Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/fuQuIaHHNLm1DTGSNG2tkUjcAAo.roa
File: fuQuIaHHNLm1DTGSNG2tkUjcAAo.roa (raw, json)
Hash identifier: O9wjiYZ3Uz6GFAlQ1mmgCR70WYFaZxlCC9recYKYjkI=
Subject key identifier: 7E:E4:2E:21:A1:C7:34:B9:B5:0D:31:92:34:6D:AD:91:48:DC:00:0A
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 019CF71BF2776328898EBE9558D651E3BE7E
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/fuQuIaHHNLm1DTGSNG2tkUjcAAo.roa
Signing time: Mon 16 Mar 2026 14:45:29 +0000
ROA not before: Mon 16 Mar 2026 14:45:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6134
IP address blocks: 103.216.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:1b:f2:77:63:28:89:8e:be:95:58:d6:51:e3:be:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Mar 16 14:45:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ee42e21a1c734b9b50d3192346dad9148dc000a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:45:5f:fb:47:38:39:65:62:18:91:ba:69:b1:
c1:b7:c4:15:7f:f2:79:4f:d9:1a:13:6d:6e:12:49:
07:08:81:7a:96:e4:94:fd:05:28:45:04:39:81:57:
43:93:ee:58:b6:99:b2:7c:b7:97:e0:d3:62:41:c6:
a3:d3:84:41:5b:1e:79:2c:3d:9f:72:2e:c7:47:1c:
e3:ea:23:b1:01:66:26:fb:96:2a:89:e4:d1:95:35:
d1:ec:1c:e3:bd:79:cd:af:cc:95:d2:17:83:38:63:
b0:d0:d9:d7:d0:a3:ac:1e:dc:e4:fd:66:24:40:d1:
d8:64:d5:c5:d8:a2:d5:93:3f:73:bf:92:8c:4f:11:
ae:e9:50:5a:41:8b:13:5d:7c:cf:be:f1:7a:7f:21:
c5:33:22:b3:69:65:6c:f9:d7:a2:41:8b:08:2d:e4:
fc:26:bd:f1:52:d7:2b:3b:3e:c6:b0:df:e0:60:12:
b2:4f:0b:20:9b:e9:6d:4c:28:be:1d:56:0b:c0:63:
b0:01:ec:fe:93:52:01:1f:69:88:5a:9c:a9:79:8c:
c0:54:60:ce:12:2a:3f:ef:0d:3b:c1:e7:95:be:51:
7c:2c:6c:1e:64:3a:21:23:a7:d9:2b:14:2a:d6:62:
02:ce:45:b5:0b:86:8e:4c:34:9c:09:67:6e:47:19:
b2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E4:2E:21:A1:C7:34:B9:B5:0D:31:92:34:6D:AD:91:48:DC:00:0A
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/fuQuIaHHNLm1DTGSNG2tkUjcAAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.175.0/24
Signature Algorithm: sha256WithRSAEncryption
86:fd:b0:7a:35:21:ab:d1:38:01:89:11:e5:09:b4:ff:88:e9:
28:30:4a:10:8e:d1:31:0f:dd:ee:ca:de:63:87:5d:75:dd:f1:
68:3a:dc:51:65:cc:68:a1:8c:5f:d7:f6:76:6d:46:71:77:2c:
86:fe:a0:f1:79:c4:ed:97:87:7e:5c:ee:1a:da:78:d3:df:e7:
16:89:3a:23:46:56:ae:52:dd:43:f1:4d:58:c8:bf:90:be:94:
07:f3:44:43:24:ca:de:1a:ea:f3:d6:53:e6:19:57:87:6f:5f:
4c:4e:d6:87:cd:65:ac:98:50:1f:89:72:2f:52:ce:79:f0:ca:
9e:d6:b2:09:a9:7e:45:b5:fb:f7:34:58:27:76:ea:c1:6c:3d:
ef:d4:b5:34:04:31:c7:8b:6c:31:75:d0:0e:c7:a7:2e:57:d4:
b2:72:96:a9:ca:4f:68:90:f9:11:eb:42:db:43:52:16:be:84:
9e:07:ab:27:dd:f2:df:0a:f6:fe:10:cd:30:8b:b6:5c:89:dc:
a7:4e:ac:e7:95:e9:2c:cd:95:39:47:ea:ca:da:a1:e9:aa:8a:
06:07:5c:74:7b:fa:7d:95:7a:f7:5c:73:1a:87:1d:02:b1:56:
81:9b:81:6a:37:03:66:ef:1c:ef:98:5d:19:03:f4:7e:d0:99:
ab:58:c4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:06:22 2026 by rpki-client