Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/X-7RGlKtsXnKDGcSIk1zeqLC3xE.roa
File: X-7RGlKtsXnKDGcSIk1zeqLC3xE.roa (raw, json)
Hash identifier: vlE/UfbvsTFziInTrQV9Dm8p9m7aTpBtK8sK1NvBCUE=
Subject key identifier: 5F:EE:D1:1A:52:AD:B1:79:CA:0C:67:12:22:4D:73:7A:A2:C2:DF:11
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01A09FE338834F95BEF50DE2828E002FA917
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/X-7RGlKtsXnKDGcSIk1zeqLC3xE.roa
Signing time: Mon 14 Sep 2026 12:27:43 +0000
ROA not before: Mon 14 Sep 2026 12:27:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 103.17.97.0/24 maxlen: 24
109.111.48.0/20 maxlen: 20
109.111.54.0/23 maxlen: 24
109.111.56.0/22 maxlen: 24
185.65.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:e3:38:83:4f:95:be:f5:0d:e2:82:8e:00:2f:a9:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Sep 14 12:27:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5feed11a52adb179ca0c6712224d737aa2c2df11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:3b:01:6c:62:18:1e:e1:b8:59:e2:38:7c:
38:fc:2f:bf:ab:53:0f:47:69:f7:49:67:ab:52:4e:
73:a0:56:70:be:e0:f0:c2:93:ce:a7:cd:f2:03:6e:
d6:47:13:ad:34:06:5f:45:ef:6d:92:9a:0b:53:9b:
37:72:c6:38:9b:9b:a8:f4:97:3e:33:92:c7:33:50:
df:49:9c:87:3c:72:8b:3e:58:93:13:01:17:65:ae:
e5:93:fb:ce:66:19:95:f6:dd:4f:01:ab:68:2e:12:
a2:4a:7d:37:03:9c:f1:c0:bd:e3:27:d4:f5:6d:bd:
d3:a0:6c:f9:d3:ef:e2:af:3a:44:48:39:78:36:83:
f1:8b:62:64:fc:d8:d7:c5:7f:83:cb:2f:f8:3e:e1:
40:b5:49:be:10:5f:07:1b:4a:5c:d0:55:3e:11:fb:
f3:2f:18:6f:a1:0f:1c:32:3b:6b:4c:8b:8a:cf:57:
46:07:6c:37:86:7f:0f:84:9c:a1:c1:dc:00:74:54:
8f:08:84:45:5a:77:d1:93:a9:cd:8d:5d:4d:f1:fc:
6b:58:3b:c3:5c:4a:bd:2a:32:6d:b4:83:5c:46:75:
fd:3a:90:f9:d1:cc:03:c6:03:22:8e:76:80:bc:7d:
9a:eb:c6:e6:99:68:da:83:38:09:8d:c6:c2:32:32:
ab:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EE:D1:1A:52:AD:B1:79:CA:0C:67:12:22:4D:73:7A:A2:C2:DF:11
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/X-7RGlKtsXnKDGcSIk1zeqLC3xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.17.97.0/24
109.111.48.0/20
185.65.63.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:34:d7:f3:f5:d0:69:eb:68:67:9e:ba:f8:83:c7:72:a8:4b:
17:06:93:87:b3:71:92:30:a7:2d:c5:32:a3:f8:62:41:53:a1:
52:67:59:ce:eb:2f:4e:34:95:85:ba:0d:4a:2c:5f:46:2f:bc:
a8:00:51:0c:cf:9c:50:d1:ff:f5:36:49:57:13:de:89:b6:4b:
5e:17:a6:11:a9:e9:a3:fd:23:ef:22:c3:d2:d2:f0:cd:b4:32:
74:19:02:5a:ea:db:51:3a:03:fa:42:9b:c8:72:b1:c7:d8:b4:
9e:62:4a:42:0e:d9:65:2b:0e:c3:cf:5d:dd:06:8b:80:d4:30:
fd:86:8f:d7:36:3f:cf:03:5d:bf:f0:5d:1d:a9:bd:14:94:48:
a8:7b:40:ed:c2:7a:4c:6a:87:9a:87:4b:4f:61:35:35:8f:a8:
41:76:2d:03:af:95:6e:36:98:c3:f0:99:7d:16:7c:1e:d8:93:
fb:0f:24:72:d4:5d:b4:6f:9d:ff:ea:9b:91:5e:c5:01:89:c2:
c2:de:b2:da:cf:74:93:65:78:d1:45:9f:f1:42:39:12:9f:8a:
72:7c:99:91:ad:81:cd:5f:89:2a:79:00:9a:39:c9:5f:74:e7:
a3:3a:50:f3:b1:60:77:d9:11:9d:bd:b3:b7:06:7b:6a:39:62:
19:3f:fa:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 01:29:53 2026 by rpki-client