:2C:64:68:B4:B8:22:D7:00:9C
X509v3 Authority Key Identifier:
keyid:88:C3:FB:37:2E:D0:AC:C4:49:C4:2C:82:09:94:EE:96:CF:9D:9D:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMP7Ny7QrMRJxCyCCZTuls-dnb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2837a8-eff3-42c7-8d27-ec7ed98d8cf2/1/sRnBSAYEX93NlYosZGi0uCLXAJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2837a8-eff3-42c7-8d27-ec7ed98d8cf2/1/iMP7Ny7QrMRJxCyCCZTuls-dnb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.18.106.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:23:dc:96:9d:48:98:c0:94:df:7c:54:d6:aa:c4:13:58:7e:
20:2a:45:6a:35:1e:d5:af:53:f7:86:b5:2b:c0:79:66:40:32:
ce:5e:df:c9:06:c6:e0:8d:a1:68:c1:bf:52:af:55:36:2d:62:
3f:de:b8:04:ef:36:c0:78:5a:f6:b1:8c:c4:df:bd:d1:ed:51:
fe:93:95:5e:85:37:89:90:80:b1:a6:cb:b4:41:fe:2f:12:07:
1d:51:dd:9e:e0:33:14:b3:df:dd:d7:bb:ec:88:c5:d6:da:40:
03:45:8a:d6:e8:5d:0b:7a:83:b0:14:05:8f:92:63:a9:a8:30:
95:76:e8:0c:b5:13:f0:82:c5:d2:fc:75:f9:f5:bb:d3:d6:ed:
79:63:ae:0a:18:52:77:81:e4:62:6d:e0:dd:aa:ab:82:eb:ef:
e1:94:78:be:b1:ca:2c:9f:3c:8d:bc:44:e1:c8:94:af:9a:19:
02:50:26:d7:dd:12:be:24:d6:26:3e:a5:e1:17:d0:4b:5a:38:
aa:1f:86:f7:f7:ca:06:21:09:3a:07:45:67:53:ed:68:39:13:
19:c3:28:16:43:e4:17:fe:6c:b0:ed:84:b1:dd:10:6a:45:72:
90:e3:6a:fa:3e:f1:bc:95:c4:3b:71:17:59:bd:5a:21:9a:8d:
cc:4f:7b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:09:59 2026 by rpki-client