Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/AS3GkpjxjObDkNl50xKwdFJET6k.roa
File: AS3GkpjxjObDkNl50xKwdFJET6k.roa (raw, json)
Hash identifier: +QRxb43S0GKDrXUQb6VqSl9HZAZ49/mzKj3x6DoQlOg=
Subject key identifier: 01:2D:C6:92:98:F1:8C:E6:C3:90:D9:79:D3:12:B0:74:52:44:4F:A9
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019E137FB40ED7FBFACA46BCB500B3D4204A
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/AS3GkpjxjObDkNl50xKwdFJET6k.roa
Signing time: Sun 10 May 2026 20:06:36 +0000
ROA not before: Sun 10 May 2026 20:06:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 103.27.156.0/24 maxlen: 24
103.31.76.0/24 maxlen: 24
132.243.194.0/24 maxlen: 24
132.243.195.0/24 maxlen: 24
132.243.198.0/24 maxlen: 24
132.243.199.0/24 maxlen: 24
132.243.201.0/24 maxlen: 24
132.243.204.0/24 maxlen: 24
132.243.205.0/24 maxlen: 24
132.243.207.0/24 maxlen: 24
132.243.208.0/24 maxlen: 24
132.243.209.0/24 maxlen: 24
132.243.212.0/24 maxlen: 24
132.243.213.0/24 maxlen: 24
132.243.224.0/24 maxlen: 24
132.243.228.0/24 maxlen: 24
132.243.234.0/24 maxlen: 24
132.243.235.0/24 maxlen: 24
132.243.236.0/24 maxlen: 24
132.243.244.0/24 maxlen: 24
132.243.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:13:7f:b4:0e:d7:fb:fa:ca:46:bc:b5:00:b3:d4:20:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: May 10 20:06:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=012dc69298f18ce6c390d979d312b07452444fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:12:5f:ed:3a:0e:b8:1d:7c:a4:b2:04:8c:4a:
87:a8:ca:64:c0:c8:4b:33:39:04:bd:d8:41:bb:9c:
5a:23:0e:fe:4c:d6:89:a3:b1:45:f9:66:14:4d:e2:
07:e2:e8:c0:de:22:84:43:f0:53:9c:c1:6b:57:53:
ed:7a:fd:c7:1f:eb:3c:bd:96:20:96:27:29:38:6d:
94:a0:ff:d0:a0:91:cc:65:40:01:be:40:16:f8:f4:
af:7a:c0:2a:b6:89:32:ac:d6:12:8d:52:61:20:db:
af:b1:69:db:7c:c0:97:0b:94:9e:b1:8a:42:1b:3b:
6f:de:d2:cc:c8:dc:e6:a6:ea:14:6a:ea:dc:43:d5:
a8:a6:4f:20:fe:09:a0:4b:04:72:a4:76:72:bf:1b:
e2:cf:5e:da:72:e6:6c:43:b0:12:ae:3a:cf:20:85:
96:5c:67:11:80:12:0b:4c:cc:72:1a:93:07:1d:68:
c9:9f:6c:24:e4:bb:70:aa:35:e8:4a:b7:13:32:73:
a9:2c:4b:26:58:94:ab:fe:46:d1:82:71:74:76:01:
89:94:81:bc:18:0b:3d:16:33:48:80:9e:d0:27:d1:
86:32:d7:60:3f:26:38:eb:6f:29:47:91:b8:60:c7:
04:8b:66:85:84:43:66:79:f6:34:0e:91:a2:3f:f2:
a3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2D:C6:92:98:F1:8C:E6:C3:90:D9:79:D3:12:B0:74:52:44:4F:A9
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/AS3GkpjxjObDkNl50xKwdFJET6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.27.156.0/24
103.31.76.0/24
132.243.194.0/23
132.243.198.0/23
132.243.201.0/24
132.243.204.0/23
132.243.207.0-132.243.209.255
132.243.212.0/23
