Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/1pdzUnZKt_wWKjTSOKKpYnyIWg0.roa
File: 1pdzUnZKt_wWKjTSOKKpYnyIWg0.roa (raw, json)
Hash identifier: Jwos/42AjBpUUtzbhqfe/k3RCD4AtZkcCfOG4B2vXEA=
Subject key identifier: D6:97:73:52:76:4A:B7:FC:16:2A:34:D2:38:A2:A9:62:7C:88:5A:0D
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01A0CD2595156915542E18D9356C4D364CF6
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/1pdzUnZKt_wWKjTSOKKpYnyIWg0.roa
Signing time: Wed 23 Sep 2026 07:23:07 +0000
ROA not before: Wed 23 Sep 2026 07:23:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206264
IP address blocks: 45.155.91.0/24 maxlen: 24
103.100.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:25:95:15:69:15:54:2e:18:d9:35:6c:4d:36:4c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Sep 23 07:23:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6977352764ab7fc162a34d238a2a9627c885a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ff:e6:9a:5d:e1:55:72:c3:a9:fb:e9:b5:ad:
ee:39:e9:bf:a6:eb:0f:4b:ab:22:07:2f:15:66:2c:
e7:92:78:f4:4f:62:8c:fa:a8:cc:90:24:b1:f0:20:
03:25:2d:85:4a:ea:dd:0c:b6:1f:bb:09:50:56:fd:
60:50:56:dc:08:49:38:1d:90:36:16:42:33:8c:95:
8b:4f:9a:cc:ce:30:99:d0:f0:39:51:ae:46:73:71:
fe:7a:f6:da:a1:b3:26:83:b8:92:02:8c:56:d6:af:
1a:2b:eb:38:fb:67:ef:c1:a9:60:5e:f7:b6:74:8a:
94:71:c6:ff:50:e7:ce:f8:40:22:2c:d2:42:39:df:
01:6c:3d:86:c5:9e:07:a2:e4:aa:12:ef:44:85:3e:
67:ed:77:d8:d8:bb:55:38:a9:c8:4f:c1:0d:4e:87:
a6:5d:00:28:ca:27:d8:1b:f2:4c:ad:48:85:5a:82:
5f:9d:52:cc:3e:94:ae:8c:18:ce:0a:9d:2d:11:23:
6f:4b:ec:9a:e4:1a:5e:f8:0e:41:af:a1:ab:65:f9:
30:c3:8e:a8:92:df:68:9c:5a:a2:3e:7e:0c:c0:ed:
ce:d8:08:9a:c2:e0:c5:3d:5f:ba:f6:55:f7:38:85:
60:10:a3:e2:d0:98:e9:06:bb:88:df:68:ec:ed:c8:
e1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:97:73:52:76:4A:B7:FC:16:2A:34:D2:38:A2:A9:62:7C:88:5A:0D
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/1pdzUnZKt_wWKjTSOKKpYnyIWg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.91.0/24
103.100.170.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:00:73:eb:54:6b:56:61:8b:cf:9f:a2:bf:33:bf:7b:67:a6:
02:f2:50:46:bc:9f:7b:7f:36:54:74:fe:41:ab:86:2f:65:51:
82:4b:8f:4f:12:3f:92:3f:b8:9f:a4:5e:c4:4c:01:e3:b8:0c:
43:fc:d9:de:cd:39:31:d2:2f:3b:88:41:04:e9:48:6d:e6:68:
05:69:4d:e5:de:44:5b:b0:de:0d:35:2a:f1:35:c4:51:6e:08:
a3:67:ae:e6:cf:96:5d:e7:be:89:84:a7:ed:90:59:ee:5a:4b:
e0:d5:4a:03:e2:9a:f6:5d:b4:61:82:1b:9b:e9:47:e8:4d:d9:
a3:e5:f8:9f:ef:b5:c7:24:1e:98:76:1d:da:8e:4f:f2:97:51:
b0:80:96:0a:08:a3:b9:78:46:61:ff:58:c2:58:1e:d4:4c:d4:
5c:e3:1e:e3:06:2c:6c:30:56:85:67:b7:22:72:99:a4:ce:60:
24:65:94:2d:56:c4:2e:c8:9f:31:7f:a6:5e:87:bf:31:95:39:
04:52:b5:fb:10:79:b3:77:ab:1d:6b:32:55:af:3a:1c:52:6d:
92:a0:93:69:77:ed:a3:6e:55:8d:a8:26:01:d3:6c:26:0e:06:
15:b0:82:c2:be:ed:ae:19:aa:ff:8d:cb:47:fa:54:4f:db:e9:
cc:5e:35:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 07:00:23 2026 by rpki-client