Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Iss03fxG183Ad8Zh0e8rI5Yq8wU.roa
File: Iss03fxG183Ad8Zh0e8rI5Yq8wU.roa (raw, json)
Hash identifier: SK8n2+G902FJsAuRdbQgfQwMqnoWcReHIQgfCseee8o=
Subject key identifier: 22:CB:34:DD:FC:46:D7:CD:C0:77:C6:61:D1:EF:2B:23:96:2A:F3:05
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 0199C01D6DC324E0FCC87B61843B1C5770C4
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Iss03fxG183Ad8Zh0e8rI5Yq8wU.roa
Signing time: Tue 07 Oct 2025 19:19:38 +0000
ROA not before: Tue 07 Oct 2025 19:19:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44559
IP address blocks: 103.155.126.0/24 maxlen: 24
130.49.0.0/24 maxlen: 24
155.212.154.0/24 maxlen: 24
155.212.155.0/24 maxlen: 24
155.212.212.0/24 maxlen: 24
155.212.213.0/24 maxlen: 24
170.168.35.0/24 maxlen: 24
170.168.36.0/24 maxlen: 24
170.168.37.0/24 maxlen: 24
170.168.38.0/24 maxlen: 24
170.168.39.0/24 maxlen: 24
170.168.52.0/24 maxlen: 24
170.168.53.0/24 maxlen: 24
170.168.54.0/24 maxlen: 24
170.168.55.0/24 maxlen: 24
170.168.57.0/24 maxlen: 24
170.168.58.0/24 maxlen: 24
170.168.59.0/24 maxlen: 24
170.168.68.0/24 maxlen: 24
170.168.69.0/24 maxlen: 24
170.168.70.0/24 maxlen: 24
170.168.71.0/24 maxlen: 24
170.168.80.0/24 maxlen: 24
170.168.81.0/24 maxlen: 24
170.168.82.0/24 maxlen: 24
170.168.83.0/24 maxlen: 24
170.168.84.0/24 maxlen: 24
170.168.85.0/24 maxlen: 24
170.168.86.0/24 maxlen: 24
170.168.87.0/24 maxlen: 24
170.168.92.0/24 maxlen: 24
170.168.93.0/24 maxlen: 24
170.168.94.0/24 maxlen: 24
170.168.95.0/24 maxlen: 24
170.168.104.0/24 maxlen: 24
170.168.105.0/24 maxlen: 24
170.168.106.0/24 maxlen: 24
170.168.107.0/24 maxlen: 24
170.168.109.0/24 maxlen: 24
170.168.110.0/24 maxlen: 24
170.168.111.0/24 maxlen: 24
170.168.120.0/24 maxlen: 24
170.168.121.0/24 maxlen: 24
170.168.122.0/24 maxlen: 24
170.168.123.0/24 maxlen: 24
170.168.124.0/24 maxlen: 24
170.168.125.0/24 maxlen: 24
170.168.126.0/24 maxlen: 24
170.168.127.0/24 maxlen: 24
170.168.132.0/24 maxlen: 24
170.168.133.0/24 maxlen: 24
170.168.134.0/24 maxlen: 24
170.168.135.0/24 maxlen: 24
170.168.140.0/24 maxlen: 24
170.168.141.0/24 maxlen: 24
170.168.142.0/24 maxlen: 24
170.168.143.0/24 maxlen: 24
170.168.148.0/24 maxlen: 24
170.168.149.0/24 maxlen: 24
170.168.150.0/24 maxlen: 24
170.168.151.0/24 maxlen: 24
170.168.156.0/24 maxlen: 24
170.168.158.0/24 maxlen: 24
170.168.159.0/24 maxlen: 24
170.168.160.0/24 maxlen: 24
170.168.161.0/24 maxlen: 24
170.168.162.0/24 maxlen: 24
170.168.163.0/24 maxlen: 24
170.168.176.0/24 maxlen: 24
170.168.177.0/24 maxlen: 24
170.168.178.0/24 maxlen: 24
170.168.179.0/24 maxlen: 24
170.168.184.0/24 maxlen: 24
170.168.185.0/24 maxlen: 24
