Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/8nl0gvlvhLDwWgZwpZKGJtxc53o.roa
File: 8nl0gvlvhLDwWgZwpZKGJtxc53o.roa (raw, json)
Hash identifier: bE4muHTPZggIWIYsSa057x00nvD31ff/lldCGfrmJUk=
Subject key identifier: F2:79:74:82:F9:6F:84:B0:F0:5A:06:70:A5:92:86:26:DC:5C:E7:7A
Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial: 019F848F09021646C08F676D7500500E3470
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/8nl0gvlvhLDwWgZwpZKGJtxc53o.roa
Signing time: Tue 21 Jul 2026 12:03:14 +0000
ROA not before: Tue 21 Jul 2026 12:03:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215305
IP address blocks: 103.200.28.0/24 maxlen: 24
144.48.10.0/24 maxlen: 24
195.78.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:8f:09:02:16:46:c0:8f:67:6d:75:00:50:0e:34:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Validity
Not Before: Jul 21 12:03:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2797482f96f84b0f05a0670a5928626dc5ce77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:12:cf:e0:77:12:8a:a5:33:81:2c:df:2c:93:
43:2b:42:4d:e2:b0:48:e9:29:3f:09:31:91:41:a5:
69:ef:3f:12:e0:60:44:a5:7a:2e:32:b8:81:64:a5:
c7:74:18:c4:55:1a:38:3d:ac:6f:b2:e4:7f:0d:cb:
be:e9:03:31:98:a1:19:6d:61:a8:80:ec:10:d0:b9:
07:57:de:ec:78:3b:e2:f1:36:6b:87:b5:50:05:cf:
6f:6d:e2:d7:8f:15:e4:ff:86:4e:16:3d:fc:2b:dc:
89:50:74:7b:f8:42:49:af:79:2e:a5:5f:a1:63:34:
a7:c3:0a:90:fe:91:2c:61:4a:3a:66:f8:09:e5:6b:
0d:4f:94:d9:01:77:a9:46:7a:51:27:07:48:ff:15:
10:4a:0b:ff:01:17:ca:3e:7c:cb:32:6a:26:0c:e8:
a0:e7:9b:64:fe:ec:72:4f:08:02:42:91:9e:bd:72:
1e:4a:d9:37:ab:41:68:97:90:12:e1:e9:66:ea:4b:
f9:17:dd:eb:92:89:61:9c:88:ad:35:d5:61:dd:7c:
1e:98:4a:5b:07:e5:58:18:0a:bb:e1:80:35:6c:f1:
f8:d7:19:c4:94:ad:e9:ad:79:e6:53:c4:58:82:a5:
6b:b4:f3:b0:65:a9:35:26:dc:3c:5b:1a:31:1d:d3:
6b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:79:74:82:F9:6F:84:B0:F0:5A:06:70:A5:92:86:26:DC:5C:E7:7A
X509v3 Authority Key Identifier:
keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/8nl0gvlvhLDwWgZwpZKGJtxc53o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.200.28.0/24
144.48.10.0/24
195.78.49.0/24
Signature Algorithm: sha256WithRSAEncryption
61:9f:76:74:13:ba:6f:69:34:7e:1f:41:fd:81:b3:e9:36:04:
1f:f3:bf:52:a6:6d:df:ab:88:6f:6a:bd:c3:76:01:11:b2:8b:
d2:e9:8f:c9:b5:1f:88:8a:89:40:24:3e:81:3a:c1:56:d8:eb:
c7:9e:c4:8b:8e:8e:2c:5f:37:f6:93:64:d4:19:00:55:31:93:
22:b0:db:f2:ab:a3:5e:7c:11:bc:f8:35:1a:56:23:fc:96:77:
a8:2c:41:c4:62:17:1b:6f:5e:7c:8c:f6:b4:56:0b:65:a9:03:
9d:a9:be:5e:57:2f:b6:e0:1f:a4:82:86:f2:9e:a2:37:da:fc:
0b:98:07:f6:09:07:8c:d1:7f:c7:c3:74:ac:79:a5:82:88:e7:
7f:90:00:f0:89:db:c8:a6:7b:00:48:8e:c7:3b:15:94:5b:bd:
0a:c0:05:04:d8:93:4b:f6:de:e8:f8:fc:20:2a:39:a2:b8:84:
f8:dc:35:48:09:2f:c6:95:ea:a2:3c:93:86:d2:92:3c:73:86:
a0:d1:da:f8:37:76:68:c7:11:85:6b:7c:f4:08:f4:e3:e3:d8:
fa:a2:82:5c:36:db:79:83:fc:3e:c7:0e:4c:08:00:47:f7:87:
9e:30:12:a2:96:d8:83:90:a0:63:b8:48:31:b7:84:36:14:cc:
b3:32:aa:04
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ+EjwkCFkbAj2dtdQBQDjRwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1
NjU0MmQwHhcNMjYwNzIxMTIwMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjc5NzQ4MmY5NmY4NGIwZjA1YTA2NzBhNTkyODYyNmRjNWNlNzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BLP4HcSiqUzgSzfLJNDK0JN4rBI
6Sk/CTGRQaVp7z8S4GBEpXouMriBZKXHdBjEVRo4PaxvsuR/Dcu+6QMxmKEZbWGo
gOwQ0LkHV97seDvi8TZrh7VQBc9vbeLXjxXk/4ZOFj38K9yJUHR7+EJJr3kupV+h
YzSnwwqQ/pEsYUo6ZvgJ5WsNT5TZAXepRnpRJwdI/xUQSgv/ARfKPnzLMmomDOig
55tk/uxyTwgCQpGevXIeStk3q0Fol5AS4elm6kv5F93rkolhnIitNdVh3XwemEpb
B+VYGAq74YA1bPH41xnElK3prXnmU8RYgqVrtPOwZak1Jtw8WxoxHdNr/QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPJ5dIL5b4Sw8FoGcKWShibcXOd6MB8GA1UdIwQY
MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt
YmQ1ZDNmMDBmYmIyLzEvOG5sMGd2bHZoTER3V2dad3BaS0dKdHhjNTNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy
LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAZ8gcAwQA
kDAKAwQAw04xMA0GCSqGSIb3DQEBCwUAA4IBAQBhn3Z0E7pvaTR+H0H9gbPpNgQf
879Spm3fq4hvar3DdgERsovS6Y/JtR+IiolAJD6BOsFW2OvHnsSLjo4sXzf2k2TU
GQBVMZMisNvyq6NefBG8+DUaViP8lneoLEHEYhcbb158jPa0VgtlqQOdqb5eVy+2
4B+kgobynqI32vwLmAf2CQeM0X/Hw3SseaWCiOd/kADwidvIpnsASI7HOxWUW70K
wAUE2JNL9t7o+PwgKjmiuIT43DVICS/GleqiPJOG0pI8c4ag0dr4N3ZoxxGFa3z0
CPTj49j6ooJcNtt5g/w+xw5MCABH94eeMBKiltiDkKBjuEgxt4Q2FMyzMqoE
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:09 2026 by rpki-client