Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/I7aLEZ1zx7qaDiObg_7MH8-9ZDA.roa
File: I7aLEZ1zx7qaDiObg_7MH8-9ZDA.roa (raw, json)
Hash identifier: TgoS4NVRCKw3VQlQIXu5bcdT8lLerjXyG7C2JML0rR4=
Subject key identifier: 23:B6:8B:11:9D:73:C7:BA:9A:0E:23:9B:83:FE:CC:1F:CF:BD:64:30
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 019D039D8B6C6EF76DCE5831AC7FB108090F
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/I7aLEZ1zx7qaDiObg_7MH8-9ZDA.roa
Signing time: Thu 19 Mar 2026 01:02:29 +0000
ROA not before: Thu 19 Mar 2026 01:02:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 103.17.96.0/24 maxlen: 24
109.111.34.0/23 maxlen: 24
109.111.48.0/20 maxlen: 20
109.111.50.0/23 maxlen: 24
109.111.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:03:9d:8b:6c:6e:f7:6d:ce:58:31:ac:7f:b1:08:09:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Mar 19 01:02:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23b68b119d73c7ba9a0e239b83fecc1fcfbd6430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:d3:c5:ef:1d:c3:fc:96:dd:3b:50:18:75:
06:e8:0c:dd:9f:8b:d9:49:e5:e0:d6:dc:af:80:91:
ad:98:ce:4a:e7:2a:2d:a7:97:3f:c5:eb:f3:c8:be:
00:22:6a:50:c2:55:c7:2b:90:5d:87:a3:f5:44:fa:
63:39:92:89:db:04:78:aa:ef:ca:91:12:23:d7:9a:
d8:59:54:eb:37:55:0f:d9:3c:10:61:a4:39:a2:da:
03:62:63:0c:04:ec:41:37:21:56:05:65:08:d8:d5:
c9:d0:a2:b0:5e:b6:b9:b3:55:d8:63:1d:16:7b:f5:
db:5f:dd:36:22:84:01:1d:56:f1:63:91:c1:39:ca:
b6:1b:97:73:f7:e2:5a:17:d2:d6:02:eb:58:9c:aa:
67:34:6f:de:3c:11:28:20:b3:84:df:45:85:07:49:
98:63:56:4d:b4:d5:99:d4:87:f2:34:73:c5:5e:d5:
b5:ac:cb:44:0c:71:5f:c7:46:cd:90:5b:26:aa:ee:
74:33:59:b9:d0:d0:b6:06:8b:8f:3a:16:9d:56:ac:
fd:f3:5b:0a:55:bb:d6:71:08:3c:20:75:9c:c4:7e:
a0:42:92:5d:30:e0:2f:e3:f1:ce:83:a3:01:ca:0c:
ab:04:11:b5:da:17:82:61:93:be:25:97:66:72:e5:
95:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B6:8B:11:9D:73:C7:BA:9A:0E:23:9B:83:FE:CC:1F:CF:BD:64:30
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/I7aLEZ1zx7qaDiObg_7MH8-9ZDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.17.96.0/24
109.111.34.0/23
109.111.48.0/20
Signature Algorithm: sha256WithRSAEncryption
ac:50:a7:56:e0:8b:f1:8c:74:6c:a5:7f:1f:ad:9f:6c:d8:21:
64:1e:99:0b:a3:81:8e:b1:28:08:15:9b:cc:25:e8:1f:91:5f:
f3:62:bc:b2:e1:57:a3:29:54:7f:0b:a6:fc:5c:92:cf:20:f2:
dd:79:3b:d3:d5:42:97:f1:0b:32:77:24:3c:86:ae:99:c0:f9:
a9:00:11:0b:ae:3c:53:f3:0b:c8:0a:77:4e:c5:16:53:9b:51:
81:11:29:4a:f4:92:92:e4:91:aa:bf:43:b5:b1:57:9c:3a:f4:
a4:54:98:c0:09:01:0d:b2:27:5c:1b:6c:c1:e9:5e:ca:30:ef:
51:70:e9:97:98:f0:47:ea:34:ac:9a:2a:b8:1d:54:2e:54:03:
58:53:f9:00:07:5e:08:bd:ed:66:5d:33:95:86:5a:6b:6d:f2:
61:6c:31:10:35:6c:bb:83:f6:4e:72:c0:27:e4:ad:bb:82:a2:
d4:b7:f2:5c:d4:5c:39:da:4c:56:f7:03:8b:bd:15:39:47:c5:
41:af:26:f3:0f:01:1c:c3:65:50:06:c3:e4:e7:84:13:dc:6f:
42:ff:d7:a3:23:3a:f3:f1:3f:ca:87:b2:58:5e:d9:68:db:a2:
b7:f4:f3:6d:5d:ab:f3:12:f7:1d:22:c0:bf:7e:b4:67:e1:27:
5a:d6:7d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:19:43 2026 by rpki-client