Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/5xHvZdmeiGs8QNu8uCvUdKsh87M.roa
File: 5xHvZdmeiGs8QNu8uCvUdKsh87M.roa (raw, json)
Hash identifier: 2HA1Qmnv/0DmcdIsvOUrY2LByA8trhy2E7QkML7YAsY=
Subject key identifier: E7:11:EF:65:D9:9E:88:6B:3C:40:DB:BC:B8:2B:D4:74:AB:21:F3:B3
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019D86D5EE69AA38F02F863B212508028005
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/5xHvZdmeiGs8QNu8uCvUdKsh87M.roa
Signing time: Mon 13 Apr 2026 12:34:20 +0000
ROA not before: Mon 13 Apr 2026 12:34:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 103.27.156.0/24 maxlen: 24
103.31.76.0/24 maxlen: 24
132.243.194.0/24 maxlen: 24
132.243.195.0/24 maxlen: 24
132.243.198.0/24 maxlen: 24
132.243.199.0/24 maxlen: 24
132.243.200.0/24 maxlen: 24
132.243.201.0/24 maxlen: 24
132.243.204.0/24 maxlen: 24
132.243.205.0/24 maxlen: 24
132.243.207.0/24 maxlen: 24
132.243.208.0/24 maxlen: 24
132.243.209.0/24 maxlen: 24
132.243.212.0/24 maxlen: 24
132.243.213.0/24 maxlen: 24
132.243.224.0/24 maxlen: 24
132.243.234.0/24 maxlen: 24
132.243.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:d5:ee:69:aa:38:f0:2f:86:3b:21:25:08:02:80:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Apr 13 12:34:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e711ef65d99e886b3c40dbbcb82bd474ab21f3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5a:63:c7:46:66:b9:b9:d3:97:60:b7:28:3a:
2c:9e:8c:a8:c2:06:d1:3c:80:11:ba:8f:ed:8e:70:
44:8f:82:b5:33:b7:d9:ef:b9:4a:3b:86:47:b4:aa:
a6:41:a2:f4:9f:eb:31:84:01:22:98:71:6a:58:59:
8a:89:56:2e:27:5e:50:65:8b:43:4b:a0:da:bd:3b:
7a:b9:e8:3b:1a:09:e5:48:a2:dd:51:bc:49:ba:e1:
c0:31:50:14:97:4d:60:62:63:f7:81:ce:4f:22:3b:
ea:c0:8b:55:be:76:c2:16:79:7f:e7:fa:05:47:05:
a3:b8:3a:63:a9:14:8d:e5:74:f1:02:bd:70:c9:47:
a1:13:20:15:fa:f2:be:ab:8b:7d:f2:3f:9d:06:89:
a4:65:fa:d3:1d:15:18:99:d2:d1:00:08:55:33:be:
5d:b6:8d:5c:21:06:bf:4b:2e:37:18:07:0d:4f:35:
67:bf:c0:eb:ac:37:b6:c7:e5:56:2b:e1:c1:8e:0c:
e9:f3:61:5b:fc:e2:33:3e:af:c4:7a:21:af:c2:8a:
80:f2:6b:78:0d:70:23:3f:31:f2:c4:98:52:12:c4:
59:49:36:bf:5a:ad:d9:af:35:e5:62:9d:13:b8:a5:
83:1c:15:22:80:57:4c:e1:5f:60:b5:bb:87:d6:26:
0f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:11:EF:65:D9:9E:88:6B:3C:40:DB:BC:B8:2B:D4:74:AB:21:F3:B3
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/5xHvZdmeiGs8QNu8uCvUdKsh87M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.27.156.0/24
103.31.76.0/24
132.243.194.0/23
132.243.198.0-132.243.201.255
