Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/u8kVj0lBe5cHMPhRnrE68JfHUM0.roa
File: u8kVj0lBe5cHMPhRnrE68JfHUM0.roa (raw, json)
Hash identifier: umRtaSL0v8bZn3uUkqNZS49DRfOWVxsSsn2s9L3TZXI=
Subject key identifier: BB:C9:15:8F:49:41:7B:97:07:30:F8:51:9E:B1:3A:F0:97:C7:50:CD
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019D062C2681753E1B564F7CBD117B04422D
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/u8kVj0lBe5cHMPhRnrE68JfHUM0.roa
Signing time: Thu 19 Mar 2026 12:57:29 +0000
ROA not before: Thu 19 Mar 2026 12:57:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36137
IP address blocks: 103.17.203.0/24 maxlen: 24
103.86.37.0/24 maxlen: 24
103.124.156.0/23 maxlen: 24
116.204.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:2c:26:81:75:3e:1b:56:4f:7c:bd:11:7b:04:42:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Mar 19 12:57:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbc9158f49417b970730f8519eb13af097c750cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:19:ef:da:4e:8b:89:75:17:3f:bf:f2:47:
a6:1e:f6:37:54:ef:f5:f2:1c:44:51:f9:43:50:16:
f1:2b:12:cf:79:ee:bc:ca:f8:82:30:4e:50:a2:8e:
c8:74:99:75:c6:9a:9e:f3:eb:0b:7c:99:b5:f3:ee:
82:86:cf:1f:7e:64:d0:1c:ad:e9:22:99:45:59:0c:
f0:89:81:a2:37:b5:87:cb:82:e6:c8:fc:8d:89:ef:
ec:e6:2e:c1:8e:9b:b8:b5:fb:39:39:99:f6:51:be:
2c:cb:a1:9c:bc:0d:f1:62:a9:4f:36:e1:b2:d8:28:
c5:11:07:ad:36:5c:7e:4d:e4:f9:c6:93:c1:86:7d:
d3:11:da:8c:88:b3:87:e9:e8:1e:d1:87:60:aa:21:
11:64:fa:aa:00:14:01:2d:f7:d6:1c:25:ab:c8:c6:
1f:8b:6b:22:04:eb:2f:85:2e:10:3a:e9:5d:41:78:
53:0e:35:3e:02:d6:6e:54:1c:6f:95:d5:af:98:78:
d9:a5:f6:58:bc:1b:4b:b7:0c:6e:ff:65:cb:7b:56:
4a:36:87:4d:21:c4:b2:d5:f7:2d:ee:50:73:c6:90:
fa:a7:c2:3c:2b:db:15:d8:0c:c0:ef:d5:36:30:9c:
b2:c2:5d:e7:ca:6f:dd:46:ed:5d:b2:e1:88:e1:7a:
31:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C9:15:8F:49:41:7B:97:07:30:F8:51:9E:B1:3A:F0:97:C7:50:CD
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/u8kVj0lBe5cHMPhRnrE68JfHUM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.17.203.0/24
103.86.37.0/24
103.124.156.0/23
116.204.166.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:14:9a:db:44:4f:d5:ba:ab:19:f2:7e:6c:24:1e:78:fc:af:
5c:27:39:f6:d0:39:f6:df:79:e0:0f:5f:57:0a:58:1b:05:e6:
a1:e9:35:ad:78:b2:32:92:85:7e:ed:96:91:53:4c:bf:31:d8:
b5:9c:9a:60:5c:5d:b5:cd:2e:6a:59:ab:09:19:1b:22:83:ab:
b1:ed:8c:8a:d7:02:ec:a7:34:bc:3c:66:cb:9c:be:50:5a:de:
ec:77:08:da:c6:64:3d:3b:50:ac:0e:ef:86:3e:25:85:81:e2:
ad:7b:66:87:4f:0d:d5:59:d2:b4:02:b5:16:6d:2a:23:75:db:
97:55:c0:95:0d:1e:49:64:0b:31:23:bb:55:3a:e3:4a:fe:f0:
70:44:6c:c4:90:5c:b0:c2:f5:05:61:0f:67:58:00:91:e1:71:
0c:e9:c7:d2:08:05:fd:c1:0e:80:4d:7c:12:7f:9b:f4:70:b1:
c7:af:25:01:3d:1a:e7:81:bf:ce:4b:d1:68:52:98:2f:ae:1d:
9f:dd:37:26:e9:3b:dc:9f:b8:88:fa:f5:16:03:bf:ba:90:17:
22:36:cb:aa:50:a4:b2:6f:6e:41:f6:16:44:6c:8d:1c:ff:e7:
61:d5:2c:3d:42:7a:99:de:04:b4:ed:c9:3f:9e:01:09:89:59:
36:d1:5c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:05:21 2026 by rpki-client