Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/II293rtZCAefNFiV1zF9jKls_E0.roa
File: II293rtZCAefNFiV1zF9jKls_E0.roa (raw, json)
Hash identifier: GdwXSrfTusYw0mAbZn52ftA1YH7VUQGdMpm+rfKLmto=
Subject key identifier: 20:8D:BD:DE:BB:59:08:07:9F:34:58:95:D7:31:7D:8C:A9:6C:FC:4D
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A1DB607280E354C1ADEA22AAA5C578BAD1
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/II293rtZCAefNFiV1zF9jKls_E0.roa
Signing time: Sat 14 Nov 2026 18:44:53 +0000
ROA not before: Sat 14 Nov 2026 18:44:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214238
IP address blocks: 103.148.140.0/24 maxlen: 24
103.149.84.0/24 maxlen: 24
103.151.102.0/24 maxlen: 24
103.152.16.0/24 maxlen: 24
138.249.19.0/24 maxlen: 24
138.249.116.0/24 maxlen: 24
138.249.140.0/24 maxlen: 24
170.168.4.0/24 maxlen: 24
170.168.5.0/24 maxlen: 24
170.168.12.0/24 maxlen: 24
170.168.24.0/24 maxlen: 24
170.168.25.0/24 maxlen: 24
170.168.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:60:72:80:e3:54:c1:ad:ea:22:aa:a5:c5:78:ba:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Nov 14 18:44:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=208dbddebb5908079f345895d7317d8ca96cfc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:41:f1:a4:33:7f:3f:63:ae:1b:00:70:ae:b9:
2c:8c:12:d5:fd:82:e2:c7:6a:8f:b3:62:78:f5:b9:
49:a1:f0:c7:18:2b:f1:d4:45:08:7e:8c:90:9d:09:
c8:0b:03:13:1c:40:61:b3:c0:3e:04:62:20:7a:61:
90:28:2a:78:d4:88:6c:eb:04:12:14:35:f9:12:62:
4f:6e:17:1a:ac:dc:15:eb:e6:d5:3d:ef:55:fe:56:
ef:41:c2:cd:a3:21:f7:08:b5:e2:0e:28:c3:d7:81:
62:f2:41:88:35:48:1e:e5:cb:40:cf:90:57:dd:22:
4a:bb:51:ab:9e:a8:f3:33:b7:a1:f1:74:2d:d5:d3:
ab:f0:3b:c9:0f:57:e5:6e:75:c8:79:d5:0d:b7:c4:
ed:8b:2b:50:ef:b6:d5:2e:ea:74:29:dd:38:b2:d2:
bd:0e:d9:62:4e:f4:72:16:52:bd:ca:72:67:8e:88:
12:7f:73:17:8d:50:50:43:e3:bf:37:99:f5:b9:7a:
e9:1f:b0:34:3e:a9:24:67:14:a5:b8:9b:c1:66:99:
f7:11:97:d4:e5:2a:e5:11:f9:6f:65:15:87:3c:c2:
a8:86:4a:27:03:5c:07:c5:93:07:82:cd:67:14:1f:
32:a9:ab:ee:d1:24:7c:f7:87:4c:7c:35:85:2d:43:
11:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8D:BD:DE:BB:59:08:07:9F:34:58:95:D7:31:7D:8C:A9:6C:FC:4D
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/II293rtZCAefNFiV1zF9jKls_E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.148.140.0/24
103.149.84.0/24
103.151.102.0/24
103.152.16.0/24
138.249.19.0/24
138.249.116.0/24
138.249.140.0/24
170.168.4.0/23
170.168.12.0/24
170.168.24.0/23
170.168.32.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:0a:8c:59:1c:09:99:bf:af:51:7b:a1:3e:7d:c8:36:d7:11:
e5:a3:4c:f1:fb:b5:33:b8:f7:ce:d4:84:bc:14:c5:ca:23:a2:
07:b4:19:3e:55:bf:1a:3c:bb:ce:db:d9:8f:90:b6:6b:43:cd:
b3:75:ed:31:1c:fd:eb:bb:5f:f0:82:6a:4a:a8:92:4e:cc:46:
06:5c:13:56:c4:dd:eb:e1:0f:d9:44:99:18:6d:8a:13:46:e3:
8f:c0:b4:6e:04:76:60:0e:fd:91:f9:fc:77:64:1a:fb:e1:4b:
f3:e1:4d:96:d7:23:2b:d9:94:1a:4a:c8:86:33:72:5b:39:a6:
87:71:a9:b6:1f:40:3a:ff:0d:05:65:56:6e:65:5f:56:f6:a5:
d6:d2:36:3f:53:5e:cd:ec:4d:4b:cd:81:48:2b:ce:35:4e:aa:
53:e5:9b:ec:d0:16:50:b5:cc:f2:60:25:55:44:ec:94:5e:8b:
e0:03:b9:ff:78:ba:ff:98:67:64:f0:1a:21:fc:b1:81:33:1c:
4d:2c:ee:ea:e5:79:e6:8f:d3:e6:fc:f3:d4:82:97:d4:23:f4:
e1:ab:fc:82:a8:a1:e7:f8:2e:69:3c:5d:44:da:b2:18:e3:00:
70:d1:fb:73:61:be:63:08:e1:67:45:b3:50:00:6f:f7:53:81:
1d:ef:e9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 07:21:51 2026 by rpki-client