Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/I6ALXmCteTenZcrOg4TP1V_iWag.roa
File: I6ALXmCteTenZcrOg4TP1V_iWag.roa (raw, json)
Hash identifier: mBTMfxZNjNhqmIR4K/UJM2sVF73blQR0DlqlzSJjP8c=
Subject key identifier: 23:A0:0B:5E:60:AD:79:37:A7:65:CA:CE:83:84:CF:D5:5F:E2:59:A8
Certificate issuer: /CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Certificate serial: 019CFB55309583DD989EE0A20774C5129516
Authority key identifier: FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/I6ALXmCteTenZcrOg4TP1V_iWag.roa
Signing time: Tue 17 Mar 2026 10:26:30 +0000
ROA not before: Tue 17 Mar 2026 10:26:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 103.163.53.0/24 maxlen: 24
155.254.192.0/24 maxlen: 24
155.254.193.0/24 maxlen: 24
155.254.194.0/24 maxlen: 24
155.254.195.0/24 maxlen: 24
185.147.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:55:30:95:83:dd:98:9e:e0:a2:07:74:c5:12:95:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Validity
Not Before: Mar 17 10:26:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23a00b5e60ad7937a765cace8384cfd55fe259a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:67:47:fe:6f:cf:12:5b:31:35:f5:58:3b:
c1:7d:46:f8:74:e2:66:24:70:76:ef:d4:7b:7e:e4:
93:72:e6:ff:4d:3d:1d:fd:95:07:c6:21:3d:ef:2d:
a3:8e:c7:c3:d9:42:5d:18:8e:ed:a4:81:3e:49:b0:
17:f7:d8:de:03:aa:13:bf:d9:1c:82:17:f4:15:51:
18:b9:87:64:c2:33:25:41:22:fe:c0:e1:35:fb:94:
ac:49:de:89:c2:11:fa:43:76:73:ce:f0:d4:9e:b3:
f2:1b:b4:19:17:ee:e0:4f:4c:6d:74:95:4e:44:e6:
d7:5a:d2:76:84:7f:1f:63:9a:6f:43:b0:a8:36:1c:
41:5f:cf:bd:97:f6:b4:7a:88:36:12:28:bd:fe:85:
41:54:46:55:cd:e1:58:70:66:40:26:d8:c9:27:03:
18:64:e7:a0:57:47:37:d0:9f:3e:1e:a4:c8:eb:2c:
52:31:d4:16:73:eb:c7:b1:b0:c4:02:de:42:2e:d4:
47:c9:ef:6e:a5:ef:75:c7:75:f0:53:c7:d5:c1:f9:
6b:e1:de:86:00:86:03:2f:49:9a:79:cb:7b:94:bb:
16:ea:46:ab:62:db:d1:d1:74:ea:bd:d3:53:81:74:
37:aa:23:e7:3f:9b:25:d9:51:d5:18:af:8e:c0:ae:
90:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A0:0B:5E:60:AD:79:37:A7:65:CA:CE:83:84:CF:D5:5F:E2:59:A8
X509v3 Authority Key Identifier:
keyid:FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/I6ALXmCteTenZcrOg4TP1V_iWag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.163.53.0/24
155.254.192.0/22
185.147.126.0/24
Signature Algorithm: sha256WithRSAEncryption
96:08:d0:99:9c:98:35:db:2a:b0:14:6a:73:6b:28:be:64:3a:
d2:8a:78:37:ca:71:13:15:ed:08:df:b0:6c:41:ad:18:3a:6d:
6d:70:75:24:50:53:35:22:5d:47:8c:30:ff:71:3a:1b:de:85:
ee:2d:bf:d5:8a:a9:33:fd:1e:9c:4e:52:d8:d1:ac:15:d4:64:
bd:4a:87:aa:1b:48:f2:88:ca:a7:46:13:ba:85:98:e1:dc:a9:
9f:cc:25:9f:bd:7b:d2:ba:b2:c6:4e:dc:2a:6a:8d:9d:6d:7c:
53:88:d1:d9:59:26:f6:89:11:65:d3:26:47:1f:e2:c2:68:19:
a5:f7:e2:e3:dc:c7:8c:ee:6a:94:ee:cd:60:f7:8f:22:f9:d7:
47:c8:1f:e8:45:3c:08:90:d9:73:9d:35:38:ef:6f:18:6e:ab:
75:2d:27:4c:ef:60:05:84:25:a3:ad:5d:ee:4b:dd:f4:b8:fc:
71:97:40:96:72:eb:ad:07:f6:8d:f7:d2:ec:6e:2e:6e:0b:46:
c5:95:bd:28:94:4c:08:58:93:8e:1f:ca:ea:80:13:d5:f9:46:
61:54:b0:3d:c2:4b:9e:44:dc:5b:3d:f3:34:93:57:44:37:fa:
20:4b:4e:31:af:3e:e4:81:a9:49:0c:8e:e4:57:51:11:c8:7d:
a7:23:2c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:12:08 2026 by rpki-client