Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/zJTTnnH2VtkNIcbb3Tp1DM9Tjss.roa
File: zJTTnnH2VtkNIcbb3Tp1DM9Tjss.roa (raw, json)
Hash identifier: eY+B3tVs6SCAPKWEBtOvxhIQY8p0H9Q1QbKjfVaVJbA=
Subject key identifier: CC:94:D3:9E:71:F6:56:D9:0D:21:C6:DB:DD:3A:75:0C:CF:53:8E:CB
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019D06A06D0AA210C2C655CBED0DD411CDCF
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/zJTTnnH2VtkNIcbb3Tp1DM9Tjss.roa
Signing time: Thu 19 Mar 2026 15:04:30 +0000
ROA not before: Thu 19 Mar 2026 15:04:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212165
IP address blocks: 103.127.76.0/24 maxlen: 24
103.127.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:a0:6d:0a:a2:10:c2:c6:55:cb:ed:0d:d4:11:cd:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Mar 19 15:04:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc94d39e71f656d90d21c6dbdd3a750ccf538ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7e:e9:8d:91:dd:1d:f3:5e:c1:4d:60:3d:87:
11:0a:f7:b5:90:47:d5:00:68:eb:8d:d7:70:20:3f:
b1:1a:e7:25:b0:18:b8:bb:a8:c8:73:34:c5:02:74:
19:3b:d2:0b:d2:58:c9:fc:30:97:43:0f:fa:b6:28:
4d:41:d8:84:d1:ea:2e:78:33:71:c8:2b:61:e8:bd:
2a:8c:6e:42:1b:4d:22:7d:ed:07:63:e4:96:49:8f:
00:ab:d9:8e:62:f6:9e:a9:cb:cf:50:c0:ef:a8:5f:
0f:8b:c3:0a:5e:8d:2b:d4:27:e9:95:7a:52:7f:cc:
f0:68:c0:32:1d:c5:3a:a7:d4:01:42:e1:f4:bf:2d:
e8:65:12:c5:2b:e3:6e:81:19:43:a4:07:a3:fc:69:
31:c9:4a:95:b8:b1:4c:df:9c:94:19:9e:c7:40:ae:
7e:51:bc:db:cf:d9:05:81:16:22:10:89:32:1d:2a:
5d:4d:49:58:5d:6e:e8:66:cf:ac:07:27:c6:a1:77:
33:58:ab:eb:2e:06:8b:77:7d:17:84:2a:46:0d:10:
59:9c:79:1e:25:6a:18:93:59:5c:f2:e0:c1:83:73:
42:20:72:fd:77:83:44:23:60:d2:8c:1f:3f:17:3d:
a2:89:cc:c6:4e:69:0b:d0:f9:68:28:1e:08:8d:da:
dc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:94:D3:9E:71:F6:56:D9:0D:21:C6:DB:DD:3A:75:0C:CF:53:8E:CB
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/zJTTnnH2VtkNIcbb3Tp1DM9Tjss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.127.76.0/23
Signature Algorithm: sha256WithRSAEncryption
79:5a:2e:b9:2a:1f:5c:8b:ff:d4:e5:bf:df:1f:4c:d8:9e:a6:
29:20:5c:1d:33:3a:d4:b5:59:46:ad:12:ea:79:06:6f:03:10:
a2:23:2d:b0:66:c9:f0:62:94:5b:8d:54:ec:c0:1f:55:eb:61:
16:b4:c7:09:84:79:cc:2f:b0:96:a8:17:5f:00:0b:cb:5d:0c:
7a:48:1f:41:67:fc:bd:34:b1:4a:13:71:65:2b:dc:62:cb:71:
fb:b3:89:9b:81:26:02:8c:d3:78:b1:f4:bb:bf:a9:b2:10:c7:
ac:b3:f6:ec:f7:e1:f5:61:d8:76:2e:f6:cc:3d:4f:30:cb:74:
f7:5c:98:4d:d4:df:e8:97:72:cd:24:b7:fd:a9:00:09:91:05:
42:6f:82:6f:cb:10:5a:74:a6:44:52:53:f4:bd:51:6b:f4:7c:
7a:9e:47:56:29:a7:dd:77:8e:52:62:2d:04:f1:87:dd:a3:9c:
b8:61:6d:42:ca:58:a7:46:55:a4:28:21:68:50:9f:c7:15:62:
14:c1:e1:d0:c4:64:04:5c:89:26:3e:68:2c:18:a7:0c:03:3a:
d7:71:dc:30:33:ef:bc:4b:1c:76:98:6e:e0:8c:79:d5:ae:bd:
84:a0:0a:bf:59:12:45:04:b5:fa:7d:0b:d3:06:c6:fb:3d:64:
19:1d:30:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:45:00 2026 by rpki-client