Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/CHlF7hxgiJMCvSrfgZpDmvUe7vo.roa
File: CHlF7hxgiJMCvSrfgZpDmvUe7vo.roa (raw, json)
Hash identifier: 3cUTX1iPlbQoeoEy9GPcHhj4EZ6G/JFPu4+djGhZwgU=
Subject key identifier: 08:79:45:EE:1C:60:88:93:02:BD:2A:DF:81:9A:43:9A:F5:1E:EE:FA
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 019FD75DC36D7E930B26E01BA4B95B3667E0
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/CHlF7hxgiJMCvSrfgZpDmvUe7vo.roa
Signing time: Thu 06 Aug 2026 13:57:54 +0000
ROA not before: Thu 06 Aug 2026 13:57:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 103.17.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:5d:c3:6d:7e:93:0b:26:e0:1b:a4:b9:5b:36:67:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Aug 6 13:57:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=087945ee1c60889302bd2adf819a439af51eeefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a2:0b:e5:c1:9a:92:61:55:2e:85:96:22:09:
e4:f7:24:3f:29:7d:b7:8f:20:19:62:93:53:95:43:
80:60:0d:7d:5f:98:d8:fd:55:97:cb:7c:69:6c:ce:
ec:31:2e:5c:c3:cd:21:7e:ec:09:6f:d3:aa:c8:b8:
1d:05:7d:65:75:67:b1:52:dc:be:b5:d6:44:30:99:
34:7e:74:17:8b:95:7e:c2:54:3c:cd:32:cb:4c:94:
18:78:25:6a:24:3e:36:fa:d1:1b:28:73:2b:1a:f9:
33:73:29:63:90:52:e5:28:42:42:9f:55:b0:61:a7:
f4:07:64:0e:d1:8f:55:30:f7:69:4c:b8:f5:5e:1b:
6c:3c:31:4a:ee:55:60:6b:c7:49:7e:ec:6e:35:d6:
8e:a5:2b:40:8a:d1:74:3a:14:4e:c6:5a:f0:5c:14:
c2:a9:d9:0a:04:b2:ec:b5:c7:a9:4c:1a:43:60:14:
c4:f3:10:90:15:8a:ef:8b:be:5b:64:98:40:6c:5f:
de:19:0e:bf:9c:d4:85:d0:85:51:f2:ce:14:89:47:
4f:1b:ea:95:5a:29:ab:90:94:1d:19:09:49:26:e6:
3b:c5:94:d6:46:a6:5c:96:74:46:1b:d5:ab:62:aa:
a8:3d:16:c9:74:6d:47:4b:f7:b7:82:f8:ec:79:f5:
82:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:79:45:EE:1C:60:88:93:02:BD:2A:DF:81:9A:43:9A:F5:1E:EE:FA
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/CHlF7hxgiJMCvSrfgZpDmvUe7vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.17.96.0/24
Signature Algorithm: sha256WithRSAEncryption
09:42:5d:44:b5:01:60:ad:5e:6e:a1:55:3d:52:7c:0c:79:45:
bf:de:7c:f4:fc:65:3b:f3:1b:38:f6:12:b6:05:53:58:94:fc:
f4:cf:64:fe:b2:20:d1:29:40:ae:9a:2b:ef:49:ec:09:bf:4d:
55:1f:65:e8:0a:ba:97:a1:b6:e7:4a:f1:36:d6:db:a9:d4:a9:
d2:62:4e:20:f8:21:d5:5b:4d:a5:d7:a4:65:80:6b:f8:e8:4c:
b1:c4:15:df:37:e1:88:bf:cd:ef:b8:76:1c:54:5a:2d:6f:3c:
23:f6:63:9e:f9:a1:14:d7:bb:ef:19:39:1a:29:fe:21:bb:37:
b3:d6:1a:98:76:37:3f:33:7e:89:45:dc:d0:1a:9f:7d:3d:42:
0d:39:fd:0b:24:ce:bf:be:2f:82:1d:e6:0f:eb:af:1f:f0:ff:
c5:81:d3:72:1a:f5:89:b3:2b:d4:4c:32:a0:03:50:44:bf:5e:
55:c4:01:07:0e:ec:4b:aa:5a:35:73:42:b1:93:40:45:ab:10:
79:ee:54:f3:6f:46:fd:8f:1b:fc:61:f9:79:49:af:fa:27:84:
dd:83:c2:b3:7b:d6:33:60:3a:96:c9:07:37:a0:11:73:a2:5a:
57:93:60:34:f4:b1:ce:7f:46:e3:7a:1f:98:67:e5:b7:83:c8:
a1:25:58:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:26:20 2026 by rpki-client