Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/X5uUQdt18p324LUKAUAju_EtV5M.roa
File: X5uUQdt18p324LUKAUAju_EtV5M.roa (raw, json)
Hash identifier: Uh+nx1ykCeq4V/7jtccqXb+9XUejz93sBrc5WkWEX+Q=
Subject key identifier: 5F:9B:94:41:DB:75:F2:9D:F6:E0:B5:0A:01:40:23:BB:F1:2D:57:93
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A08CAF826481BB75715377BC3D5A8F4930
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/X5uUQdt18p324LUKAUAju_EtV5M.roa
Signing time: Thu 10 Sep 2026 18:58:27 +0000
ROA not before: Thu 10 Sep 2026 18:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200464
IP address blocks: 103.17.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:af:82:64:81:bb:75:71:53:77:bc:3d:5a:8f:49:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Sep 10 18:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f9b9441db75f29df6e0b50a014023bbf12d5793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e2:55:0a:27:db:e4:9e:30:e4:22:eb:1a:13:
65:6c:f0:62:9f:c6:8b:9d:a9:9e:51:46:9d:1f:06:
8e:9d:17:42:f4:81:07:a9:52:72:22:67:31:3f:da:
07:c6:7f:64:6d:e0:59:62:33:3c:3b:05:f2:b4:2e:
32:e7:64:ea:a8:7a:0e:35:5b:6f:71:25:be:de:60:
02:24:19:6c:59:81:58:41:ab:9f:b9:14:01:01:36:
37:18:68:55:48:1c:bb:13:4e:ca:0d:4d:9d:82:a2:
f3:46:9e:2b:ce:47:bd:53:8d:1c:c0:ff:01:7d:c8:
8f:38:f7:ce:78:9b:03:d8:39:ce:50:a9:48:f3:87:
c0:8a:f6:4f:6b:57:d0:50:c3:ea:da:10:ab:34:b6:
d2:97:28:e3:13:13:c8:9b:95:94:7a:e6:d6:b7:a6:
b8:81:c0:63:56:e0:ed:d9:09:0e:50:5a:58:ec:73:
bf:c6:1c:3c:4d:41:ea:a4:87:c6:d6:cd:2e:59:1e:
70:81:ac:d0:58:b3:d4:6c:ad:16:a7:e2:6e:09:0b:
fe:40:34:66:53:bf:b5:c2:a6:3a:7b:c9:91:7a:03:
dd:b8:3b:2e:d8:df:64:ee:93:0f:a8:91:c1:c0:77:
f8:93:6b:c5:04:71:bd:fc:dd:68:91:11:ff:09:9c:
0c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9B:94:41:DB:75:F2:9D:F6:E0:B5:0A:01:40:23:BB:F1:2D:57:93
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/X5uUQdt18p324LUKAUAju_EtV5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.17.202.0/24
Signature Algorithm: sha256WithRSAEncryption
69:3a:97:1e:59:2f:56:cc:ff:93:0d:b7:af:ab:c5:c3:f8:4a:
9d:10:65:06:c2:56:72:78:33:da:01:52:e9:e1:0f:1b:aa:e1:
79:0a:54:08:56:35:31:1a:cb:65:ab:0b:a5:3b:22:17:13:ab:
31:00:22:a9:a9:3d:a1:90:43:63:43:b8:e0:4b:2d:1d:62:58:
a2:cc:26:56:68:e6:6b:6a:f6:72:75:d5:6f:93:96:64:c9:0f:
d2:c0:cc:3d:62:fa:9d:95:a3:ce:b7:8c:d8:71:ee:70:dc:70:
3e:60:22:37:cb:30:39:33:76:00:3f:e2:15:40:db:34:48:db:
ce:12:e4:34:72:b7:d4:ec:e5:a2:8b:47:dc:2c:0e:97:e7:b3:
8a:23:37:3b:4a:b5:3c:ee:17:70:3a:e8:e5:91:28:f1:2c:08:
dd:1d:79:8b:45:3e:e3:bc:e0:74:06:95:43:d3:d0:91:12:51:
fe:93:e5:e1:4a:b4:e9:d5:8d:63:4b:53:6f:08:47:0b:00:81:
9f:b2:65:0c:7f:51:83:1a:21:86:96:65:c0:14:c1:fc:6b:85:
5e:a3:c8:2a:09:0e:90:61:e3:92:42:99:12:62:6a:29:10:4b:
d0:75:80:4f:02:ea:f1:1f:74:29:b4:0c:2f:3a:53:8f:f7:92:
39:a5:2d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:51:03 2026 by rpki-client