Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/XJ2jXlF2Mo_xE-IDDytKM0CTO3E.roa
File: XJ2jXlF2Mo_xE-IDDytKM0CTO3E.roa (raw, json)
Hash identifier: HVJb11Pj3eJSoRHZP1XpkyINHh78VkvQ2O0d3UKBEjc=
Subject key identifier: 5C:9D:A3:5E:51:76:32:8F:F1:13:E2:03:0F:2B:4A:33:40:93:3B:71
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 019D1BA173174C22BB4407755AA902164C41
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/XJ2jXlF2Mo_xE-IDDytKM0CTO3E.roa
Signing time: Mon 23 Mar 2026 16:57:38 +0000
ROA not before: Mon 23 Mar 2026 16:57:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 103.69.226.0/24 maxlen: 24
185.191.20.0/24 maxlen: 24
185.191.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:a1:73:17:4c:22:bb:44:07:75:5a:a9:02:16:4c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Mar 23 16:57:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c9da35e5176328ff113e2030f2b4a3340933b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:67:43:3c:62:45:7c:a7:36:43:f1:da:d3:
6c:bf:50:9b:c6:f1:e3:31:a0:43:ba:b2:05:0e:a1:
88:58:ed:79:79:a2:2b:a1:1e:05:3c:3d:14:5e:d4:
72:e0:8f:c4:27:73:ef:22:87:14:a3:4b:37:82:f0:
b1:17:36:38:78:04:e7:ff:17:d0:e5:fb:37:d6:73:
06:be:d9:1f:7d:78:f4:f7:18:d6:cf:e9:5a:3d:0e:
db:8f:6e:65:0e:27:99:7a:4a:bc:66:38:54:b0:3f:
2a:a6:35:f5:aa:9c:23:e2:8d:e1:2a:44:92:65:c5:
5b:db:d5:f1:96:cf:99:e4:5a:8f:ce:e4:2f:5d:19:
dd:1b:40:a4:b8:4b:33:1a:2d:09:c4:c0:02:7d:85:
dd:07:93:a1:ef:5a:62:08:ca:cd:b5:4e:5e:c2:eb:
eb:e6:61:d0:01:68:da:72:5b:c0:34:72:60:18:10:
ad:42:bd:1a:3b:99:c5:02:16:c0:b9:e8:4c:52:da:
2a:cd:1e:ce:ce:07:89:ba:66:02:02:41:ad:10:00:
6e:f3:4b:75:c1:91:82:8c:cc:9b:3d:d7:7d:ae:3f:
16:74:62:ab:f0:10:c0:f0:31:8e:c3:17:1e:9c:e0:
07:a6:57:bc:f0:18:a9:6a:ac:78:7d:f6:22:18:49:
b7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9D:A3:5E:51:76:32:8F:F1:13:E2:03:0F:2B:4A:33:40:93:3B:71
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/XJ2jXlF2Mo_xE-IDDytKM0CTO3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.69.226.0/24
185.191.20.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:7c:47:c9:06:9a:4e:7f:10:10:fa:c4:97:20:c3:03:72:d7:
e3:00:62:5d:dd:de:77:48:7b:11:02:dd:af:52:4b:5c:25:00:
79:26:ec:16:12:77:6f:93:ab:51:8a:32:84:14:33:82:8e:ae:
5d:b5:a4:3d:9c:db:12:f2:ba:c7:8c:82:5a:67:69:7b:3c:ff:
0f:90:7c:b6:8f:f0:a8:1e:c5:c6:fa:d6:71:eb:63:b4:66:6e:
3c:ce:bb:97:91:be:38:c5:70:0d:94:9e:74:57:ce:ca:c5:f8:
81:2b:01:3d:24:3f:df:14:3d:1d:cb:9f:ce:81:4c:fb:64:1a:
18:3a:3b:45:f1:35:27:a4:3e:bb:12:b1:ac:60:1c:fa:be:5a:
8d:07:68:fe:0a:35:01:20:f4:31:c4:53:21:f6:57:32:46:44:
a2:0a:8c:0d:76:2b:74:80:22:dc:50:f9:7c:b3:73:16:d6:e8:
67:40:b8:0f:70:b9:51:04:03:63:51:d0:c4:be:ab:eb:01:60:
e9:49:64:96:8c:75:68:f1:66:7c:50:f2:2c:32:ce:d4:f0:8f:
e6:1d:51:73:ce:be:b8:ab:9c:52:20:59:29:ae:e3:14:48:ee:
49:20:38:3f:5d:c5:4b:3e:ae:3d:31:51:93:40:f7:fc:4b:c3:
92:70:05:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:36:29 2026 by rpki-client