Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/hVZvZmnVG3vImv8u5xBAfUbmOJE.roa
File: hVZvZmnVG3vImv8u5xBAfUbmOJE.roa (raw, json)
Hash identifier: IX++zAzSiaacYYsA4R2ARxccQ5OWLEdk2sTnOt7Nhdk=
Subject key identifier: 85:56:6F:66:69:D5:1B:7B:C8:9A:FF:2E:E7:10:40:7D:46:E6:38:91
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019E0D020626FC486546683B9B26DADF627A
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/hVZvZmnVG3vImv8u5xBAfUbmOJE.roa
Signing time: Sat 09 May 2026 13:51:36 +0000
ROA not before: Sat 09 May 2026 13:51:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36137
IP address blocks: 103.86.37.0/24 maxlen: 24
103.124.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0d:02:06:26:fc:48:65:46:68:3b:9b:26:da:df:62:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: May 9 13:51:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85566f6669d51b7bc89aff2ee710407d46e63891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a4:42:e4:d7:e8:60:8c:62:e2:4e:1c:cb:1c:
2c:74:61:11:59:3c:84:cc:cd:71:6c:d1:14:3b:e0:
3c:12:69:2a:a0:07:3a:5e:6f:55:bc:c4:5b:50:fa:
68:56:d3:d9:38:29:04:22:4b:3d:a0:6e:71:7f:d8:
67:ea:ff:7d:c6:e4:3a:23:05:c3:d9:48:54:10:c7:
75:e3:49:b0:ed:f6:13:37:ea:a4:46:48:eb:6a:81:
9e:65:31:ba:e4:52:ea:dd:7a:11:4c:d0:3b:31:d6:
99:ff:50:bc:4c:1e:e6:35:a6:f1:3e:ce:7e:14:16:
19:92:ca:2b:de:44:c2:36:5e:6a:ae:77:3d:ce:dc:
1e:59:86:eb:59:91:cc:c1:3b:a6:ac:2f:b7:13:ec:
24:4c:1a:d9:99:df:c1:3f:65:48:d3:ac:2f:e4:6e:
c5:93:a0:5a:75:22:b3:e6:e1:a6:92:55:1d:9e:db:
64:46:43:d8:a8:0d:43:cd:f2:8a:4b:1e:1a:b4:15:
b6:98:71:62:6d:5e:e8:1b:2f:56:85:00:a9:b7:3f:
07:d0:2c:ef:a4:37:24:e9:d0:d8:1e:bb:78:03:2b:
9a:24:66:86:87:a0:3d:49:55:37:5b:d5:6a:c0:3f:
a0:c9:c5:e0:f0:d4:f3:d3:84:3f:36:3c:8e:6d:ac:
7e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:56:6F:66:69:D5:1B:7B:C8:9A:FF:2E:E7:10:40:7D:46:E6:38:91
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/hVZvZmnVG3vImv8u5xBAfUbmOJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.86.37.0/24
103.124.156.0/23
Signature Algorithm: sha256WithRSAEncryption
20:04:d9:75:b7:87:4d:23:1a:c8:0b:e1:e6:88:c1:a5:42:59:
08:99:3f:4e:52:40:d3:a2:14:20:92:07:c4:81:e9:e1:60:af:
6c:f8:77:54:84:10:5c:ea:7a:c7:d1:8e:9a:3c:8e:b7:d3:b5:
2b:77:c3:ce:e5:29:bb:5f:7c:23:e4:67:cd:83:da:5e:73:29:
b5:0d:dd:2f:fa:b6:c8:2c:1a:ec:5e:80:2a:39:2e:57:23:2c:
39:61:fb:69:b3:ca:c0:1e:34:cc:f0:48:7a:4d:20:83:7e:89:
ee:50:6d:33:e9:e4:e8:be:c4:aa:68:c6:4a:d1:0a:11:2d:dd:
1e:fb:9e:ef:47:27:72:8a:ab:a8:7a:01:9f:4d:b3:0a:0b:30:
a0:e7:ae:43:44:92:70:0a:25:97:42:01:21:d7:2e:b6:bf:3e:
e1:ca:1e:8d:66:2c:2a:6e:3f:8a:39:93:6e:ca:8a:86:08:6a:
8b:04:b2:e5:84:f7:a9:2d:8a:78:5a:18:15:e3:75:0b:ae:fc:
a3:7d:5b:79:a1:a5:25:e9:56:b6:c7:52:de:08:c3:49:8d:7a:
5a:78:e9:72:98:ad:bd:a6:46:37:d3:76:01:99:4d:31:2b:e8:
24:5c:ca:0d:06:c3:c8:10:31:f3:9a:70:58:96:8d:44:9f:67:
a0:cd:1f:da
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ4NAgYm/EhlRmg7myba32J6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGFhNTU3YzNkM2QxZTZiN2YwNTI1YzM0Y2MxZDQ4OGE1
YTkyOTQwHhcNMjYwNTA5MTM1MTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTU2NmY2NjY5ZDUxYjdiYzg5YWZmMmVlNzEwNDA3ZDQ2ZTYzODkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqRC5NfoYIxi4k4cyxwsdGERWTyE
zM1xbNEUO+A8EmkqoAc6Xm9VvMRbUPpoVtPZOCkEIks9oG5xf9hn6v99xuQ6IwXD
2UhUEMd140mw7fYTN+qkRkjraoGeZTG65FLq3XoRTNA7MdaZ/1C8TB7mNabxPs5+
FBYZksor3kTCNl5qrnc9ztweWYbrWZHMwTumrC+3E+wkTBrZmd/BP2VI06wv5G7F
k6BadSKz5uGmklUdnttkRkPYqA1DzfKKSx4atBW2mHFibV7oGy9WhQCptz8H0Czv
pDck6dDYHrt4AyuaJGaGh6A9SVU3W9VqwD+gycXg8NTz04Q/NjyObax+twIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIVWb2Zp1Rt7yJr/LucQQH1G5jiRMB8GA1UdIwQY
MBaAFJFKpVfD09Hmt/BSXDTMHUiKWpKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYt
NGEzNDhlN2JlNDQxLzEvaFZadlptblZHM3ZJbXY4dTV4QkFmVWJtT0pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kYjk3ZDAtMjhmMi00MzI5LWI4NTYtNGEzNDhlN2JlNDQx
LzEva1VxbFY4UFQwZWEzOEZKY05Nd2RTSXBha3BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAZ1YlAwQB
Z3ycMA0GCSqGSIb3DQEBCwUAA4IBAQAgBNl1t4dNIxrIC+HmiMGlQlkImT9OUkDT
ohQgkgfEgenhYK9s+HdUhBBc6nrH0Y6aPI6307Urd8PO5Sm7X3wj5GfNg9pecym1
Dd0v+rbILBrsXoAqOS5XIyw5Yftps8rAHjTM8Eh6TSCDfonuUG0z6eTovsSqaMZK
0QoRLd0e+57vRydyiquoegGfTbMKCzCg565DRJJwCiWXQgEh1y62vz7hyh6NZiwq
bj+KOZNuyoqGCGqLBLLlhPepLYp4WhgV43ULrvyjfVt5oaUl6Va2x1LeCMNJjXpa
eOlymK29pkY303YBmU0xK+gkXMoNBsPIEDHzmnBYlo1En2egzR/a
-----END CERTIFICATE-----
Generated at Wed May 13 03:16:09 2026 by rpki-client