Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/PAbOSwGk66yjMvT1TEsq5V2YYKE.roa
File: PAbOSwGk66yjMvT1TEsq5V2YYKE.roa (raw, json)
Hash identifier: J9Wyk8j2RAB9NruriFyXwMHtpWO0OyAww0mQHfolYWs=
Subject key identifier: 3C:06:CE:4B:01:A4:EB:AC:A3:32:F4:F5:4C:4B:2A:E5:5D:98:60:A1
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019D214ABCB2FA92704C7DE07E95EE27751F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/PAbOSwGk66yjMvT1TEsq5V2YYKE.roa
Signing time: Tue 24 Mar 2026 19:20:39 +0000
ROA not before: Tue 24 Mar 2026 19:20:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402187
IP address blocks: 103.102.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:21:4a:bc:b2:fa:92:70:4c:7d:e0:7e:95:ee:27:75:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Mar 24 19:20:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c06ce4b01a4ebaca332f4f54c4b2ae55d9860a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:78:6a:ec:de:0d:a8:42:4a:76:5d:0a:78:35:
09:03:dc:93:2e:63:c9:22:a6:ff:40:ba:c5:79:e9:
d6:20:ce:5d:c9:85:31:b9:d2:65:43:12:5e:e2:0a:
ab:a7:af:81:ba:cf:d2:16:bf:72:13:86:2e:c6:b2:
de:43:f6:45:d9:50:6c:1d:cb:c9:c7:d8:a3:e9:1b:
df:78:8f:f3:5c:5d:a1:18:cc:a9:58:73:73:03:cb:
9f:81:d1:7a:44:e6:b7:18:91:3b:ae:2a:5e:96:c1:
25:28:de:fd:1a:26:e3:ec:44:b8:04:f1:de:69:e0:
a2:f6:5a:ab:bd:14:25:38:88:2e:d3:d7:c3:47:76:
49:31:06:a5:9a:b9:ec:60:83:47:a1:37:42:4a:ba:
a8:62:04:c4:00:79:33:48:df:1f:be:44:4e:34:32:
0f:8f:7f:2a:84:16:8f:56:02:2c:39:74:1e:f8:32:
0e:20:40:c4:b9:56:47:3e:08:e1:41:ff:83:02:dc:
2b:d4:26:a7:37:5d:1a:a4:54:69:01:c9:0e:55:92:
19:08:2a:64:9a:e1:63:71:d3:da:95:0a:55:dc:1f:
fa:04:ba:7f:8c:91:2d:2d:ed:73:e3:30:93:2a:71:
38:c8:a2:ff:e3:90:a4:00:d7:a8:bb:26:23:ab:5b:
8b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:06:CE:4B:01:A4:EB:AC:A3:32:F4:F5:4C:4B:2A:E5:5D:98:60:A1
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/PAbOSwGk66yjMvT1TEsq5V2YYKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.132.0/24
Signature Algorithm: sha256WithRSAEncryption
44:73:d1:28:62:38:34:a4:82:68:10:d7:e8:b4:3c:49:90:48:
f7:f4:78:fc:7e:16:ee:98:95:59:d5:2c:32:0a:df:19:1a:61:
19:b5:8b:54:8d:2b:70:33:25:d0:22:98:2e:d3:aa:be:1a:7e:
86:be:c5:0a:81:21:db:e6:62:15:3a:17:d8:c1:74:42:b0:88:
eb:89:47:ba:00:0e:21:8c:cb:37:e9:88:03:53:1b:66:d3:a4:
c3:36:d6:5e:4a:a0:51:a5:dc:ca:de:80:15:c0:4a:53:06:2a:
ff:31:61:a9:16:e6:40:8a:41:28:22:f5:f4:93:83:49:d3:08:
9d:dc:88:f8:36:1f:22:4d:42:df:1c:f8:72:8f:0d:ad:f2:af:
bd:3b:61:b9:0d:dd:a9:b7:5d:c1:13:af:3e:5f:28:78:47:46:
26:b4:da:aa:83:d4:03:aa:d2:29:72:60:32:17:f9:ce:36:ab:
c0:76:d6:85:ba:de:12:fb:7e:2f:ae:04:f3:fe:36:2a:2b:14:
cc:27:80:44:2f:f5:d4:1d:83:12:34:6b:34:74:73:97:e4:a8:
43:d0:be:c9:41:ea:5e:b1:1c:40:29:5b:7b:28:54:04:32:e5:
3a:47:1a:d3:ee:c7:50:6f:af:ba:f4:67:c3:c1:a5:c0:d0:71:
be:ff:a7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:43:40 2026 by rpki-client