Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/7HngbFXROzTX0TZw_OQvUcbBqeI.roa
File: 7HngbFXROzTX0TZw_OQvUcbBqeI.roa (raw, json)
Hash identifier: zRx0v1tMctqBJm23JeXai4w0dDFkDOged4JZmWoMILM=
Subject key identifier: EC:79:E0:6C:55:D1:3B:34:D7:D1:36:70:FC:E4:2F:51:C6:C1:A9:E2
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019D1ACB851F193736EDFA1FB7271FEFD8E5
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/7HngbFXROzTX0TZw_OQvUcbBqeI.roa
Signing time: Mon 23 Mar 2026 13:03:58 +0000
ROA not before: Mon 23 Mar 2026 13:03:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 103.27.156.0/24 maxlen: 24
103.31.76.0/24 maxlen: 24
132.243.194.0/24 maxlen: 24
132.243.195.0/24 maxlen: 24
132.243.198.0/24 maxlen: 24
132.243.199.0/24 maxlen: 24
132.243.200.0/24 maxlen: 24
132.243.201.0/24 maxlen: 24
132.243.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:cb:85:1f:19:37:36:ed:fa:1f:b7:27:1f:ef:d8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Mar 23 13:03:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec79e06c55d13b34d7d13670fce42f51c6c1a9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:dd:ca:11:8b:30:f6:0b:57:67:17:cd:bb:
c6:2c:46:92:7b:41:50:9b:0a:c3:db:e6:9e:0f:ab:
36:40:d6:42:c6:10:78:f1:c8:79:7e:36:f0:86:e1:
8e:41:f4:bb:2c:df:0f:ac:56:f4:67:74:47:b0:65:
1d:0d:a1:5a:db:74:60:fb:c0:48:70:3b:8a:d2:f9:
0c:3e:c8:e8:ee:66:69:3a:af:47:21:32:7f:d4:e9:
67:21:64:05:6d:45:1a:38:60:57:3e:4c:e5:56:e6:
0a:a1:d1:f6:99:79:42:a4:eb:2d:65:b7:ce:0d:aa:
c3:a8:31:4a:5f:4e:cb:5f:bc:69:58:55:ba:18:9b:
b7:b8:39:75:58:17:00:59:d1:be:eb:b8:5d:37:84:
b8:c5:33:1b:66:16:9f:2e:3e:d7:52:c5:50:b0:be:
2e:17:02:c6:fb:8e:5c:03:76:29:7b:d9:3f:6d:b3:
22:fd:df:e7:d7:ad:5c:0e:b4:1c:2f:88:fc:37:99:
db:4c:8d:2d:c7:9d:cb:c9:9c:c7:0a:76:ac:94:24:
8d:8a:66:6a:f8:c1:b0:89:cc:ab:61:6d:8d:ce:8b:
15:e8:41:9a:47:92:7f:67:a3:62:12:ba:38:f0:de:
d6:1f:1e:a5:37:bc:b2:e6:86:87:c3:53:a0:04:6d:
37:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:79:E0:6C:55:D1:3B:34:D7:D1:36:70:FC:E4:2F:51:C6:C1:A9:E2
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/7HngbFXROzTX0TZw_OQvUcbBqeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.27.156.0/24
103.31.76.0/24
132.243.194.0/23
132.243.198.0-132.243.201.255
132.243.205.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:dd:18:89:06:5a:36:26:6f:9b:3b:1d:74:39:10:95:d6:7a:
c4:62:82:2b:6f:df:6b:27:b6:21:c1:ad:ec:be:73:da:4c:8d:
be:08:5d:b2:5e:2d:2f:c6:bc:15:e4:f0:03:9a:ee:e2:c5:26:
cc:0b:b7:f6:07:1f:2a:e7:78:ee:de:72:67:77:bf:5b:4f:95:
09:54:f5:1c:9e:f8:da:98:b9:0d:2e:c4:f8:5e:d7:06:26:30:
fa:a0:a5:b7:d4:d0:d7:7d:24:0b:47:89:f0:d2:1c:f7:fd:e7:
79:39:80:0c:21:87:0c:88:29:1f:f1:b5:7f:39:3b:32:b6:90:
52:9e:f0:e3:4c:58:c2:81:58:d7:7d:32:8f:3e:4f:8e:3a:29:
31:aa:15:a4:07:29:3e:de:93:aa:46:85:74:a9:71:a7:24:65:
04:93:d9:df:d5:7a:6b:92:7c:76:3b:01:44:63:31:e1:db:45:
2a:53:1e:71:6f:4a:56:e9:92:ec:74:82:94:aa:56:8b:58:dc:
82:b1:2f:3d:1d:67:4f:56:7e:c5:e8:c0:db:80:54:1e:a4:f5:
dd:50:9c:a4:77:19:f5:e9:45:7f:bd:71:c8:71:76:50:04:cf:
9b:7e:18:dc:f0:ce:d8:76:e0:7c:4d:67:9a:8d:73:20:25:05:
92:36:3b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:47:56 2026 by rpki-client