Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/uL3yaujWKeyK8xOKCqJ5T7iDoZY.roa
File: uL3yaujWKeyK8xOKCqJ5T7iDoZY.roa (raw, json)
Hash identifier: NP8O7ciSh1YclgwF2fp/SWasiDfFyIiO3ynXgpMULQA=
Subject key identifier: B8:BD:F2:6A:E8:D6:29:EC:8A:F3:13:8A:0A:A2:79:4F:B8:83:A1:96
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F952E6A1E634C3AE470847AB333708C2E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/uL3yaujWKeyK8xOKCqJ5T7iDoZY.roa
Signing time: Fri 24 Jul 2026 17:31:14 +0000
ROA not before: Fri 24 Jul 2026 17:31:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205091
IP address blocks: 103.41.44.0/23 maxlen: 24
103.47.56.0/24 maxlen: 24
124.158.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:2e:6a:1e:63:4c:3a:e4:70:84:7a:b3:33:70:8c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 24 17:31:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8bdf26ae8d629ec8af3138a0aa2794fb883a196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:37:c3:ef:ad:5e:3e:d6:71:88:af:8c:f8:18:
65:87:8e:03:da:73:7d:b5:52:5b:95:a4:01:21:43:
41:5d:ef:f9:95:97:08:3d:e4:69:7f:b6:49:93:52:
66:cf:2c:8f:6e:2b:22:49:7e:0d:82:dc:86:94:8f:
3f:3f:e0:f0:7b:6d:b8:76:49:15:c2:7b:fd:6d:30:
f2:b9:c9:1d:22:8b:be:3f:a3:28:a6:c3:06:26:82:
02:3f:d2:70:a9:ca:f4:1d:70:55:f4:7b:76:eb:a9:
b1:16:16:fe:c1:bb:b8:cd:a3:82:29:57:c1:d6:67:
fe:fc:f5:39:29:7c:e8:af:3f:8f:1f:1c:87:bd:da:
e8:c6:41:81:ea:ff:13:33:3f:d2:50:0a:0e:25:67:
38:e8:a7:70:ba:43:b4:69:2e:5d:18:ac:4f:6e:2d:
71:16:88:73:60:73:1d:47:ce:67:52:6e:0f:8f:17:
da:b7:3b:d7:62:4f:49:00:88:bf:2e:76:b1:b2:08:
82:8d:67:7f:59:81:8c:43:76:37:b3:ae:5c:5d:b9:
50:f3:b0:9c:db:a4:33:34:68:b3:78:79:a1:b4:45:
c6:db:4f:04:5a:f0:51:93:70:ef:a3:a4:9d:e2:8e:
e2:74:69:a6:0e:3f:72:77:e1:57:bb:f3:60:15:68:
ee:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BD:F2:6A:E8:D6:29:EC:8A:F3:13:8A:0A:A2:79:4F:B8:83:A1:96
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/uL3yaujWKeyK8xOKCqJ5T7iDoZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.41.44.0/23
103.47.56.0/24
124.158.100.0/24
Signature Algorithm: sha256WithRSAEncryption
07:e1:6c:e8:d9:28:15:02:28:f4:4f:94:99:0b:2d:6b:f1:15:
cb:b1:d7:8f:01:fd:61:0e:d2:e2:f3:cb:8c:d9:fa:76:45:da:
bd:50:8f:f0:d4:95:4f:2e:dd:87:23:c5:a6:9e:b5:58:63:79:
1c:16:ab:f7:0d:4e:82:99:f7:e6:92:b1:27:bb:b6:5e:fc:47:
38:f1:c2:b1:66:7b:a7:94:28:31:d8:1b:12:a3:b2:b7:ad:03:
ba:94:67:22:4f:98:ab:5a:00:66:17:a2:35:cf:39:4a:79:ec:
7a:e2:cd:cc:ba:5c:c8:c4:50:df:88:e1:ec:f8:f2:ba:1f:50:
ed:98:cc:07:3c:bd:32:c0:95:f0:c3:2c:fa:8e:40:a4:7f:88:
b1:1a:3f:cd:2b:d9:06:73:69:38:41:31:62:0e:2a:a3:09:87:
02:89:3b:e7:14:dd:a9:d1:0c:00:b6:18:74:14:4c:cb:ed:49:
61:19:59:e8:09:69:2d:4b:e8:78:77:cf:69:fb:17:18:a0:a8:
a7:97:b8:3c:65:2d:14:22:59:4a:11:65:b4:31:5b:73:c7:2b:
b5:95:71:eb:91:7b:4e:f0:4c:6a:db:ec:31:7d:6c:03:49:bb:
ea:ce:92:ec:f1:81:74:68:fe:30:05:77:5e:a2:5e:4b:4b:31:
8f:e8:1b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:58:52 2026 by rpki-client