Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Yq-Y-p8deB10I2ihcewkYd2RxIc.roa
File: Yq-Y-p8deB10I2ihcewkYd2RxIc.roa (raw, json)
Hash identifier: NWVwzyfnnWUOmp5uMOOmvRBxyMEesHQD4yEqPiV1Zpg=
Subject key identifier: 62:AF:98:FA:9F:1D:78:1D:74:23:68:A1:71:EC:24:61:DD:91:C4:87
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019CC3F9B32D8F3B7EE006F235E0D9F69A58
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Yq-Y-p8deB10I2ihcewkYd2RxIc.roa
Signing time: Fri 06 Mar 2026 16:27:27 +0000
ROA not before: Fri 06 Mar 2026 16:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203374
IP address blocks: 103.91.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c3:f9:b3:2d:8f:3b:7e:e0:06:f2:35:e0:d9:f6:9a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 6 16:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62af98fa9f1d781d742368a171ec2461dd91c487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:9b:94:f0:91:d1:0d:df:f2:f0:36:cf:34:
59:31:bd:db:c6:f5:2b:6f:76:58:25:e1:98:60:1c:
5f:19:55:74:80:83:ad:46:78:79:b8:20:22:c8:55:
b2:98:3b:c8:49:39:d4:28:16:89:f9:f7:b0:4d:32:
9f:1e:c7:31:61:d9:06:50:90:14:b8:c2:8d:7e:c9:
0b:58:cf:a2:80:d2:70:89:3b:11:18:0c:dd:b1:99:
b8:97:0f:f0:ba:45:2e:51:34:ee:07:60:c3:c6:f6:
cc:22:1d:b7:2e:04:3b:4b:fe:44:f4:8c:77:48:08:
94:71:f9:f0:bf:94:a2:e7:18:06:11:d4:76:ba:b0:
97:87:52:17:f4:b7:f4:8b:9d:da:aa:7f:14:06:6f:
2e:43:07:a9:d0:3b:03:8d:78:e7:47:ac:a1:5f:67:
cb:55:61:2c:a1:be:02:63:45:fe:14:8a:45:a0:e0:
ef:e0:0b:ef:32:3f:c2:32:8b:28:4e:57:95:6a:13:
33:8e:8f:26:d6:30:0d:b7:3f:66:14:2e:13:73:7a:
5b:12:2c:3f:59:3d:f7:50:35:7f:40:3f:31:3c:e1:
a7:90:58:69:f4:5c:2f:b4:6d:a6:e1:b6:86:94:51:
44:cb:58:7e:6a:20:c2:69:e1:68:9a:95:43:2f:dd:
7e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AF:98:FA:9F:1D:78:1D:74:23:68:A1:71:EC:24:61:DD:91:C4:87
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Yq-Y-p8deB10I2ihcewkYd2RxIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.91.147.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:6d:af:40:f1:6c:f2:5c:ba:c8:8b:3d:53:bc:a2:93:24:71:
d1:8c:f0:a3:5a:61:b4:aa:a2:dd:38:e0:35:c1:37:00:f3:b6:
01:d2:9f:c6:0e:14:f3:d7:e2:ac:2a:72:5a:5e:5d:d8:45:6d:
c0:bf:55:b1:b3:c5:68:57:81:c4:b2:cc:34:19:82:bb:4e:07:
98:f0:5f:a6:1b:41:fa:9c:48:e1:e7:12:c3:f5:45:cb:2a:c2:
cf:54:73:c4:d7:29:e6:6e:9c:f6:c3:b2:fc:d7:8e:af:21:bd:
af:93:b9:10:67:08:ea:93:68:c5:3e:5c:99:64:7b:fd:d2:51:
c8:76:6c:c2:02:68:81:fc:11:02:26:b7:46:a7:ef:85:b5:e8:
e0:78:cf:b0:1f:a9:33:22:b2:bb:f0:69:24:04:d4:3b:35:31:
52:a8:eb:46:de:41:85:4f:fb:22:d6:13:83:98:45:33:04:0c:
68:3a:56:84:98:e6:cc:49:9c:8a:60:ee:91:c1:49:6c:b3:ea:
a9:d3:5d:ed:98:d3:c9:f6:32:3e:12:cb:1c:cb:d8:27:f5:8e:
81:d8:ef:1b:fc:ad:7b:4e:d4:cd:23:1b:a9:78:e0:4b:6a:89:
d1:66:6e:1e:6f:be:cf:3e:44:87:29:36:84:c1:6d:78:15:88:
6b:1c:f6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:16 2026 by rpki-client