Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/CRbRvhC1uKqes8IR89lmtpIQTt4.roa
File: CRbRvhC1uKqes8IR89lmtpIQTt4.roa (raw, json)
Hash identifier: EO562tiebnOW6btwaNkc9PtYJgNjll1/iyRvRluHUWM=
Subject key identifier: 09:16:D1:BE:10:B5:B8:AA:9E:B3:C2:11:F3:D9:66:B6:92:10:4E:DE
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 01A0C384FBE5DC706EC6FE70E33CAB406A2D
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/CRbRvhC1uKqes8IR89lmtpIQTt4.roa
Signing time: Mon 21 Sep 2026 10:31:07 +0000
ROA not before: Mon 21 Sep 2026 10:31:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402279
IP address blocks: 213.110.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:84:fb:e5:dc:70:6e:c6:fe:70:e3:3c:ab:40:6a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Sep 21 10:31:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0916d1be10b5b8aa9eb3c211f3d966b692104ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bb:55:6c:0a:bb:f4:e3:b2:a7:c5:3a:99:60:
6b:41:71:e0:45:0a:c7:f9:3c:76:37:60:b5:3a:6d:
1f:00:35:7e:b3:e2:61:43:ef:38:3e:d5:a9:7c:bd:
bb:9f:6b:36:54:59:78:d4:1e:54:1c:df:33:15:18:
3f:9e:d3:be:62:60:59:9a:67:8f:85:13:9f:77:a7:
2c:ed:54:af:a0:92:aa:da:87:88:ec:95:14:68:d0:
dd:bb:d8:ed:b5:a2:76:2f:74:81:1b:68:87:ea:bd:
d0:50:ae:5d:72:ad:69:64:3b:a1:04:7c:a0:1a:40:
32:85:44:05:2a:43:ee:a6:45:b4:0e:99:4a:fe:f9:
73:2b:71:45:58:e5:7c:8a:ba:93:c7:f0:c0:2b:5c:
a0:46:f2:37:e0:e1:6b:4b:06:21:5b:3c:63:8b:55:
92:c3:6f:ef:2e:44:86:5e:bb:46:5e:11:05:e5:73:
c4:d0:d5:2e:23:bf:f0:3c:19:22:00:0f:5a:c3:53:
09:65:ed:68:40:d5:74:12:83:5a:77:79:8b:b2:b4:
0a:05:4e:69:1b:33:45:01:9e:7e:ed:47:d1:cc:42:
77:a2:00:f7:c9:56:b6:f9:a6:54:0f:31:6a:c4:db:
99:20:69:85:df:16:5c:0f:0c:33:ab:a0:83:86:8c:
d3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:16:D1:BE:10:B5:B8:AA:9E:B3:C2:11:F3:D9:66:B6:92:10:4E:DE
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/CRbRvhC1uKqes8IR89lmtpIQTt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.110.70.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:f2:ce:a1:ae:1c:dc:39:93:1a:98:81:44:03:e6:ba:0d:5e:
c2:7d:7d:6a:12:4d:5f:da:92:83:7a:38:db:92:c8:33:f6:e4:
c3:d8:dd:d5:7e:8d:76:ec:9c:7c:a4:5c:4d:e0:b4:8d:c3:7e:
45:b7:04:a7:aa:af:28:9f:d4:c8:bf:ca:16:76:bf:5a:25:55:
ad:48:74:67:b1:30:46:db:0c:68:da:0c:51:b6:95:d7:2a:0f:
5d:50:74:e0:9a:82:6f:49:db:c8:61:6d:6a:6c:86:4e:4d:af:
3b:a6:b6:4e:b4:6e:0d:d6:82:d1:3c:fb:4b:b6:ed:17:bb:18:
19:b9:b9:ea:2f:79:3b:49:b9:56:87:e5:f4:4e:98:78:e5:7f:
1e:d1:16:bb:04:60:3c:72:6f:ba:ad:12:50:e4:58:7b:be:25:
7e:df:2c:99:65:08:cd:9b:d9:49:b9:2a:a7:fa:b7:47:02:ab:
6c:db:90:a0:5c:57:d6:aa:8d:cc:23:6f:1b:96:83:45:2f:4e:
6f:74:77:d8:df:64:e8:78:ff:97:23:9c:69:1b:32:58:1f:3f:
35:10:fa:2f:2c:66:ed:60:8d:dd:de:50:3d:7e:68:aa:e3:1f:
e7:e2:23:e0:c9:5c:d3:b1:f5:68:ac:a7:18:c4:81:30:c4:57:
56:37:e1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:27:41 2026 by rpki-client