Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/wES3JmS1evDzv12L9nhLysTV0y0.roa
File: wES3JmS1evDzv12L9nhLysTV0y0.roa (raw, json)
Hash identifier: c/T9faOqunanNxMjC03L5SXC86UUrLqh1q+xXb6uZvk=
Subject key identifier: C0:44:B7:26:64:B5:7A:F0:F3:BF:5D:8B:F6:78:4B:CA:C4:D5:D3:2D
Certificate issuer: /CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Certificate serial: 01A0E7873B0840B962D332A15BC6CFC6BB60
Authority key identifier: FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/wES3JmS1evDzv12L9nhLysTV0y0.roa
Signing time: Mon 28 Sep 2026 10:19:54 +0000
ROA not before: Mon 28 Sep 2026 10:19:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214238
IP address blocks: 103.160.58.0/24 maxlen: 24
103.163.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:87:3b:08:40:b9:62:d3:32:a1:5b:c6:cf:c6:bb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Validity
Not Before: Sep 28 10:19:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c044b72664b57af0f3bf5d8bf6784bcac4d5d32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:05:c9:b8:38:02:ca:0b:23:00:1b:66:ac:8e:
15:18:29:65:ad:21:c9:3e:ee:4f:87:1b:63:93:8e:
e5:52:ec:c8:52:c4:03:34:d3:ec:75:fd:2e:ab:7f:
1f:bc:e5:94:77:5d:b0:2f:ea:c2:99:b3:cd:3b:41:
20:f7:7f:9c:c9:b2:53:45:9b:75:98:22:e8:47:d4:
7e:b2:84:0d:dd:8d:ba:1f:a5:5e:ce:cb:a8:93:7e:
79:e6:16:c4:e8:41:b5:c8:15:3f:8d:bc:b2:f8:8c:
bd:6e:68:52:82:48:79:9f:14:bb:7d:f5:a8:f0:e8:
6d:fc:60:ab:dc:89:87:44:96:d6:e8:fc:5b:2d:b1:
ec:5a:2e:fe:c8:ac:fa:47:4e:5c:1e:b0:7a:d9:bb:
56:99:b4:20:48:c7:51:6e:ec:ca:bf:c7:a0:f7:bc:
16:ac:b0:d5:ac:b7:6a:7a:22:2a:d3:93:14:a9:1f:
42:e7:4e:43:b6:c1:de:e2:8f:82:6b:9e:ce:93:a5:
54:67:ab:ed:44:9b:71:47:4b:be:9c:11:1c:3d:b8:
42:b6:73:bc:25:83:0a:1f:85:da:8b:c4:74:6d:67:
54:4c:9e:4c:f4:49:bb:d1:ea:6d:0b:80:32:ca:1e:
4d:04:96:2d:1c:08:fd:39:5f:d5:fd:1b:83:30:f2:
e7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:44:B7:26:64:B5:7A:F0:F3:BF:5D:8B:F6:78:4B:CA:C4:D5:D3:2D
X509v3 Authority Key Identifier:
keyid:FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/wES3JmS1evDzv12L9nhLysTV0y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.58.0/24
103.163.52.0/24
Signature Algorithm: sha256WithRSAEncryption
10:db:37:f1:4a:ad:e6:cf:ab:ad:1d:31:2c:32:a8:95:08:f5:
da:31:cb:3c:09:76:d6:05:97:f3:a8:c8:78:63:4e:6a:ac:f7:
1d:4c:c1:11:1c:39:3e:19:77:14:f5:4c:75:4d:8c:f4:df:36:
6b:5c:a3:30:ee:0a:34:ff:b5:53:bd:17:c3:0e:15:fd:d4:82:
86:32:ae:78:01:f0:84:0e:31:db:b6:b4:8d:8e:0b:ee:e3:17:
56:cc:da:06:3a:a2:be:8f:e8:59:fb:92:88:dd:8c:f2:42:55:
41:44:5d:20:db:84:be:ce:d5:fa:14:1b:0a:7d:34:e4:ef:ab:
bc:c8:e4:40:79:e0:a8:6c:a6:2a:a3:fd:e4:0d:af:7a:dc:69:
8d:c8:f4:e0:64:dd:9d:7f:e3:46:fc:c4:32:81:3e:36:c0:e9:
dc:9a:9a:36:d0:47:82:27:90:4f:1e:a8:88:06:3f:2a:e2:d4:
da:63:11:40:03:72:5d:33:68:49:6b:fa:5c:67:fd:ef:39:9d:
16:74:94:19:96:24:05:22:57:aa:06:16:5c:1a:82:32:4d:a7:
f9:d4:37:e3:01:69:ef:20:f7:f1:db:9c:c6:89:94:f3:72:01:
7a:7b:98:57:72:82:a2:cc:1b:f7:3d:96:98:35:2e:a6:60:73:
fc:8b:e1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:55:47 2026 by rpki-client