Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/pDHjvPrnGRVcn7WxkMRN6inPbWs.roa
File: pDHjvPrnGRVcn7WxkMRN6inPbWs.roa (raw, json)
Hash identifier: sSrvKGFWB3O/o5I18LIagm8qaz3iZs/A9aJn8MsM2oQ=
Subject key identifier: A4:31:E3:BC:FA:E7:19:15:5C:9F:B5:B1:90:C4:4D:EA:29:CF:6D:6B
Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial: 01A1A50675CCF25D2C97324F60D765D9A126
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/pDHjvPrnGRVcn7WxkMRN6inPbWs.roa
Signing time: Wed 04 Nov 2026 05:27:06 +0000
ROA not before: Wed 04 Nov 2026 05:27:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62468
IP address blocks: 103.250.172.0/23 maxlen: 24
103.250.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a5:06:75:cc:f2:5d:2c:97:32:4f:60:d7:65:d9:a1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Validity
Not Before: Nov 4 05:27:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a431e3bcfae719155c9fb5b190c44dea29cf6d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5d:54:8c:f2:4e:59:06:d3:9a:97:1d:75:18:
16:62:a2:33:a8:b3:fb:e2:1e:42:d4:55:37:d2:51:
2c:93:7e:fa:2d:63:d9:d8:3c:ea:eb:7a:b5:13:f9:
d8:c3:2d:f9:15:e7:0b:cf:6c:c9:e8:b3:17:e6:d5:
4b:cc:ee:af:ad:52:aa:c0:07:71:17:3c:cd:44:0f:
80:6e:6e:80:45:1d:32:51:df:0a:71:40:3e:89:68:
0f:f4:b7:39:18:1c:e9:73:05:fd:51:37:e8:2c:61:
8d:0b:74:76:fe:d8:1e:82:dc:05:73:a3:91:9c:16:
23:7e:4d:f4:bc:43:86:1d:1a:4c:4f:13:a4:7a:aa:
2b:90:bf:81:88:48:08:85:16:ed:9a:c5:b4:e0:6e:
1c:23:b1:da:9a:b0:81:8f:83:91:09:b9:3a:94:6a:
ad:d7:c7:24:6a:84:c3:7d:fb:e2:d2:7e:cc:bf:e1:
16:14:52:f1:36:d7:b9:e5:08:d7:26:5c:04:2e:a3:
1e:18:23:5c:3a:7a:80:a9:aa:e2:9a:83:21:37:a1:
1d:58:9c:fd:b7:d9:8d:4e:aa:a8:63:bd:f2:92:93:
0d:13:d9:40:96:46:7f:09:f0:c8:40:fc:c5:f0:46:
a3:0f:61:35:11:b5:46:5e:f5:ad:b3:07:9f:14:ed:
2d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:31:E3:BC:FA:E7:19:15:5C:9F:B5:B1:90:C4:4D:EA:29:CF:6D:6B
X509v3 Authority Key Identifier:
keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/pDHjvPrnGRVcn7WxkMRN6inPbWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.250.172.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:eb:79:cc:4b:89:73:42:53:ff:fd:e3:fd:52:19:5f:3f:57:
0b:94:3d:66:47:5a:f5:a6:46:2a:02:a4:68:1e:13:ed:6f:b7:
87:fc:66:82:f2:ee:45:2c:33:50:5c:6c:eb:bd:fa:f8:34:1a:
0e:70:8a:b3:95:7b:ec:11:29:90:4e:32:e1:8d:2f:e9:34:05:
1e:3a:48:ba:59:aa:0c:a7:4b:fc:ec:a9:e9:54:44:cd:0d:00:
c2:12:9c:bc:13:09:eb:fb:78:65:5d:b0:3a:f0:94:1d:57:42:
70:17:42:f7:ba:b1:f7:6d:41:84:4b:ca:fd:da:8a:86:cd:08:
63:74:c2:99:f8:d9:02:e1:b0:f4:c0:86:e8:a7:d9:54:4d:e5:
3a:8e:65:9e:d1:cb:b4:2a:97:30:f5:11:09:a8:99:83:f6:37:
58:be:c1:8d:cd:3c:04:d3:92:99:49:25:60:54:72:33:c5:69:
14:b2:6c:e8:52:7f:89:36:5a:3e:a4:3d:1e:3b:07:af:ac:8f:
22:4d:da:c3:8c:64:dd:45:3e:49:5e:91:10:06:a7:8b:d7:b5:
a5:0e:2e:8f:ff:0e:f9:10:1d:04:66:2c:a0:17:72:5d:0c:da:
48:a3:68:26:b1:3c:4f:1a:96:9e:56:e3:f6:33:99:aa:3b:8e:
cf:24:d9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:25:40 2026 by rpki-client