Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/_bKIuy220tTXYrRPn3HntOXmRqY.roa
File: _bKIuy220tTXYrRPn3HntOXmRqY.roa (raw, json)
Hash identifier: 1VakFG9osW1RckuLZuGPTNnMw5fvO3RRg8ydBNSOdRQ=
Subject key identifier: FD:B2:88:BB:2D:B6:D2:D4:D7:62:B4:4F:9F:71:E7:B4:E5:E6:46:A6
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 019FFB5127C6713754A75B662C418546ACDA
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/_bKIuy220tTXYrRPn3HntOXmRqY.roa
Signing time: Thu 13 Aug 2026 13:30:27 +0000
ROA not before: Thu 13 Aug 2026 13:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 103.17.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:51:27:c6:71:37:54:a7:5b:66:2c:41:85:46:ac:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Aug 13 13:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fdb288bb2db6d2d4d762b44f9f71e7b4e5e646a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:b3:32:c2:87:21:c7:83:cb:c6:05:09:51:
30:5b:65:11:a5:86:ca:5c:2b:77:1d:b2:72:63:5b:
3a:76:ed:2b:b2:17:52:fb:59:b2:50:5c:55:10:09:
26:47:65:46:a7:b0:7d:f5:c6:2d:66:1b:a5:98:37:
df:a6:f7:72:1e:f0:26:63:e8:5a:14:bd:aa:38:69:
1f:c4:fc:17:f4:46:d1:6a:1a:35:d7:bf:8f:70:47:
c2:28:0f:cb:d4:4c:ee:80:44:79:14:06:07:10:5c:
d5:d1:e2:67:7a:9d:94:fd:48:d7:49:1b:00:3a:33:
a9:ba:1b:4f:a7:a4:6e:16:cd:cf:f9:47:ff:77:c4:
69:0d:88:06:b9:a6:da:4b:36:d9:aa:bd:45:9a:4f:
af:b3:8b:14:ce:0d:7c:1c:d7:4c:96:f9:ef:c3:69:
18:a1:25:c5:ea:5f:6d:c0:77:c7:4c:f0:f2:74:c7:
15:5b:5c:5c:53:c5:07:44:bf:97:76:cf:dc:89:a0:
0f:16:db:fe:9a:74:c0:e3:c2:1d:f6:91:a8:e1:2a:
0f:09:70:47:f2:8c:74:7a:7c:39:c6:38:95:91:93:
a9:8b:02:ae:d3:69:e1:75:b9:61:20:d4:74:ec:59:
cc:e2:7e:b0:9f:47:9f:3f:24:63:21:c0:9a:b5:e8:
39:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B2:88:BB:2D:B6:D2:D4:D7:62:B4:4F:9F:71:E7:B4:E5:E6:46:A6
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/_bKIuy220tTXYrRPn3HntOXmRqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.17.97.0/24
Signature Algorithm: sha256WithRSAEncryption
46:31:f7:23:38:60:64:23:91:c5:2e:be:58:ce:f3:78:ed:d0:
ef:2b:98:ae:56:9f:30:a5:d7:a7:cc:f8:91:71:2b:5d:d4:83:
fe:54:e9:e6:4e:36:6a:99:e3:9a:c6:1c:56:f9:a2:76:ed:5d:
88:91:09:92:bb:fb:b4:8d:e0:91:13:9c:5c:94:9b:fa:4c:f1:
77:98:73:e3:c7:53:71:5d:5b:5e:97:20:41:0c:57:7c:71:b0:
ed:06:01:b8:aa:72:93:4d:a6:d3:b0:d1:7e:31:c8:e8:02:70:
40:69:08:05:76:10:85:44:0e:0a:ad:be:58:18:84:bf:a7:d6:
25:d4:1f:9b:ae:d8:7d:c1:6f:82:9f:9c:6b:af:b2:d3:e6:9b:
35:3b:61:5c:55:7a:07:28:30:dd:75:b5:3c:9c:ca:fb:01:5b:
61:e2:25:67:0a:c7:a2:1e:5a:7a:64:4e:86:10:e2:bb:79:02:
a4:3f:25:5d:59:57:95:37:51:55:5b:33:5b:47:ed:74:57:c4:
02:c6:8b:1a:35:ee:35:9b:ef:0c:7c:aa:b3:0c:1b:c9:58:4e:
c5:07:67:72:51:ac:d7:1a:a0:d7:06:0c:2a:17:ad:ba:c4:67:
bc:1d:9e:05:5f:7a:f2:c3:d6:9e:0b:c7:c0:89:1c:59:40:17:
73:81:65:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:53:17 2026 by rpki-client