Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/w5ldQ0CjL0tGIL7RdlldMWQrpOA.roa
File: w5ldQ0CjL0tGIL7RdlldMWQrpOA.roa (raw, json)
Hash identifier: QwbB2Dm20UEpXkRwmnRCF3k99p0EBKuROeuhoBVi3/8=
Subject key identifier: C3:99:5D:43:40:A3:2F:4B:46:20:BE:D1:76:59:5D:31:64:2B:A4:E0
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019F43E22C540FF33F254D41F580738D26EF
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/w5ldQ0CjL0tGIL7RdlldMWQrpOA.roa
Signing time: Wed 08 Jul 2026 22:38:43 +0000
ROA not before: Wed 08 Jul 2026 22:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44382
IP address blocks: 103.83.86.0/24 maxlen: 24
103.83.87.0/24 maxlen: 24
203.202.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:43:e2:2c:54:0f:f3:3f:25:4d:41:f5:80:73:8d:26:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jul 8 22:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3995d4340a32f4b4620bed176595d31642ba4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:46:c2:aa:0b:32:3c:ec:5c:82:c5:83:7c:99:
7d:47:9d:27:71:c3:16:f2:84:13:a7:07:ff:8a:b1:
c5:4f:73:f8:0d:65:71:9e:35:81:c3:6b:f2:38:01:
5a:c5:14:a7:ba:23:a3:4a:bc:84:98:72:42:22:8b:
73:b9:f8:0e:0a:c9:0b:cc:85:16:0b:6f:e6:45:36:
d7:9f:4a:fc:30:88:0c:47:99:85:c7:d5:cf:d0:a3:
4b:dd:00:8f:f1:93:bb:6f:40:f4:e8:19:eb:49:00:
38:3b:bb:a7:79:f6:99:08:e7:e9:75:f3:26:9f:82:
f4:82:05:4a:20:6e:16:08:2c:a8:8e:72:4c:40:c7:
09:cf:22:71:e3:b6:6c:e6:82:22:a5:49:89:c0:36:
0c:7c:b5:1a:dc:8b:86:30:3d:5d:f0:3c:13:86:56:
a7:f9:c6:b7:31:f3:43:b0:6a:85:bc:66:da:46:fa:
79:4c:25:00:1c:43:ca:c6:b6:c1:3c:09:ae:5a:4d:
7e:7b:38:55:db:78:dc:aa:ca:5d:d1:41:5b:c4:3d:
0e:9a:bb:8c:80:58:4c:64:dd:f4:55:5e:6a:17:56:
2b:2e:e8:58:73:e7:ff:69:8b:94:6d:a2:b0:c6:85:
f8:fe:62:92:8a:f6:69:cc:ef:a9:6b:c2:d2:b4:3c:
e6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:99:5D:43:40:A3:2F:4B:46:20:BE:D1:76:59:5D:31:64:2B:A4:E0
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/w5ldQ0CjL0tGIL7RdlldMWQrpOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.83.86.0/23
203.202.232.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ca:c6:cc:9a:f1:ca:ca:eb:2f:a0:a3:db:16:70:b4:9f:e6:
69:8b:ba:3e:aa:d0:24:39:04:ff:8f:6b:3e:22:de:9f:42:cc:
c4:cb:56:86:ad:0a:fd:ea:b5:52:f7:21:b5:ac:c1:9a:b5:e5:
d4:71:ca:80:80:2c:2e:d9:3e:ab:0a:a4:9a:a8:1d:2c:a7:90:
43:dd:61:1c:f5:3c:06:e4:0e:83:1c:42:2a:fe:e2:fe:10:47:
b3:9a:df:80:96:55:56:dc:0e:9d:a6:ff:41:50:97:ba:fd:cd:
6a:ea:b6:80:d6:42:20:8d:c9:71:4d:6d:c4:12:a8:d3:83:34:
78:81:c4:ea:41:c4:9f:98:57:e3:cd:68:24:6e:1c:8f:a0:b6:
81:57:cc:86:f9:17:c0:36:1a:5c:b0:d7:de:10:c9:51:62:3c:
15:dd:69:72:5a:f5:b8:03:fe:a2:69:41:e1:12:af:82:30:a9:
3a:1b:6f:cd:7c:78:b2:cd:4a:eb:00:d3:12:d8:e2:e7:ef:03:
69:16:f9:49:f0:44:55:2e:bc:b3:ef:66:6b:de:3e:64:c6:d0:
54:bd:42:51:78:6e:ce:d7:0d:f2:93:28:74:37:7d:c2:d1:40:
de:68:ba:bd:c5:8a:60:9e:01:71:a8:44:f4:65:3d:25:77:b3:
24:48:2d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:26:03 2026 by rpki-client