Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/4Rp0pYTPzmcpl3vtXAjsk3xrRxU.roa
File: 4Rp0pYTPzmcpl3vtXAjsk3xrRxU.roa (raw, json)
Hash identifier: kFKfBo1lMckvkQ9+DKJA3J99ay1w596AtH69ok/038k=
Subject key identifier: E1:1A:74:A5:84:CF:CE:67:29:97:7B:ED:5C:08:EC:93:7C:6B:47:15
Certificate issuer: /CN=3cf615f06d23228c769a85faf0510393d064e0e0
Certificate serial: 019F23683EAFCA1C563C8CB976BB95AF8BFE
Authority key identifier: 3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/4Rp0pYTPzmcpl3vtXAjsk3xrRxU.roa
Signing time: Thu 02 Jul 2026 15:17:42 +0000
ROA not before: Thu 02 Jul 2026 15:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48551
IP address blocks: 103.215.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:3e:af:ca:1c:56:3c:8c:b9:76:bb:95:af:8b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cf615f06d23228c769a85faf0510393d064e0e0
Validity
Not Before: Jul 2 15:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e11a74a584cfce6729977bed5c08ec937c6b4715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:71:08:8d:be:0d:61:c3:dd:18:ed:75:c2:d5:
c0:27:6c:9b:8e:b6:8e:a4:7b:8c:44:cf:4b:35:f4:
39:39:5c:12:fc:aa:3c:06:bb:c7:1f:a7:a5:a2:60:
73:0a:ad:d9:04:46:dd:4b:d9:ab:59:5b:7d:c4:a9:
43:60:7f:b1:ea:24:8e:35:5a:ec:28:dc:82:06:06:
19:a2:05:0e:da:66:93:49:a5:0e:9b:5f:a8:7a:ed:
0f:e5:67:27:81:4d:03:0e:93:ec:dd:b5:ff:76:40:
74:42:d8:ce:00:1b:1c:ac:b8:4f:b6:37:00:57:81:
68:1d:2d:6d:d0:e0:cd:3d:30:20:46:d6:2d:95:d8:
99:5e:00:2c:2f:e6:72:ce:df:46:38:4c:d6:0b:a1:
49:c3:06:94:d3:dc:e6:2d:ce:e8:e4:a0:d8:d6:eb:
92:40:2b:c5:13:d3:46:5e:29:54:dc:b0:1b:0c:70:
7f:a7:00:f8:89:2f:81:d6:b0:90:2e:9d:3f:05:3d:
76:67:c6:8a:e4:2c:9c:3a:41:77:cf:aa:15:aa:da:
36:11:fd:e7:0c:f6:64:f2:79:56:56:9f:51:6d:ec:
8a:f2:00:e5:b7:32:65:ea:80:01:6b:7d:f1:72:d2:
eb:87:6f:78:1e:50:42:bd:df:82:d8:49:20:f2:48:
43:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:1A:74:A5:84:CF:CE:67:29:97:7B:ED:5C:08:EC:93:7C:6B:47:15
X509v3 Authority Key Identifier:
keyid:3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/4Rp0pYTPzmcpl3vtXAjsk3xrRxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.215.222.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:d8:31:c7:d8:f8:dc:ae:cd:1c:bb:03:79:d3:3d:73:82:17:
95:68:f8:0b:d1:ec:a8:b3:5f:64:1a:5b:c1:2b:1c:1f:94:1b:
53:2b:ab:81:dc:1c:d8:ee:71:6c:83:f6:4e:ec:85:84:12:74:
d7:da:68:e2:b9:c2:d3:00:99:6c:07:a2:ed:5c:32:c0:97:8e:
44:49:bd:32:0d:38:25:c5:d8:3c:97:7f:2a:aa:b8:58:0e:0f:
d1:e1:b8:d8:a0:ab:59:61:fc:2a:e2:cc:27:99:ac:8d:aa:07:
45:fa:e3:ea:61:c6:aa:d6:45:e3:45:d1:c5:c5:e8:ea:d5:68:
db:84:42:75:a9:e1:ed:df:77:99:25:ca:78:1e:d6:2e:17:48:
3a:03:5a:13:2b:d0:ad:ea:a9:42:a7:a4:fc:41:1a:89:58:a0:
8e:16:10:f9:1c:01:3a:9a:8c:65:93:7e:5c:09:ed:61:8b:68:
55:41:a1:9d:13:d0:31:7d:b5:1d:8b:1d:ef:6e:fb:75:d7:42:
d8:23:e3:f0:f5:16:6b:ed:1d:29:89:4e:4a:0c:f3:b0:ea:57:
90:7c:a6:31:eb:b9:e2:8a:86:08:70:c1:7f:1d:6c:81:3a:ba:
f8:5c:bf:bb:9f:d2:7a:21:bb:b1:fa:a5:39:bb:6d:d8:72:2a:
52:d4:f3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:26 2026 by rpki-client