132.243.204.0/23
132.243.207.0-132.243.209.255
132.243.212.0/23
132.243.224.0/24
132.243.234.0/24
132.243.252.0/24
Signature Algorithm: sha256WithRSAEncryption
23:cb:d9:ca:f1:05:b8:9a:9f:30:61:0a:e1:19:15:54:c4:90:
ae:06:ca:59:0b:4b:a6:c4:d1:98:4f:14:46:ad:7c:c2:ca:04:
72:9e:1b:4f:3b:12:9b:86:b0:a3:17:a5:93:76:cc:fe:87:91:
c5:1f:ad:2c:43:2d:9b:90:f8:4d:61:0a:7b:7b:4f:06:9c:88:
3f:14:83:22:e1:af:8e:9f:29:79:d6:c9:1e:29:43:42:87:94:
7e:08:a3:70:39:29:ba:49:4e:87:b5:2d:1d:ff:b9:8e:1f:c6:
80:29:e8:3f:2e:d8:69:ca:2e:33:9b:e5:2f:e0:46:fd:b2:e1:
34:45:8c:79:67:da:1a:b8:0d:2f:90:7b:e7:f6:b7:14:4c:d8:
54:96:02:be:4b:f4:7b:84:61:de:64:ca:36:01:a6:42:41:0a:
3b:32:ac:7e:87:4d:11:62:af:6a:73:8b:07:4d:92:f2:d4:9c:
79:5c:3c:d1:fe:78:7f:53:68:76:26:00:a4:0c:b5:0b:c3:31:
87:50:e6:75:3c:81:47:e4:28:76:bf:cd:19:c3:66:9c:40:98:
33:d5:da:8a:6a:e5:65:b0:45:11:7b:d0:31:7c:60:5b:f6:63:
1c:f1:31:42:ce:c6:b1:96:43:3f:2f:a3:8a:27:23:09:5f:0b:
c3:7f:44:8e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAZ2G1e5pqjjwL4Y7ISUIAoAFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx
MGY5M2YwHhcNMjYwNDEzMTIzNDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzExZWY2NWQ5OWU4ODZiM2M0MGRiYmNiODJiZDQ3NGFiMjFmM2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVpjx0ZmubnTl2C3KDosnoyowgbR
PIARuo/tjnBEj4K1M7fZ77lKO4ZHtKqmQaL0n+sxhAEimHFqWFmKiVYuJ15QZYtD
S6DavTt6ueg7GgnlSKLdUbxJuuHAMVAUl01gYmP3gc5PIjvqwItVvnbCFnl/5/oF
RwWjuDpjqRSN5XTxAr1wyUehEyAV+vK+q4t98j+dBomkZfrTHRUYmdLRAAhVM75d
to1cIQa/Sy43GAcNTzVnv8DrrDe2x+VWK+HBjgzp82Fb/OIzPq/EeiGvwoqA8mt4
DXAjPzHyxJhSEsRZSTa/Wq3ZrzXlYp0TuKWDHBUigFdM4V9gtbuH1iYPnwIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFOcR72XZnohrPEDbvLgr1HSrIfOzMB8GA1UdIwQY
MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt
NDMwMTNiMjhkOWQ2LzEvNXhIdlpkbWVpR3M4UU51OHVDdlVkS3NoODdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2
LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQAZxucAwQA
Zx9MAwQBhPPCMAwDBAGE88YDBAGE88gDBAGE88wwDAMEAITzzwMEAYTz0AMEAYTz
1AMEAITz4AMEAITz6gMEAITz/DANBgkqhkiG9w0BAQsFAAOCAQEAI8vZyvEFuJqf
MGEK4RkVVMSQrgbKWQtLpsTRmE8URq18wsoEcp4bTzsSm4awoxelk3bM/oeRxR+t
LEMtm5D4TWEKe3tPBpyIPxSDIuGvjp8pedbJHilDQoeUfgijcDkpuklOh7UtHf+5
jh/GgCnoPy7YacouM5vlL+BG/bLhNEWMeWfaGrgNL5B75/a3FEzYVJYCvkv0e4Rh
3mTKNgGmQkEKOzKsfodNEWKvanOLB02S8tSceVw80f54f1NodiYApAy1C8Mxh1Dm
dTyBR+Qodr/NGcNmnECYM9XaimrlZbBFEXvQMXxgW/ZjHPExQs7GsZZDPy+jiicj
CV8Lw39Ejg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:37:47 2026 by rpki-client