Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/NZQD7zphjc7dwSVHnNXMxdSVoe4.roa
File: NZQD7zphjc7dwSVHnNXMxdSVoe4.roa (raw, json)
Hash identifier: CpXGIWH2XcatYwFCPQUw5JGi2uWQv9n7uu+NX++NCAk=
Subject key identifier: 35:94:03:EF:3A:61:8D:CE:DD:C1:25:47:9C:D5:CC:C5:D4:95:A1:EE
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A062944A4D23EA679D0FA651559344B758
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/NZQD7zphjc7dwSVHnNXMxdSVoe4.roa
Signing time: Wed 02 Sep 2026 14:44:40 +0000
ROA not before: Wed 02 Sep 2026 14:44:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152523
IP address blocks: 103.207.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:94:4a:4d:23:ea:67:9d:0f:a6:51:55:93:44:b7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Sep 2 14:44:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=359403ef3a618dceddc125479cd5ccc5d495a1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f7:10:24:c1:94:08:d9:79:11:8a:23:ed:95:
ae:55:d2:24:4a:4e:24:ad:35:26:ba:c9:91:53:bd:
75:69:a8:d3:4a:80:18:63:fa:96:68:55:90:1f:ff:
b5:8f:41:ec:10:32:e2:03:ee:a1:62:84:33:88:d1:
59:68:2f:8a:ff:bd:74:3f:39:34:49:96:32:80:d2:
33:3d:5e:b7:6d:dd:fe:9a:05:e9:a5:af:aa:e3:22:
e5:e2:b7:02:c6:b5:e6:a0:69:1f:99:47:1a:4c:d4:
71:cc:06:d1:83:e7:08:9c:29:75:c5:67:87:99:b4:
f8:9c:76:08:72:0e:c1:60:64:38:81:cd:98:bb:19:
f3:c8:2d:89:e6:75:49:19:68:df:ed:7e:1c:f5:ae:
25:81:37:0d:f4:26:e8:29:07:47:c0:4e:1f:c4:40:
cc:95:84:87:8f:bc:fa:0e:0c:1f:9e:e6:dd:9a:07:
14:3c:98:d8:a3:78:94:86:bb:da:8b:0c:82:cb:52:
aa:b7:b7:e7:29:04:15:6a:ec:f0:6c:97:ab:fa:d8:
27:ef:6d:02:2c:5d:cf:11:b5:e3:77:2e:94:6e:c5:
cd:31:b2:ec:46:a7:b7:c3:ee:d5:bb:d6:af:72:bf:
20:c9:86:73:c0:8a:9b:54:b5:77:27:a2:8c:8c:21:
e4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:94:03:EF:3A:61:8D:CE:DD:C1:25:47:9C:D5:CC:C5:D4:95:A1:EE
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/NZQD7zphjc7dwSVHnNXMxdSVoe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.207.160.0/24
Signature Algorithm: sha256WithRSAEncryption
51:5f:2c:64:ec:82:a1:97:1b:e3:20:18:57:76:0b:01:ab:77:
7e:35:08:87:16:f4:2e:9f:97:29:3b:eb:85:ce:ff:7a:4b:b4:
37:9e:a5:6c:fd:f4:05:1d:a8:25:b3:87:57:3d:f4:71:71:3c:
e5:f0:20:53:dc:13:dc:b7:05:6e:12:f1:80:76:5d:6c:ab:34:
c9:24:04:bd:28:f5:63:31:7d:cf:60:5a:32:0e:46:e8:6b:0c:
74:34:ec:01:ad:13:f6:4b:5c:2c:e8:1a:2f:27:e4:e4:1f:df:
04:cb:2c:40:2f:f6:d2:ac:b5:a7:55:ac:49:52:fb:48:3f:d4:
12:84:79:e5:47:ef:3b:99:9a:86:0f:cc:27:4c:ce:47:5d:1e:
8c:43:68:d7:76:68:35:61:76:05:3e:5e:20:3e:1a:44:d8:15:
63:af:ae:03:0e:d1:a4:47:a1:83:61:a6:d2:6b:d3:94:08:99:
5d:32:4d:62:5e:09:dd:7a:de:a0:9f:f3:a3:76:8a:38:fa:53:
b8:6e:c7:26:0b:b3:b3:e3:56:a3:2a:de:e5:b8:13:e9:ba:16:
e3:fd:ec:12:74:27:3e:5a:31:04:7b:29:f4:66:df:1d:4a:45:
bb:f1:71:be:7a:4c:5e:2c:fb:84:33:be:09:7f:2c:02:a2:4e:
95:6e:d2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:49:07 2026 by rpki-client