Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/00oBTfnWdUzIvMRCoDAsBiu6TY0.roa
File: 00oBTfnWdUzIvMRCoDAsBiu6TY0.roa (raw, json)
Hash identifier: 2cUMeBAWg056ZrP6AEZcwET0ohxuoFacoijmfCtjIBA=
Subject key identifier: D3:4A:01:4D:F9:D6:75:4C:C8:BC:C4:42:A0:30:2C:06:2B:BA:4D:8D
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 019DFBE5289BA3DD9F2B097DCCFC0E23C0F3
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/00oBTfnWdUzIvMRCoDAsBiu6TY0.roa
Signing time: Wed 06 May 2026 06:06:32 +0000
ROA not before: Wed 06 May 2026 06:06:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 14.102.10.0/24 maxlen: 24
91.200.253.0/24 maxlen: 24
110.172.189.0/24 maxlen: 24
114.69.245.0/24 maxlen: 24
114.69.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fb:e5:28:9b:a3:dd:9f:2b:09:7d:cc:fc:0e:23:c0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: May 6 06:06:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d34a014df9d6754cc8bcc442a0302c062bba4d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:47:35:8e:bd:ad:00:59:9b:70:f1:a8:3e:
80:18:34:30:87:a3:e5:ea:32:23:95:c8:a7:18:e5:
cf:cb:2b:24:4c:cb:ca:29:bf:da:88:83:14:14:7c:
40:63:37:a6:b6:c6:ab:22:b9:0c:24:05:2f:e5:c1:
37:0a:4d:ef:21:61:b2:2b:7f:49:2b:cd:1e:e3:90:
89:22:5f:14:1a:63:94:7b:e2:08:39:09:76:00:89:
fa:56:f5:dc:f7:a3:0f:9a:ba:a5:3e:a4:9c:24:23:
5f:ad:47:ef:0e:6c:3d:78:e2:25:81:2f:3f:ec:8f:
c7:19:3f:4c:04:12:07:fd:7c:a9:40:6c:c3:bf:aa:
a7:8e:f5:65:f7:9e:48:3a:8a:05:19:fe:7a:d5:42:
03:0f:79:2f:10:25:26:ef:46:cc:30:31:b1:e2:d8:
38:91:6d:2b:f5:f4:65:ac:f5:fa:a7:82:00:72:20:
fd:37:df:18:bb:d5:99:67:af:61:c1:9d:2e:91:f1:
f9:47:f3:38:a5:62:4a:b1:bb:95:26:41:41:18:a1:
99:7b:78:e0:90:fc:cf:f3:d5:e4:f0:c5:18:59:28:
7b:e4:46:3c:43:4e:d5:72:8f:94:34:9e:d5:c4:72:
c7:60:7d:ab:e0:16:96:4d:4a:e2:a7:9e:27:40:94:
42:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4A:01:4D:F9:D6:75:4C:C8:BC:C4:42:A0:30:2C:06:2B:BA:4D:8D
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/00oBTfnWdUzIvMRCoDAsBiu6TY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.10.0/24
91.200.253.0/24
110.172.189.0/24
114.69.245.0/24
114.69.247.0/24
Signature Algorithm: sha256WithRSAEncryption
83:90:0b:2d:19:30:78:d7:62:a1:c2:15:16:ea:25:f0:8b:6e:
95:cf:63:34:be:d8:ea:82:06:de:c4:ed:97:08:3a:da:40:a1:
06:b6:66:92:99:6d:4b:ad:61:dc:8a:ca:f3:c9:a2:71:95:5d:
26:d4:c0:1d:2b:58:71:c4:6a:c4:0d:7e:3e:a2:12:00:93:25:
b8:fd:77:8d:5c:68:68:81:3c:5e:8e:88:7d:98:5b:05:5b:36:
52:e7:57:01:a4:98:63:c9:4b:24:af:66:a8:51:8a:ef:df:a6:
4b:1d:75:dc:44:98:fa:e5:d5:50:45:22:fe:ad:17:99:98:36:
80:32:0d:10:17:28:5f:c1:ec:85:80:dd:b7:62:49:ba:eb:41:
b5:6f:a5:3a:d4:87:04:25:3d:2f:da:81:00:29:ea:46:e4:be:
21:ba:ec:eb:94:75:30:c8:f0:b4:e3:dd:c7:6e:ea:87:ee:db:
1a:19:48:04:fe:24:ba:4f:1c:8d:9b:fe:a4:fc:8f:9a:d3:79:
17:3d:f6:ec:cf:25:76:07:e8:29:e3:76:4a:9d:ce:41:05:77:
a9:38:f0:94:4d:2f:24:eb:36:fc:ce:49:68:9d:48:c8:08:99:
a6:df:27:1f:2d:0a:d4:90:d3:72:60:45:94:13:ab:c9:28:b2:
0a:a5:53:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:59:30 2026 by rpki-client