Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/_zP73NXlOD_8EgcbXNN-hPdzSQo.roa
File: _zP73NXlOD_8EgcbXNN-hPdzSQo.roa (raw, json)
Hash identifier: XVZFe/ZBZLQR/k8FwFmC9dpWix1IncPAmzb2M0KXlGk=
Subject key identifier: FF:33:FB:DC:D5:E5:38:3F:FC:12:07:1B:5C:D3:7E:84:F7:73:49:0A
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 019F651D40B32066031D5BCF355C3F77C8A8
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/_zP73NXlOD_8EgcbXNN-hPdzSQo.roa
Signing time: Wed 15 Jul 2026 09:30:43 +0000
ROA not before: Wed 15 Jul 2026 09:30:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51517
IP address blocks: 103.251.156.0/22 maxlen: 22
103.251.156.0/24 maxlen: 24
103.251.157.0/24 maxlen: 24
103.251.159.0/24 maxlen: 24
2a10:e300::/32 maxlen: 32
2a10:e300:8411::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:1d:40:b3:20:66:03:1d:5b:cf:35:5c:3f:77:c8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Jul 15 09:30:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff33fbdcd5e5383ffc12071b5cd37e84f773490a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:09:f8:aa:26:77:f7:6f:0f:7f:d4:1a:09:54:
fa:1d:12:4e:95:e9:3d:43:ec:62:b6:42:6a:c0:01:
9e:0b:48:dd:3e:0c:1a:a3:8c:1c:fa:2a:a4:d3:a0:
ea:00:a3:94:05:5e:76:07:f3:f8:ea:70:f3:8f:b0:
eb:5c:90:c7:02:0d:fa:39:b2:77:95:b0:4d:2c:98:
ad:fd:e5:6c:5b:b1:33:59:15:da:5f:76:a3:5e:07:
ed:93:21:f9:46:a3:14:18:54:2d:2d:b0:80:51:9e:
94:6c:89:64:ee:03:99:81:dd:f7:f1:e6:e2:4a:af:
99:6e:8d:80:9b:4b:94:d4:ec:11:40:65:2e:73:89:
ec:f9:55:fa:a6:1c:3c:6f:b8:8e:c7:e0:27:9d:32:
3a:f5:9d:31:1f:1b:51:81:9e:2e:a3:c4:3d:13:9d:
7c:87:e8:88:d8:c9:7b:77:9b:82:8b:62:e9:fa:90:
50:74:c2:1d:d1:9b:9f:93:d6:d2:37:fa:cb:f7:c1:
af:b8:e9:36:e0:d0:9a:92:cb:a9:90:79:c5:55:f5:
31:9d:5a:03:8c:90:0e:40:03:cd:c5:4d:02:db:6d:
8f:ad:99:87:fa:29:9c:6e:1d:63:41:ab:48:f9:63:
37:85:cc:a0:bd:98:f0:5b:23:8c:68:51:ea:76:ab:
54:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:33:FB:DC:D5:E5:38:3F:FC:12:07:1B:5C:D3:7E:84:F7:73:49:0A
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/_zP73NXlOD_8EgcbXNN-hPdzSQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.251.156.0/22
IPv6:
2a10:e300::/32
Signature Algorithm: sha256WithRSAEncryption
c1:65:37:43:57:f4:02:2f:a1:d4:4b:4c:d8:a4:cc:5b:fb:f3:
f7:75:28:79:2f:21:fd:a5:64:28:eb:93:26:5e:04:8a:3f:28:
2f:e5:ea:47:c1:a1:46:02:11:3f:e5:a4:fc:4e:cc:22:5d:88:
3e:ea:23:be:b5:26:6d:31:61:69:7c:66:33:2d:ee:94:65:c1:
39:7a:f8:11:94:2f:51:5c:da:a7:a1:3b:57:30:89:36:3b:fa:
80:d4:41:37:43:a9:ba:54:00:10:bd:5c:b3:23:c4:a8:fe:ad:
9b:2f:9f:ad:5d:0b:57:ec:df:f3:0f:f1:2e:b4:14:f2:8e:89:
d7:4e:9a:d0:6b:6e:64:26:e2:b0:fe:05:a1:14:c9:f1:07:d7:
89:2f:74:54:11:13:bd:29:84:43:5f:f0:db:18:ab:0c:a5:56:
b8:31:f1:5d:c9:38:74:69:6d:04:6b:7b:f4:a4:19:64:72:ce:
6e:f1:ca:4f:d7:ee:b8:70:13:3b:20:6c:3d:de:da:b2:4a:10:
6c:d3:cf:18:f4:4c:87:dc:b1:99:f3:7f:c7:7d:ca:1f:73:52:
b1:bc:44:82:3e:89:2e:5f:50:bb:09:92:2e:37:8c:49:ad:95:
03:37:f1:fa:fb:ca:75:31:64:0d:25:aa:78:14:96:25:b0:49:
93:00:55:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:26 2026 by rpki-client