Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/Nue5H8HmpNLjYp_Tdj9iqodkVfY.roa
File: Nue5H8HmpNLjYp_Tdj9iqodkVfY.roa (raw, json)
Hash identifier: 0LVVrjDJThpsyPHDbR21cLXHmcBYmE/ix4tU0/3DRfI=
Subject key identifier: 36:E7:B9:1F:C1:E6:A4:D2:E3:62:9F:D3:76:3F:62:AA:87:64:55:F6
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 01A0907563CAF75C3654F3794491242E591B
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/Nue5H8HmpNLjYp_Tdj9iqodkVfY.roa
Signing time: Fri 11 Sep 2026 12:33:27 +0000
ROA not before: Fri 11 Sep 2026 12:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218731
IP address blocks: 103.27.157.0/24 maxlen: 24
132.243.212.0/24 maxlen: 24
132.243.221.0/24 maxlen: 24
132.243.223.0/24 maxlen: 24
132.243.225.0/24 maxlen: 24
132.243.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:75:63:ca:f7:5c:36:54:f3:79:44:91:24:2e:59:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Sep 11 12:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36e7b91fc1e6a4d2e3629fd3763f62aa876455f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d9:18:aa:73:b4:b2:c4:e3:82:cf:a8:72:c2:
aa:ce:f4:ff:27:b4:30:3e:85:37:86:5a:f1:56:bb:
bc:a8:e4:e2:2f:b8:cb:f4:2a:59:4c:f4:2b:88:39:
fe:e4:c1:7b:76:38:d9:a9:11:66:90:91:75:91:6a:
66:b3:0d:7a:fc:3e:86:f1:3e:9d:d4:e2:8f:52:32:
3a:db:7a:b4:61:91:81:20:d0:7e:83:3a:e4:31:0f:
f9:b4:fd:b7:96:d8:32:a8:bb:9c:55:40:a0:75:df:
ef:19:c9:87:4c:5d:8c:b5:a6:d0:f6:1e:1e:99:e0:
2a:c3:16:67:0b:49:42:0f:99:e9:59:93:7e:11:a6:
9c:cd:3a:f7:9d:d3:dc:ee:3c:96:85:2b:8a:77:f8:
c5:f1:86:c2:0f:42:88:26:6c:36:da:d3:4d:97:06:
a5:bf:50:8c:ed:39:e3:15:a8:56:5c:3d:a2:79:05:
b9:af:09:bb:fe:40:a8:4b:27:48:43:02:17:f0:82:
d6:77:54:ff:71:6d:c8:99:34:8d:fd:89:4d:c7:96:
ab:a0:58:72:17:1a:27:74:38:bf:68:14:ed:1e:47:
f3:62:99:de:96:f4:8e:73:68:5e:d7:ad:56:73:d2:
28:d7:bd:38:dd:02:0c:78:be:95:b2:26:7d:b4:c2:
d8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E7:B9:1F:C1:E6:A4:D2:E3:62:9F:D3:76:3F:62:AA:87:64:55:F6
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/Nue5H8HmpNLjYp_Tdj9iqodkVfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.27.157.0/24
132.243.212.0/24
132.243.221.0/24
132.243.223.0/24
132.243.225.0/24
132.243.231.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:98:5d:d3:9d:81:1c:94:cb:50:dc:9b:23:ab:42:49:3f:60:
40:ad:c5:c9:73:db:e2:9b:96:c8:10:b7:9f:3b:ac:33:2b:d7:
d8:4d:ec:42:ab:11:b9:ff:58:6e:5a:aa:ce:69:d3:01:6f:6e:
26:5e:a5:c4:b2:5d:c9:c5:ab:b1:a2:12:aa:9c:22:08:28:ab:
4d:14:7b:ce:83:e1:11:42:95:ca:32:60:c5:b8:a7:5c:8d:5f:
64:35:0a:9d:b2:f8:08:45:c3:1b:b6:c4:62:4b:34:18:74:66:
82:39:c5:6c:17:c5:6d:25:b5:d5:b1:a4:fe:99:99:26:f9:90:
7c:9b:02:53:ff:26:e5:46:7f:da:93:ab:db:d4:6e:95:7d:38:
14:6d:f2:cd:53:f0:2a:dc:7e:ce:6b:0c:90:1c:f3:59:18:88:
e7:fa:db:6c:05:4c:9a:00:e1:ca:d4:3d:a7:e2:4b:8a:3b:aa:
32:a7:23:77:e3:8a:72:67:10:39:82:47:66:12:92:e4:3a:da:
58:4c:14:fb:db:15:ee:19:c2:ed:0a:ba:c6:9a:67:a0:f0:cc:
f2:0d:8b:31:3a:b5:a9:54:8d:3a:ef:38:af:3f:d2:05:7f:2f:
09:d7:f6:6f:af:58:68:27:3f:2f:51:f8:c0:d7:68:2c:05:dc:
ff:62:e2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:48:02 2026 by rpki-client