Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/vMyjTCsIRe0V7qqYSqRKgQhGULM.roa
File: vMyjTCsIRe0V7qqYSqRKgQhGULM.roa (raw, json)
Hash identifier: V42mkCmxs+ZvZ6Tmc6moy5eFcyohGVGWyhDhVpPXGok=
Subject key identifier: BC:CC:A3:4C:2B:08:45:ED:15:EE:AA:98:4A:A4:4A:81:08:46:50:B3
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 019D0D0E898E5B1F05B1439477A2885B1CA8
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/vMyjTCsIRe0V7qqYSqRKgQhGULM.roa
Signing time: Fri 20 Mar 2026 21:02:29 +0000
ROA not before: Fri 20 Mar 2026 21:02:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204800
IP address blocks: 103.138.189.0/24 maxlen: 24
192.250.228.0/24 maxlen: 24
192.250.235.0/24 maxlen: 24
198.38.91.0/24 maxlen: 24
209.42.27.0/24 maxlen: 24
216.67.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0d:0e:89:8e:5b:1f:05:b1:43:94:77:a2:88:5b:1c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Mar 20 21:02:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bccca34c2b0845ed15eeaa984aa44a81084650b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0a:2e:f0:13:57:88:2c:9a:b9:5a:d0:42:8b:
6f:1a:65:16:7f:05:75:5f:34:74:1a:e7:17:45:b7:
d5:7e:45:ae:5d:3c:24:e2:e8:c9:a9:ba:e4:f6:35:
43:98:9e:4b:39:f1:56:a6:d7:54:4d:5d:0f:d6:05:
ed:56:b7:9d:a2:00:e9:5b:d6:92:cc:5b:74:95:fd:
9a:30:65:87:05:ae:0e:4d:66:c5:b3:13:af:f6:90:
dc:04:66:13:12:cd:ed:e5:40:2f:7b:8b:e5:22:83:
16:b5:db:d9:aa:42:e4:fc:15:5c:b9:fb:09:45:72:
9d:79:5d:2d:1d:78:ca:0a:b0:a3:7a:af:d5:54:f6:
19:a0:ce:ef:7a:8e:f7:77:71:e1:fe:94:85:82:b1:
4c:b5:ff:cf:7d:bc:d4:0e:14:2f:9e:8f:61:ab:b7:
40:89:77:9e:29:b1:8d:2c:04:e2:a1:27:7e:f8:da:
85:4c:7a:03:c4:05:88:fb:e6:59:0f:c3:4f:a4:96:
d1:11:3e:7b:7d:47:2e:a9:bf:dc:d5:96:f5:b7:60:
81:72:44:b6:67:1a:c0:74:0b:b0:11:d4:7f:45:f9:
69:85:5f:ae:81:7b:5d:44:e7:5e:7a:a7:3e:97:11:
f0:6f:4a:aa:7f:b7:a4:c3:82:4d:37:fc:d5:80:0f:
68:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CC:A3:4C:2B:08:45:ED:15:EE:AA:98:4A:A4:4A:81:08:46:50:B3
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/vMyjTCsIRe0V7qqYSqRKgQhGULM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.138.189.0/24
192.250.228.0/24
192.250.235.0/24
198.38.91.0/24
209.42.27.0/24
216.67.230.0/24
Signature Algorithm: sha256WithRSAEncryption
00:72:3a:ce:15:72:d8:b3:75:ab:3e:25:ef:6f:e3:aa:43:e2:
26:36:97:a9:53:00:eb:9d:51:66:1f:61:65:a8:74:3f:02:e6:
e4:69:4b:37:82:00:da:f4:11:69:3d:37:1d:b8:e8:48:75:e4:
b1:30:c2:7a:a5:a3:c1:40:cc:bc:e1:5f:be:63:5e:29:95:2a:
6c:1d:d6:da:2a:3f:06:c5:ec:f1:dc:4c:09:bc:c8:8f:4e:ee:
0d:d2:c6:7e:8d:02:e0:97:cc:d7:f2:2a:5c:78:2f:06:b0:be:
0d:a9:9a:03:3c:91:f9:1d:83:4a:a7:ee:2f:a7:ac:40:92:92:
1b:d3:8b:ae:c7:fd:3b:16:c7:24:ea:61:91:02:55:13:8c:b6:
9f:59:d0:7a:9e:c7:26:3b:02:b0:4e:4e:df:af:a1:1c:c1:c6:
fe:e7:f0:4c:af:4b:2c:ae:9d:e3:9b:d0:f2:ba:3e:3a:1d:00:
e6:d9:db:ac:0a:3d:bc:e5:45:53:f9:91:93:64:fd:34:34:27:
43:9d:3c:9d:e4:39:b8:c2:07:53:59:b1:cb:37:ab:fe:9b:37:
ae:16:c5:ac:61:ef:95:73:7c:80:77:02:3a:38:b2:ce:ea:1e:
ec:49:11:bb:f5:e8:dd:bf:de:a3:fc:c3:01:b4:7a:17:18:16:
d4:91:b4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:07:59 2026 by rpki-client