170.168.186.0/24 maxlen: 24
170.168.187.0/24 maxlen: 24
170.168.192.0/24 maxlen: 24
170.168.193.0/24 maxlen: 24
170.168.194.0/24 maxlen: 24
170.168.195.0/24 maxlen: 24
170.168.200.0/24 maxlen: 24
170.168.201.0/24 maxlen: 24
170.168.202.0/24 maxlen: 24
170.168.203.0/24 maxlen: 24
170.168.208.0/24 maxlen: 24
170.168.209.0/24 maxlen: 24
170.168.210.0/24 maxlen: 24
170.168.211.0/24 maxlen: 24
170.168.216.0/24 maxlen: 24
170.168.217.0/24 maxlen: 24
170.168.218.0/24 maxlen: 24
170.168.219.0/24 maxlen: 24
170.168.224.0/24 maxlen: 24
170.168.225.0/24 maxlen: 24
170.168.226.0/24 maxlen: 24
170.168.227.0/24 maxlen: 24
170.168.232.0/24 maxlen: 24
170.168.233.0/24 maxlen: 24
170.168.234.0/24 maxlen: 24
170.168.235.0/24 maxlen: 24
170.168.244.0/24 maxlen: 24
170.168.245.0/24 maxlen: 24
170.168.246.0/24 maxlen: 24
170.168.252.0/24 maxlen: 24
170.168.253.0/24 maxlen: 24
170.168.254.0/24 maxlen: 24
170.168.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c0:1d:6d:c3:24:e0:fc:c8:7b:61:84:3b:1c:57:70:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Oct 7 19:19:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22cb34ddfc46d7cdc077c661d1ef2b23962af305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:14:8c:c9:65:c6:a0:1b:48:ab:f4:3a:9f:bc:
d5:61:a5:f7:c7:18:9d:01:41:87:7c:cc:81:76:32:
64:8e:da:a6:2b:5e:a6:82:29:1a:5f:cb:80:0c:a5:
ba:05:bf:7b:34:50:b3:cc:b8:38:6d:a7:a9:9b:0d:
27:23:23:81:50:bd:4d:0c:d2:17:c1:ae:5c:c4:b6:
07:41:af:99:c4:71:9d:e6:83:a2:d8:8c:76:84:83:
7c:ee:5e:4a:25:51:88:1f:e7:ba:6e:29:e0:78:2f:
1a:37:3e:da:45:91:30:01:91:d0:42:6c:7c:0e:41:
1c:27:91:13:fe:d7:54:93:1f:c6:de:3a:50:ec:f3:
3d:d2:4d:dc:48:6d:7c:1e:34:d3:f2:f2:01:85:ac:
e6:4a:bf:ae:d2:5b:ef:df:c9:18:82:dd:9a:25:b6:
3f:02:5e:02:6a:be:ff:c6:98:53:fc:9e:1f:97:66:
15:72:f3:4f:66:94:ec:cc:cd:bf:33:ad:35:54:fb:
b1:2b:bd:74:bb:95:4c:45:46:cb:93:ee:09:1f:7b:
4c:cc:6c:ac:aa:0e:6c:1c:44:eb:82:5d:9b:9a:78:
84:cf:52:d6:57:69:97:e3:48:bd:ef:05:99:bd:b3:
2e:3b:99:52:67:00:9c:e4:f9:ab:47:b3:50:d5:f6:
a2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CB:34:DD:FC:46:D7:CD:C0:77:C6:61:D1:EF:2B:23:96:2A:F3:05
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Iss03fxG183Ad8Zh0e8rI5Yq8wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.155.126.0/24
130.49.0.0/24
155.212.154.0/23
155.212.212.0/23
170.168.35.0-170.168.39.255
170.168.52.0/22
170.168.57.0-170.168.59.255
170.168.68.0/22
170.168.80.0/21
170.168.92.0/22
170.168.104.0/22
170.168.109.0-170.168.111.255
170.168.120.0/21
170.168.132.0/22
170.168.140.0/22
170.168.148.0/22
170.168.156.0/24
170.168.158.0-170.168.163.255
170.168.176.0/22
170.168.184.0/22
170.168.192.0/22
170.168.200.0/22
170.168.208.0/22
