Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/SlpFwksvKrdEBwHv2yle6bGpGdI.roa
File: SlpFwksvKrdEBwHv2yle6bGpGdI.roa (raw, json)
Hash identifier: vog4P9WLQ25aT7PiGisFfZlyjcM3BghRoGQjtErQRUQ=
Subject key identifier: 4A:5A:45:C2:4B:2F:2A:B7:44:07:01:EF:DB:29:5E:E9:B1:A9:19:D2
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 01A1C50847B4EF176B35C9A083756B42550F
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/SlpFwksvKrdEBwHv2yle6bGpGdI.roa
Signing time: Tue 10 Nov 2026 10:36:56 +0000
ROA not before: Tue 10 Nov 2026 10:36:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218135
IP address blocks: 103.216.174.0/24 maxlen: 24
193.108.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:08:47:b4:ef:17:6b:35:c9:a0:83:75:6b:42:55:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Nov 10 10:36:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a5a45c24b2f2ab7440701efdb295ee9b1a919d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:8d:5e:4c:0e:5f:f4:bc:af:bc:05:8a:86:
59:23:c3:ae:df:b3:99:dd:02:c9:dc:c6:70:aa:57:
b4:9c:d4:3c:3c:21:20:98:b4:09:e6:54:de:7d:41:
81:f9:18:09:54:b5:29:fb:08:4c:da:d8:5c:60:1b:
84:11:5b:25:f5:12:ad:00:3d:2f:3b:aa:40:06:ab:
47:26:29:95:90:1c:e9:9c:96:b8:27:56:24:59:7e:
f9:ca:65:6e:10:80:04:db:3a:a6:8c:3e:60:a2:98:
12:85:64:14:9d:b2:17:e3:b2:74:84:6b:ab:ae:7f:
43:9c:9b:2d:a7:0a:78:db:16:f3:88:05:00:d6:f1:
a0:ba:94:a4:16:eb:4b:27:9d:a1:b3:39:b2:c2:ad:
dc:0f:fb:99:23:7a:42:0b:52:7c:fd:86:57:27:e1:
26:56:a0:82:cb:f5:4a:c5:53:b1:2d:8e:54:22:fb:
73:9d:05:ef:cf:e1:f6:b1:ff:80:88:ad:0d:70:45:
5b:9e:8f:21:ab:a2:9e:3f:1f:5a:a1:a7:33:cc:d7:
fc:74:34:f4:d2:81:a9:cd:86:fe:d3:81:f4:39:b4:
be:be:db:76:1b:e3:54:45:31:94:d3:f5:44:64:44:
98:9f:35:e5:8b:2c:f8:2f:99:d2:c5:72:31:62:99:
f8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5A:45:C2:4B:2F:2A:B7:44:07:01:EF:DB:29:5E:E9:B1:A9:19:D2
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/SlpFwksvKrdEBwHv2yle6bGpGdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.174.0/24
193.108.57.0/24
Signature Algorithm: sha256WithRSAEncryption
57:5d:c4:81:91:07:0f:5c:8f:15:87:9e:97:65:52:b7:99:a5:
c9:d4:b9:a8:57:b7:f8:55:60:17:c4:7c:da:14:5e:5c:c6:61:
38:fd:4d:4c:e3:f0:64:78:76:12:48:b9:41:77:14:5b:7a:e8:
ef:30:9a:65:dc:17:89:ee:79:75:72:29:c8:ac:13:0f:ae:2f:
f7:5d:31:e2:e2:4b:88:c4:c2:b0:80:a3:d5:83:15:35:5e:f8:
9e:de:e2:b0:5e:d1:7c:27:2b:25:64:50:8c:86:e9:cb:f3:2f:
86:36:ba:90:19:b0:4e:ae:e7:5c:b6:2b:50:7d:56:f8:97:51:
0e:97:bc:93:b0:e8:a0:92:19:3e:67:aa:5e:86:24:a5:48:62:
95:b0:2e:f5:66:9c:b1:b5:a0:36:cc:46:8b:a9:18:f6:cb:4c:
f2:c5:38:e5:a6:16:fe:1f:ea:8c:ad:40:07:77:63:9f:d3:79:
53:2c:fd:65:39:99:a7:56:ed:2f:82:6a:f1:35:0a:23:ff:f4:
7d:fd:84:10:e6:4a:6d:ae:18:fd:95:e6:6a:d8:2f:e5:d9:22:
1b:c9:e1:42:76:8d:5d:e0:3a:6b:7d:1a:ce:a4:39:5e:c5:72:
e0:54:58:78:0d:36:01:3f:ac:33:9f:fd:88:01:6a:86:6a:e9:
e4:19:a4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:16:57 2026 by rpki-client