Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/RSQfMEEZt4oequ_NHljzft1mAes.roa
File: RSQfMEEZt4oequ_NHljzft1mAes.roa (raw, json)
Hash identifier: L34nif9bVdt4hPPgw1teVUpRnSBpGBSyzLRTZAC7pv8=
Subject key identifier: 45:24:1F:30:41:19:B7:8A:1E:AA:EF:CD:1E:58:F3:7E:DD:66:01:EB
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 019E0805C69389FA37F59E355CF725183D2F
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/RSQfMEEZt4oequ_NHljzft1mAes.roa
Signing time: Fri 08 May 2026 14:37:36 +0000
ROA not before: Fri 08 May 2026 14:37:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213871
IP address blocks: 103.76.130.0/24 maxlen: 24
193.16.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:08:05:c6:93:89:fa:37:f5:9e:35:5c:f7:25:18:3d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: May 8 14:37:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45241f304119b78a1eaaefcd1e58f37edd6601eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c3:75:bd:b7:fa:91:ed:b5:05:dd:ae:e3:97:
c1:d1:eb:f6:07:03:d0:e6:cc:77:10:3f:20:72:d3:
2b:a1:e3:20:19:d2:c6:e5:f3:02:42:88:93:81:c3:
dc:a3:41:01:0c:e7:7c:95:de:17:4e:0f:08:f2:51:
e6:fe:ab:be:5a:d5:f2:f4:ae:27:64:97:4c:cd:eb:
0e:8f:66:e6:83:d6:af:b9:c5:5e:57:0b:d7:9d:a0:
a2:f2:f7:3f:4e:c9:7f:6e:26:9a:a1:4e:55:2c:af:
8c:4d:da:72:5f:27:4b:c3:16:4e:0d:8a:1c:e3:81:
f2:c5:f6:33:33:ec:02:34:6f:1b:24:dc:f3:c6:16:
c7:3d:b1:27:d1:f1:1b:d0:68:ea:ba:61:74:ac:3b:
c3:87:4a:de:14:d7:81:9a:81:c8:cb:00:cc:22:fb:
fb:ac:68:26:a4:90:29:5b:ce:ab:bf:81:b3:d5:e5:
1e:2f:b7:c2:f3:b9:b0:eb:5f:06:92:b8:a5:1e:7a:
7b:d0:48:f2:1f:99:ff:a8:e0:c3:25:59:fc:e1:5d:
98:54:8b:06:44:e7:b6:0d:74:df:16:8e:54:68:46:
29:d6:4f:ff:c1:1f:05:1f:85:2c:ae:8f:8e:2b:29:
64:c6:23:90:8c:96:3c:8d:bc:a8:37:e0:3a:5a:2d:
e6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:24:1F:30:41:19:B7:8A:1E:AA:EF:CD:1E:58:F3:7E:DD:66:01:EB
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/RSQfMEEZt4oequ_NHljzft1mAes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.76.130.0/24
193.16.145.0/24
Signature Algorithm: sha256WithRSAEncryption
63:4e:75:60:6a:98:99:b8:25:88:70:a7:36:37:9b:fe:8e:6a:
fa:58:19:43:16:de:9d:6c:bd:4d:45:78:57:4f:93:cf:27:f6:
41:b7:78:66:54:e8:2f:b0:c6:17:38:c1:1a:8e:52:d8:56:0e:
51:ee:56:17:df:09:61:50:5b:23:18:8a:2a:92:3a:5d:00:59:
21:75:11:17:37:18:28:c9:8e:0f:16:fc:d8:ab:06:46:99:86:
67:6e:bf:66:4a:e2:58:6b:3a:45:a8:ef:bd:2d:75:a4:db:f9:
a8:df:2e:ad:8d:66:85:99:78:3e:9d:64:f2:c8:c6:fb:bc:12:
15:23:5e:ba:20:77:b5:29:06:88:8e:ff:1b:9a:1e:c8:21:f8:
f9:cd:55:25:c4:49:bb:7d:b0:53:4f:b9:62:66:b7:2f:ab:67:
a1:59:85:00:cb:67:aa:a0:db:c4:a6:05:b7:38:69:af:65:4a:
07:d1:43:d9:7b:41:39:a3:5e:ce:ce:ca:40:4b:13:7c:9a:1b:
dd:56:f1:c9:c5:87:7f:c3:77:cf:04:1a:0c:67:df:b7:a2:6f:
e0:48:94:c1:ae:00:9f:cc:83:40:3f:f9:00:71:43:0d:1c:28:
e8:df:27:48:dd:24:a9:17:f6:a9:47:e0:60:51:e7:b6:a7:46:
34:05:69:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:38:20 2026 by rpki-client