Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/zqTDWnmSlSWX01iiSNinTnu0Zp4.roa
File: zqTDWnmSlSWX01iiSNinTnu0Zp4.roa (raw, json)
Hash identifier: ZNxewe66vaT/4odCrv5OwpxaOR47BEPKOgzkNOaHMeo=
Subject key identifier: CE:A4:C3:5A:79:92:95:25:97:D3:58:A2:48:D8:A7:4E:7B:B4:66:9E
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 019F6B497FCAA75405AFABBBB7D2459458C3
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/zqTDWnmSlSWX01iiSNinTnu0Zp4.roa
Signing time: Thu 16 Jul 2026 14:16:46 +0000
ROA not before: Thu 16 Jul 2026 14:16:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197528
IP address blocks: 103.17.98.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:49:7f:ca:a7:54:05:af:ab:bb:b7:d2:45:94:58:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Jul 16 14:16:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cea4c35a7992952597d358a248d8a74e7bb4669e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:9d:01:8a:a0:5a:d1:f0:36:38:ff:d8:f8:
13:3b:c3:a9:bb:05:ca:eb:3e:0e:24:15:ae:fe:53:
29:b5:a6:9e:c2:3d:dd:b2:25:64:a2:85:c0:b8:3f:
82:79:18:8c:76:02:bf:37:33:7d:ea:3c:b1:7b:97:
e7:7b:f9:41:76:ed:44:ba:6e:62:93:38:32:a6:f1:
b2:95:64:7f:30:25:8e:27:85:6a:5b:a8:7b:ea:f5:
60:6b:74:f4:0b:0b:be:b4:06:9b:da:ba:2c:ba:15:
60:3a:4e:65:60:7a:25:0f:5f:1a:5c:1f:64:d2:03:
e1:54:46:c0:d2:5d:39:5a:3b:9d:e9:78:29:2f:d5:
fc:e5:ad:63:e5:be:a6:2e:90:bb:f3:c1:31:41:c2:
27:b7:d4:f3:2b:6f:83:a3:7e:e0:33:87:40:ee:64:
f7:8e:12:43:c0:7d:ce:4a:57:7f:66:9c:82:9c:fb:
71:f7:44:e8:b0:b1:51:37:84:20:bb:21:07:47:59:
a2:65:7b:31:ca:d6:13:8c:86:fa:13:bb:d1:ee:34:
5b:2f:d7:c8:b4:df:10:f8:dc:61:f0:84:15:98:81:
f8:09:fc:6c:a6:8f:ea:09:4f:a0:e8:f2:7c:02:58:
a5:0f:ed:a7:22:ab:6d:0d:97:9d:e7:cd:91:92:54:
51:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A4:C3:5A:79:92:95:25:97:D3:58:A2:48:D8:A7:4E:7B:B4:66:9E
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/zqTDWnmSlSWX01iiSNinTnu0Zp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.17.98.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:35:82:d8:1a:ae:77:1e:4a:5f:69:75:ea:a7:25:b1:16:45:
33:b4:19:8d:fc:ae:f0:b6:63:11:7c:c8:96:7b:80:71:d6:51:
9f:3d:98:59:a4:1a:a9:2c:47:99:1b:bc:f2:13:d1:27:3a:a6:
07:bd:b5:0d:0c:7e:93:7a:1d:cf:46:a0:e5:bd:1e:a3:c8:a0:
4b:d1:07:49:5c:cf:3d:8d:a7:ec:eb:10:80:90:23:72:f4:94:
60:bb:9b:be:b3:96:9b:26:c5:d9:62:e0:44:2b:21:a4:0d:a3:
fa:1e:f5:2d:63:a5:18:5e:66:3a:55:e1:10:37:87:f7:cc:53:
11:3c:1d:4e:6f:78:f0:cb:59:b9:3e:42:20:73:ad:e1:b4:66:
11:b3:cc:28:11:c4:b2:6a:05:93:24:5d:fb:ff:e4:23:85:18:
c7:8b:2d:dc:25:74:6d:f9:05:c7:69:9a:a5:ca:09:79:8d:2b:
b0:e9:fc:72:f0:75:80:76:03:bd:0d:20:15:b1:95:a3:b7:a4:
a0:aa:b4:e9:53:d9:48:cc:56:cf:49:aa:57:9e:35:96:69:63:
74:92:d3:61:39:26:bb:b3:2d:c4:7f:8d:80:8e:12:03:ef:69:
d9:e4:02:25:03:7d:a5:41:69:cf:5b:25:2b:95:d4:70:ba:92:
d1:00:45:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:19 2026 by rpki-client