132.243.224.0/24
132.243.228.0/24
132.243.234.0-132.243.236.255
132.243.244.0/24
132.243.252.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:e9:ee:7e:ce:16:46:68:70:8d:72:ae:61:da:f2:3f:93:9e:
41:bb:16:b4:fd:0f:9b:98:e5:08:59:4c:f5:d4:b8:d9:e7:e3:
b2:30:cf:d3:16:20:b5:69:76:5a:b4:f6:87:1a:d4:5e:14:52:
0c:5c:0c:1a:d2:92:cd:0b:a7:cf:35:f2:ec:34:63:2e:07:08:
81:d6:f5:57:fa:db:db:ce:f3:25:6b:6c:ba:c0:9a:30:49:0a:
6f:70:57:1f:15:4d:1e:ea:e3:3d:c7:d4:e2:0b:33:49:69:15:
5c:ef:60:78:7e:7a:58:1b:20:ab:7e:3d:79:1f:83:57:ff:e0:
92:0e:25:26:69:b6:af:b0:f0:7b:b9:ef:da:4d:bf:08:29:b9:
33:dd:b9:67:77:d6:c8:28:f9:94:02:1c:51:c0:80:b3:fe:22:
c9:6b:c1:7c:2a:07:ff:b5:04:61:98:55:0b:54:a7:dc:87:f5:
6e:e2:ca:ce:34:71:d6:5d:6f:53:0a:08:de:42:bc:9c:d4:7f:
43:5a:12:5b:d6:04:a4:dd:af:39:40:de:0e:e7:be:7d:e8:c1:
84:8c:3f:62:5e:ef:e5:df:fb:ac:ae:66:8b:0e:d0:9f:12:49:
b1:69:f9:13:ec:fe:d6:96:a1:1b:93:cd:c4:f8:e1:66:5e:57:
67:a1:f4:2e
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISAZ4Tf7QO1/v6yka8tQCz1CBKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Yjk1MzMwNzM0YzlhYWY2NmQxMWJjZDJiZWRkMzgwZjQx
MGY5M2YwHhcNMjYwNTEwMjAwNjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTJkYzY5Mjk4ZjE4Y2U2YzM5MGQ5NzlkMzEyYjA3NDUyNDQ0ZmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxJf7ToOuB18pLIEjEqHqMpkwMhL
MzkEvdhBu5xaIw7+TNaJo7FF+WYUTeIH4ujA3iKEQ/BTnMFrV1Ptev3HH+s8vZYg
licpOG2UoP/QoJHMZUABvkAW+PSvesAqtokyrNYSjVJhINuvsWnbfMCXC5SesYpC
Gztv3tLMyNzmpuoUaurcQ9Wopk8g/gmgSwRypHZyvxviz17acuZsQ7ASrjrPIIWW
XGcRgBILTMxyGpMHHWjJn2wk5LtwqjXoSrcTMnOpLEsmWJSr/kbRgnF0dgGJlIG8
GAs9FjNIgJ7QJ9GGMtdgPyY4628pR5G4YMcEi2aFhENmefY0DpGiP/Kj+QIDAQAB
o4ICYTCCAl0wHQYDVR0OBBYEFAEtxpKY8Yzmw5DZedMSsHRSRE+pMB8GA1UdIwQY
MBaAFNS5UzBzTJqvZtEbzSvt04D0EPk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYt
NDMwMTNiMjhkOWQ2LzEvQVMzR2twanhqT2JEa05sNTB4S3dkRkpFVDZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8xNWQyNzEtMDVjZC00NjFlLWE3YjYtNDMwMTNiMjhkOWQ2
LzEvMUxsVE1ITk1tcTltMFJ2TkstM1RnUFFRLVQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBkBAIAATBeAwQAZxucAwQA
Zx9MAwQBhPPCAwQBhPPGAwQAhPPJAwQBhPPMMAwDBACE888DBAGE89ADBAGE89QD
BACE8+ADBACE8+QwDAMEAYTz6gMEAITz7AMEAITz9AMEAITz/DANBgkqhkiG9w0B
AQsFAAOCAQEAbunufs4WRmhwjXKuYdryP5OeQbsWtP0Pm5jlCFlM9dS42efjsjDP
0xYgtWl2WrT2hxrUXhRSDFwMGtKSzQunzzXy7DRjLgcIgdb1V/rb287zJWtsusCa
MEkKb3BXHxVNHurjPcfU4gszSWkVXO9geH56WBsgq349eR+DV//gkg4lJmm2r7Dw
e7nv2k2/CCm5M925Z3fWyCj5lAIcUcCAs/4iyWvBfCoH/7UEYZhVC1Sn3If1buLK
zjRx1l1vUwoI3kK8nNR/Q1oSW9YEpN2vOUDeDue+fejBhIw/Yl7v5d/7rK5miw7Q
nxJJsWn5E+z+1pahG5PNxPjhZl5XZ6H0Lg==
-----END CERTIFICATE-----
Generated at Wed May 13 06:37:57 2026 by rpki-client