Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jQqPFLBjCfNfrR-prGQMaU-Y4v4.roa
File: jQqPFLBjCfNfrR-prGQMaU-Y4v4.roa (raw, json)
Hash identifier: 5OK+nPkshLwNyXZUHVmnvsS7Ngtf4rGDyQQnoGBRm6M=
Subject key identifier: 8D:0A:8F:14:B0:63:09:F3:5F:AD:1F:A9:AC:64:0C:69:4F:98:E2:FE
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019D0FD5E7D7C6295D3A850D96C21BDAD04E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jQqPFLBjCfNfrR-prGQMaU-Y4v4.roa
Signing time: Sat 21 Mar 2026 09:59:29 +0000
ROA not before: Sat 21 Mar 2026 09:59:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213711
IP address blocks: 103.110.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0f:d5:e7:d7:c6:29:5d:3a:85:0d:96:c2:1b:da:d0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 21 09:59:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d0a8f14b06309f35fad1fa9ac640c694f98e2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:14:c0:cb:d2:ac:2a:13:8c:95:47:72:3f:7b:
61:e0:bb:14:4c:33:ae:99:64:ae:b0:6f:96:35:a5:
09:f8:d2:a9:97:a6:e8:6a:db:0e:29:7f:e2:f9:04:
3b:19:70:ca:70:8c:34:56:5b:5d:53:03:72:fd:c1:
1f:00:7d:ed:0c:d8:07:96:03:66:4f:12:02:05:c5:
ab:54:47:11:01:b2:62:d1:1a:b8:8d:35:8c:a8:cf:
ef:5e:6e:74:1d:b2:d4:6e:c8:4c:2d:ff:1a:d0:e7:
98:66:5d:9f:ea:e9:c3:81:67:4b:ef:45:e6:d2:0d:
97:c1:27:d5:61:31:34:f2:f9:5b:21:c4:22:43:c7:
aa:65:00:67:8a:25:2a:89:51:8b:ad:4d:c9:bf:8b:
17:00:69:ee:87:9b:0d:2c:39:49:68:6a:1a:eb:19:
88:de:0f:3a:54:16:14:f7:e2:88:0b:f7:3f:8a:76:
94:45:84:a6:40:7e:1e:e3:b4:26:e2:ac:87:65:5f:
ce:53:f5:1a:2a:8f:03:c2:88:f1:fb:c0:ae:a1:c4:
96:8a:44:d7:b1:47:2c:80:e8:09:24:92:b8:0e:92:
d6:5e:1b:9f:9f:e8:e1:b0:fd:4c:41:17:a8:8b:08:
85:68:1f:34:11:16:a9:e5:f5:0e:88:9c:2e:85:4f:
30:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0A:8F:14:B0:63:09:F3:5F:AD:1F:A9:AC:64:0C:69:4F:98:E2:FE
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jQqPFLBjCfNfrR-prGQMaU-Y4v4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.110.39.0/24
Signature Algorithm: sha256WithRSAEncryption
45:29:ce:1f:23:3e:b1:cc:5e:6d:6a:49:82:81:ba:d1:f0:6b:
ae:8c:1f:c3:62:5b:05:5e:03:8a:62:8a:d5:78:fa:a2:71:c0:
b7:bc:3f:cc:4b:21:c7:25:76:0e:27:37:ef:61:48:59:07:23:
16:39:57:47:a7:e6:89:ca:43:95:5a:39:cf:46:16:c9:f2:84:
18:a6:84:57:13:c1:aa:18:b0:19:2f:f3:3f:96:89:f4:a1:47:
ba:95:68:55:49:e8:21:d0:fd:3d:da:bc:2b:1a:d2:27:19:b7:
0b:b7:14:72:57:99:4f:72:a2:1e:f9:13:eb:5a:12:3d:53:60:
c1:98:a0:a7:91:15:17:15:8c:bc:2b:ae:1a:6d:d8:2b:28:a8:
e6:b6:17:39:ee:70:01:c0:44:17:69:f9:90:55:8d:da:f2:f2:
21:f3:51:64:5b:c3:0e:78:dd:ff:70:09:25:f6:ce:44:7d:fb:
0a:bf:2b:c4:ba:9f:e3:66:60:29:5d:5b:d1:13:ca:e6:f7:71:
ef:5e:95:13:9d:cd:d7:f5:1e:f3:e1:e3:e8:e2:8c:ba:65:03:
a5:a3:f8:34:df:2a:31:66:e2:b8:bf:a8:2c:16:d2:dd:2c:a7:
29:30:bc:22:03:fc:ea:7a:c9:6e:32:51:fc:82:64:94:72:d0:
5e:41:ac:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:02:54 2026 by rpki-client