170.168.216.0/22
170.168.224.0/22
170.168.232.0/22
170.168.244.0-170.168.246.255
170.168.252.0/22
Signature Algorithm: sha256WithRSAEncryption
36:14:1e:1c:e0:89:e9:6d:67:08:ae:ef:ee:bd:3e:c3:06:34:
0a:3a:bb:d3:fb:0a:9d:0e:f2:92:0f:cc:85:19:d6:d3:a1:d3:
e5:05:4c:a9:5b:13:61:4c:81:f7:00:e2:4c:a5:ac:3d:b4:4d:
95:ff:ed:bf:39:4e:a4:37:db:54:dd:2b:e1:17:2a:a5:e6:83:
09:2d:19:5b:61:f0:7e:03:d4:ea:bb:b5:1a:41:c2:82:2b:69:
9c:75:40:32:21:be:7c:a8:96:05:e5:3f:aa:9e:0e:23:b4:60:
51:0d:64:23:22:d1:36:05:30:e4:b9:8c:5e:f5:98:b7:0f:13:
76:69:be:9f:03:9a:ed:c7:1b:8c:f7:0a:04:03:7c:08:b8:cd:
65:36:79:dd:b3:d9:df:41:ae:42:13:47:55:b6:57:31:c3:6e:
c4:f9:67:7d:4a:79:c0:b8:ff:f5:80:ca:c6:54:32:8f:34:ec:
fd:90:1b:56:b3:d5:d5:d7:6b:9c:37:12:c8:ef:d8:16:20:53:
ce:96:ed:7e:6f:0f:dd:ac:4e:80:0e:c2:ba:84:67:e9:2f:c3:
ac:e9:7f:30:79:74:24:8f:a3:ae:59:82:05:43:3a:01:d4:0e:
80:41:71:b4:f1:bc:9c:3e:fb:35:55:15:55:db:26:4f:f9:a8:
a6:3f:17:df
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgISAZnAHW3DJOD8yHthhDscV3DEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh
MGYwY2UwHhcNMjUxMDA3MTkxOTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmNiMzRkZGZjNDZkN2NkYzA3N2M2NjFkMWVmMmIyMzk2MmFmMzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xSMyWXGoBtIq/Q6n7zVYaX3xxid
AUGHfMyBdjJkjtqmK16mgikaX8uADKW6Bb97NFCzzLg4baepmw0nIyOBUL1NDNIX
wa5cxLYHQa+ZxHGd5oOi2Ix2hIN87l5KJVGIH+e6bingeC8aNz7aRZEwAZHQQmx8
DkEcJ5ET/tdUkx/G3jpQ7PM90k3cSG18HjTT8vIBhazmSr+u0lvv38kYgt2aJbY/
Al4Car7/xphT/J4fl2YVcvNPZpTszM2/M601VPuxK710u5VMRUbLk+4JH3tMzGys
qg5sHETrgl2bmniEz1LWV2mX40i97wWZvbMuO5lSZwCc5PmrR7NQ1faiHwIDAQAB
o4IC2DCCAtQwHQYDVR0OBBYEFCLLNN38RtfNwHfGYdHvKyOWKvMFMB8GA1UdIwQY
MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et
YTY2N2JiNzY1MDYwLzEvSXNzMDNmeEcxODNBZDhaaDBlOHJJNVlxOHdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw
LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHtBggrBgEFBQcBBwEB/wSB3TCB2jCB1wQCAAEwgdADBABn
m34DBACCMQADBAGb1JoDBAGb1NQwDAMEAKqoIwMEA6qoIAMEAqqoNDAMAwQAqqg5
AwQCqqg4AwQCqqhEAwQDqqhQAwQCqqhcAwQCqqhoMAwDBACqqG0DBASqqGADBAOq
qHgDBAKqqIQDBAKqqIwDBAKqqJQDBACqqJwwDAMEAaqongMEAqqooAMEAqqosAME
AqqouAMEAqqowAMEAqqoyAMEAqqo0AMEAqqo2AMEAqqo4AMEAqqo6DAMAwQCqqj0
AwQAqqj2AwQCqqj8MA0GCSqGSIb3DQEBCwUAA4IBAQA2FB4c4InpbWcIru/uvT7D
BjQKOrvT+wqdDvKSD8yFGdbTodPlBUypWxNhTIH3AOJMpaw9tE2V/+2/OU6kN9tU
3SvhFyql5oMJLRlbYfB+A9Tqu7UaQcKCK2mcdUAyIb58qJYF5T+qng4jtGBRDWQj
ItE2BTDkuYxe9Zi3DxN2ab6fA5rtxxuM9woEA3wIuM1lNnnds9nfQa5CE0dVtlcx
w27E+Wd9SnnAuP/1gMrGVDKPNOz9kBtWs9XV12ucNxLI79gWIFPOlu1+bw/drE6A
DsK6hGfpL8Os6X8weXQkj6OuWYIFQzoB1A6AQXG08bycPvs1VRVV2yZP+aimPxff
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:55:14 2025 by rpki-client