Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/zRXQ1Qu2GIWcgdXufti9ZCANdWM.roa
File: zRXQ1Qu2GIWcgdXufti9ZCANdWM.roa (raw, json)
Hash identifier: Z7ZLL5mgHo74w4m0NX2IO4F+vFRKzcYr3WCLfSQRW54=
Subject key identifier: CD:15:D0:D5:0B:B6:18:85:9C:81:D5:EE:7E:D8:BD:64:20:0D:75:63
Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial: 019FB8314A53B71597C09FF4D11935DC9EDC
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/zRXQ1Qu2GIWcgdXufti9ZCANdWM.roa
Signing time: Fri 31 Jul 2026 12:41:05 +0000
ROA not before: Fri 31 Jul 2026 12:41:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43289
IP address blocks: 103.197.148.0/22 maxlen: 24
178.17.160.0/20 maxlen: 24
178.175.128.0/19 maxlen: 24
193.200.160.0/24 maxlen: 24
2a00:1dc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b8:31:4a:53:b7:15:97:c0:9f:f4:d1:19:35:dc:9e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
Validity
Not Before: Jul 31 12:41:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd15d0d50bb618859c81d5ee7ed8bd64200d7563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:a2:ce:9d:8f:2a:ba:12:ce:81:ad:c4:cd:
9c:f3:ad:18:d9:04:61:50:5a:5b:9d:ee:28:30:14:
2a:88:2e:d2:98:08:dd:69:10:a6:fd:87:61:8e:b3:
7b:39:f7:23:8f:18:89:86:99:52:e7:86:4a:bb:ce:
dc:7f:ae:31:6a:28:df:ec:1e:ce:6a:f2:e8:36:05:
75:dd:3c:20:e9:18:85:14:e6:7a:d2:46:4a:27:49:
d1:da:8b:35:99:8d:5b:75:4c:d9:b5:14:62:78:77:
41:a3:e0:19:89:c5:63:3c:4a:37:fb:e7:1e:43:9c:
8e:3b:c9:47:08:07:92:70:c5:12:14:ac:94:e1:a0:
dd:71:e8:f9:88:df:e8:dd:1c:6c:ee:6f:c4:36:6e:
86:6a:83:a9:90:39:0d:15:5e:e3:04:35:ba:9e:8b:
af:b1:6f:8e:ad:14:a1:39:24:53:10:37:19:09:86:
a4:ff:0d:af:d2:fc:ea:b9:6e:80:6d:67:fd:35:98:
7c:7a:bf:ac:ac:1c:c7:6e:d4:f6:bd:34:ea:e1:4c:
41:87:d5:7c:1d:a5:bc:87:27:8c:b5:0b:d8:09:cd:
e5:dc:e2:6f:c6:6b:61:ab:0c:cd:21:53:17:0c:74:
ee:30:44:17:b8:92:1a:42:e1:bd:b4:73:d6:44:49:
c1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:15:D0:D5:0B:B6:18:85:9C:81:D5:EE:7E:D8:BD:64:20:0D:75:63
X509v3 Authority Key Identifier:
keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/zRXQ1Qu2GIWcgdXufti9ZCANdWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.197.148.0/22
178.17.160.0/20
178.175.128.0/19
193.200.160.0/24
IPv6:
2a00:1dc0::/29
Signature Algorithm: sha256WithRSAEncryption
69:c5:59:3c:c5:1e:3f:c0:e4:fd:23:1c:61:9c:ae:79:ce:39:
85:f6:1b:73:4f:f2:6b:d9:6d:84:cf:3b:b2:f4:5f:94:ef:38:
8e:ab:f9:5b:76:64:e4:f3:bd:2d:13:dc:c7:13:2e:88:e5:86:
4d:d1:76:e4:80:e6:ad:34:b7:9c:04:be:98:aa:c3:0b:37:61:
2a:62:fe:5f:46:a9:04:4e:5a:f9:cb:22:1f:a7:d9:e5:bc:5e:
f8:d4:eb:d6:56:c9:c7:11:05:36:33:cd:b3:f0:4d:8b:30:45:
21:03:5e:d8:93:59:67:40:7d:ab:17:0f:af:81:1f:31:72:50:
b1:2f:32:e1:1a:95:9a:c0:82:0e:14:1d:9a:4e:09:2f:fb:5a:
f8:4a:3c:65:7c:da:f9:a5:68:8f:f0:2f:bd:04:de:25:e8:c4:
98:7e:28:52:f5:ec:da:63:13:09:1d:38:7c:e7:bb:46:87:29:
55:8d:00:91:c5:4e:6b:30:37:b9:82:bc:ee:96:8f:d9:d3:2b:
19:3b:83:e5:ab:0c:33:96:1d:6f:4f:62:e3:f9:91:fd:ba:c3:
9c:b9:0a:b8:6a:43:a5:4e:46:b5:88:52:be:75:88:19:ff:97:
3c:18:0b:42:1e:1d:7c:a1:2c:7c:fc:70:65:2e:c1:b8:fc:dd:
15:94:f4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:59:46 2026 by rpki-client