Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/zQddJR0srh3UpgKOtESUaO1UkDw.roa
File: zQddJR0srh3UpgKOtESUaO1UkDw.roa (raw, json)
Hash identifier: tDBd3jYaumlCeJ61X+7zkMh6GIuzkfDLvRK2eN/iQ+M=
Subject key identifier: CD:07:5D:25:1D:2C:AE:1D:D4:A6:02:8E:B4:44:94:68:ED:54:90:3C
Certificate issuer: /CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Certificate serial: 019CFB55302FB65D5636BD31E0ED0DCDD89F
Authority key identifier: FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/zQddJR0srh3UpgKOtESUaO1UkDw.roa
Signing time: Tue 17 Mar 2026 10:26:29 +0000
ROA not before: Tue 17 Mar 2026 10:26:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59253
IP address blocks: 103.160.58.0/24 maxlen: 24
103.163.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:55:30:2f:b6:5d:56:36:bd:31:e0:ed:0d:cd:d8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Validity
Not Before: Mar 17 10:26:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd075d251d2cae1dd4a6028eb4449468ed54903c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:57:16:6b:b4:47:1e:2a:24:fc:dd:89:79:93:
31:1d:ae:ae:d9:e2:ca:5f:e0:56:b9:0e:1e:48:d2:
50:87:a6:6c:53:8d:a9:db:3d:7c:7d:04:40:a3:28:
b1:8f:af:8d:17:c0:26:51:98:21:13:71:4a:c3:c7:
00:cb:4c:25:a1:9b:1d:ab:ea:2d:4b:13:b1:90:29:
f3:32:7b:a7:5e:9b:a4:21:bc:87:29:54:03:a4:75:
f6:80:7b:4f:b5:c4:93:94:8f:b8:c1:6e:60:73:0d:
61:b3:90:29:57:13:3c:57:e0:53:f5:5d:a4:47:f1:
11:92:92:fc:87:7b:f1:3b:fc:3b:5c:e4:41:71:2d:
0e:48:b6:41:c8:99:1a:9f:14:71:3a:07:db:ca:08:
81:7d:45:d9:48:87:4e:40:03:d4:95:b7:0a:6f:52:
b9:c4:6e:e0:bb:18:b0:1e:dd:dd:41:f2:80:75:e3:
43:67:08:03:62:13:7f:a6:88:2c:12:4e:c9:f0:c2:
0b:5d:ee:22:f3:41:4e:72:cf:5d:8e:08:44:10:e2:
93:c9:ec:43:0b:bc:61:62:2f:44:53:0f:ce:a8:5b:
96:7b:d2:18:f0:ce:16:a7:4b:05:64:60:9a:a6:6d:
f4:09:df:31:9a:4e:d8:7c:3c:bc:e2:2d:06:ad:e7:
66:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:07:5D:25:1D:2C:AE:1D:D4:A6:02:8E:B4:44:94:68:ED:54:90:3C
X509v3 Authority Key Identifier:
keyid:FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/zQddJR0srh3UpgKOtESUaO1UkDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.160.58.0/24
103.163.52.0/24
Signature Algorithm: sha256WithRSAEncryption
88:60:3e:61:b0:d3:a0:ec:ef:52:44:95:f4:9c:51:db:26:d3:
c5:20:70:5d:d3:a2:53:68:e9:a3:e3:7f:82:27:b7:2f:46:1a:
51:6c:21:d1:da:64:00:0a:da:9d:ab:b1:a4:39:7a:96:62:a8:
