Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3bTHpcZMrexxk6wIVjq-O9DFeig.roa
File: 3bTHpcZMrexxk6wIVjq-O9DFeig.roa (raw, json)
Hash identifier: pVRvLKC2dTj4seTbcxHecbFGi7o+V4jNo7NkByOZc1Y=
Subject key identifier: DD:B4:C7:A5:C6:4C:AD:EC:71:93:AC:08:56:3A:BE:3B:D0:C5:7A:28
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019DF481F0A975A637E582A5A95405EC02D4
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3bTHpcZMrexxk6wIVjq-O9DFeig.roa
Signing time: Mon 04 May 2026 19:40:49 +0000
ROA not before: Mon 04 May 2026 19:40:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49581
IP address blocks: 103.245.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f4:81:f0:a9:75:a6:37:e5:82:a5:a9:54:05:ec:02:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 4 19:40:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddb4c7a5c64cadec7193ac08563abe3bd0c57a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ca:a4:4e:6d:5f:ca:4d:2b:1b:04:bb:a2:d9:
a5:fd:74:0f:61:07:4d:99:57:18:18:81:57:b3:a4:
c9:f5:81:d5:32:75:c4:47:e9:e9:d6:78:2c:bc:82:
03:61:20:f4:22:66:d1:88:5e:c9:91:ff:6d:c6:52:
28:85:28:76:d3:60:f1:f8:eb:a0:dd:1b:84:e9:be:
8d:30:78:62:cc:1b:88:5e:b8:43:5d:d2:0c:5e:87:
1a:92:e6:bf:5e:15:35:01:24:3a:6b:32:a3:6d:6d:
13:e8:a9:90:16:25:b2:81:16:24:63:40:6d:06:6f:
66:fc:e0:02:e8:1a:bf:0c:c7:15:8f:0a:f6:3b:47:
67:f4:e9:8d:a2:90:03:ad:cc:ed:e5:ea:5e:2e:c9:
85:c1:6f:85:a5:00:9e:92:3f:37:9e:83:b2:08:ac:
80:04:2f:f8:38:3b:e5:81:a4:71:69:57:86:46:b1:
9b:05:7c:5d:51:03:15:64:ee:b4:84:06:49:a4:6c:
a6:e7:1a:76:4b:b3:7e:4f:8e:b0:98:48:63:21:75:
38:53:20:15:3c:6c:88:8d:45:3b:b3:99:f7:38:36:
5f:4c:20:9c:fd:22:56:25:c1:ec:31:7c:57:76:e9:
2b:3c:d5:1f:43:84:81:b8:1a:fb:00:15:2c:62:b2:
8e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B4:C7:A5:C6:4C:AD:EC:71:93:AC:08:56:3A:BE:3B:D0:C5:7A:28
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3bTHpcZMrexxk6wIVjq-O9DFeig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.245.228.0/24
Signature Algorithm: sha256WithRSAEncryption
50:84:ea:70:13:2e:1c:57:91:97:0d:ed:d4:64:f0:72:29:bd:
85:85:9e:26:56:f5:ec:83:e2:ae:fa:46:20:6d:a3:2c:9f:dd:
22:38:c7:2e:15:7f:47:f6:9c:96:32:34:3b:a4:aa:e0:74:c3:
c6:1f:11:1b:2d:e7:0b:17:69:13:c6:83:ce:d8:14:10:d4:a6:
f1:a3:5d:0a:42:96:30:95:55:f3:77:8e:81:65:c1:41:0e:68:
56:21:46:68:bc:c3:e0:aa:af:3e:e9:70:32:34:31:46:39:f5:
ed:d1:75:a5:77:c3:81:67:0f:0a:1e:d8:82:e9:b1:da:92:44:
08:d5:5a:f7:10:fb:73:ed:14:dc:2a:b0:56:8a:5b:b0:2f:e2:
fb:83:a8:7c:e1:53:72:09:8e:f8:80:db:9b:6e:fb:77:11:84:
c3:21:db:19:83:9b:98:bd:e1:47:13:92:a9:b7:1a:41:8c:3e:
68:00:31:4c:af:87:a3:26:d9:f5:4c:46:54:3b:b9:61:76:af:
8b:39:77:9d:f7:e5:59:90:08:a0:0b:9a:e9:32:5c:16:4f:3d:
27:e7:27:d3:c4:40:54:fb:1d:1d:79:03:bb:31:5b:e9:8d:a7:
dd:3b:66:92:b6:a1:3c:77:99:63:d3:0e:0d:5a:d2:7a:da:8e:
f5:f2:09:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:05:50 2026 by rpki-client