Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/WFkUdJGiFoRg3ZXULBy6DsUvw24.roa
File: WFkUdJGiFoRg3ZXULBy6DsUvw24.roa (raw, json)
Hash identifier: 1KSLUh2CDrS+WgPpLzw3WjWvEVCiudFwxJg8g2ozWjo=
Subject key identifier: 58:59:14:74:91:A2:16:84:60:DD:95:D4:2C:1C:BA:0E:C5:2F:C3:6E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A1D0F910C8A97D23BCF99C39E396B59CAC
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/WFkUdJGiFoRg3ZXULBy6DsUvw24.roa
Signing time: Thu 12 Nov 2026 18:15:46 +0000
ROA not before: Thu 12 Nov 2026 18:15:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218712
IP address blocks: 103.114.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d0:f9:10:c8:a9:7d:23:bc:f9:9c:39:e3:96:b5:9c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 12 18:15:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5859147491a2168460dd95d42c1cba0ec52fc36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d4:ab:fa:96:af:10:e8:cb:79:8d:1b:d4:fe:
07:5c:e3:be:4c:1b:e1:36:66:b0:8e:15:22:db:b7:
ae:c2:1a:ea:c8:09:74:78:cb:51:85:38:9f:b6:7c:
b5:91:45:9c:7a:df:c0:53:0c:23:ca:66:df:d5:be:
9b:cc:a1:0b:7b:89:21:c4:8b:a2:56:02:6f:88:80:
cc:fb:4e:d4:c7:a1:c4:72:91:7e:d7:57:b8:f7:04:
0b:c5:06:c9:23:46:94:34:a0:72:2a:4d:78:f4:60:
eb:c8:95:a0:f2:13:2e:95:f2:50:0d:b3:7e:9e:b7:
fe:d6:b6:16:87:25:6a:82:5d:4f:c8:ad:7a:7c:6f:
12:53:90:8f:14:d1:3e:e8:c1:86:c2:08:93:22:79:
ed:4c:9b:5f:58:a7:8e:38:e7:31:eb:4b:f3:76:58:
33:04:c3:48:b2:7f:5c:83:f1:04:7f:82:62:7e:3b:
0c:03:fe:77:49:45:43:86:d0:3e:fb:95:08:b1:4a:
47:8a:ec:14:78:45:42:68:95:f5:b6:11:83:7d:b6:
19:8e:1e:7f:54:b3:ca:5b:9e:78:91:8f:ea:bf:6a:
a6:15:08:30:8a:53:4a:a3:80:18:87:2d:7f:1a:13:
91:9e:8b:29:1a:e6:6b:b2:2a:f6:00:a2:18:3a:a1:
51:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:59:14:74:91:A2:16:84:60:DD:95:D4:2C:1C:BA:0E:C5:2F:C3:6E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/WFkUdJGiFoRg3ZXULBy6DsUvw24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.114.42.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:d8:c6:ec:35:e9:de:97:44:23:63:2f:12:0e:7a:f3:c4:72:
3b:c7:31:e0:8e:ee:d2:9e:8e:7a:83:9d:8a:fe:b7:0d:9c:4a:
b9:66:89:20:e9:03:b4:50:e4:be:9a:3f:3b:68:13:65:8d:21:
20:3f:10:65:fe:25:ef:b1:76:1a:d6:17:a4:15:20:f6:c7:43:
5f:61:97:77:21:8a:3e:b8:8e:74:d3:e9:78:8c:17:88:f8:43:
ea:c9:66:e6:61:9a:39:e8:77:e7:79:34:ef:21:32:9b:59:68:
5a:71:40:c7:2d:12:e8:22:ea:45:86:ef:49:6c:3f:b5:f9:07:
a7:01:ba:00:02:ac:47:ca:3e:a0:14:3c:26:79:e2:b2:69:cd:
df:48:8d:0f:24:ea:8d:10:b2:03:bc:81:1b:c8:6c:25:c4:3f:
95:31:1b:55:d9:b6:97:28:0e:94:38:4e:fc:23:fc:e1:d8:8e:
ff:f1:c4:7a:b7:af:57:d1:67:c7:d2:6a:81:40:2e:22:34:76:
09:e4:82:44:25:f7:c3:62:28:93:ef:d1:45:f7:27:2d:52:bf:
0f:6c:f2:32:97:76:24:57:aa:63:47:cc:7e:9d:0f:94:88:65:
6b:83:f4:e0:a2:d7:e2:ed:88:bc:fc:6b:cb:15:60:47:60:0c:
8f:99:34:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:07:36 2026 by rpki-client