92:a7:ec:0b:55:d7:91:d1:4f:39:ba:0d:d5:40:e9:9a:f9:da:
03:1b:41:4e:a1:ac:af:a1:90:25:eb:1b:fb:57:2c:41:76:7a:
70:2a:86:52:2c:e7:44:30:67:11:85:fb:ed:a4:d2:6e:30:05:
32:f6:98:8a:21:8f:ad:21:d5:04:82:cb:cd:6a:02:75:98:5d:
9c:8e:3e:c6:c3:07:cc:5b:98:bc:ca:86:bc:32:e6:e1:74:f4:
17:76:c4:b3:97:a2:70:0d:1c:42:65:24:eb:5e:0a:9b:c7:3d:
9a:3d:29:9d:8c:d8:36:e8:d1:85:68:9a:5d:9c:6c:78:ba:8c:
01:6d:9b:9c:04:a6:83:bd:61:cf:40:a2:af:f9:7b:cb:f3:97:
cc:77:9f:a1:c4:4a:fc:23:9c:02:3a:2a:a1:a7:ec:52:3d:0b:
aa:4c:c2:f8:2d:8c:9f:b0:aa:26:54:97:7d:b6:be:63:71:b9:
27:0c:69:8c:53:ee:ee:9a:ed:d2:a4:6a:a7:24:ae:c2:3d:07:
49:22:b3:ef
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZz7VTAvtl1WNr0x4O0NzdifMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYjI2Mjc2NzI4NzdkMGY2ZGU5YmM0ZTdlMTg2ZWVkZDEz
NTYxMTAwHhcNMjYwMzE3MTAyNjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDA3NWQyNTFkMmNhZTFkZDRhNjAyOGViNDQ0OTQ2OGVkNTQ5MDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VcWa7RHHiok/N2JeZMxHa6u2eLK
X+BWuQ4eSNJQh6ZsU42p2z18fQRAoyixj6+NF8AmUZghE3FKw8cAy0wloZsdq+ot
SxOxkCnzMnunXpukIbyHKVQDpHX2gHtPtcSTlI+4wW5gcw1hs5ApVxM8V+BT9V2k
R/ERkpL8h3vxO/w7XORBcS0OSLZByJkanxRxOgfbygiBfUXZSIdOQAPUlbcKb1K5
xG7guxiwHt3dQfKAdeNDZwgDYhN/pogsEk7J8MILXe4i80FOcs9djghEEOKTyexD
C7xhYi9EUw/OqFuWe9IY8M4Wp0sFZGCapm30Cd8xmk7YfDy84i0Gredm+QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFM0HXSUdLK4d1KYCjrRElGjtVJA8MB8GA1UdIwQY
MBaAFP+yYnZyh30Pbem8Tn4Ybu3RNWEQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzdKaWRuS0hmUTl0NmJ4T2ZoaHU3ZEUxWVJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yMmM1MTAtMzQ4MC00Y2UxLThkZDgt
MTk3NDY5NDc1NThkLzEvelFkZEpSMHNyaDNVcGdLT3RFU1VhTzFVa0R3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8yMmM1MTAtMzQ4MC00Y2UxLThkZDgtMTk3NDY5NDc1NThk
LzEvXzdKaWRuS0hmUTl0NmJ4T2ZoaHU3ZEUxWVJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAZ6A6AwQA
Z6M0MA0GCSqGSIb3DQEBCwUAA4IBAQCIYD5hsNOg7O9SRJX0nFHbJtPFIHBd06JT
aOmj43+CJ7cvRhpRbCHR2mQACtqdq7GkOXqWYqiSp+wLVdeR0U85ug3VQOma+doD
G0FOoayvoZAl6xv7VyxBdnpwKoZSLOdEMGcRhfvtpNJuMAUy9piKIY+tIdUEgsvN
agJ1mF2cjj7GwwfMW5i8yoa8MubhdPQXdsSzl6JwDRxCZSTrXgqbxz2aPSmdjNg2
6NGFaJpdnGx4uowBbZucBKaDvWHPQKKv+XvL85fMd5+hxEr8I5wCOiqhp+xSPQuq
TML4LYyfsKomVJd9tr5jcbknDGmMU+7umu3SpGqnJK7CPQdJIrPv
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:28:03 2026 by rpki-client