Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/DTEIYKQEg-3cc4nyovdTEVZXI84.roa
File: DTEIYKQEg-3cc4nyovdTEVZXI84.roa (raw, json)
Hash identifier: hLN894n7D6L17mAkhT/VjLR/oKc26Wp5ltD2GzuEB80=
Subject key identifier: 0D:31:08:60:A4:04:83:ED:DC:73:89:F2:A2:F7:53:11:56:57:23:CE
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01A0B583C7D3CD04DA09592AE7239112A9DC
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/DTEIYKQEg-3cc4nyovdTEVZXI84.roa
Signing time: Fri 18 Sep 2026 17:15:07 +0000
ROA not before: Fri 18 Sep 2026 17:15:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151407
IP address blocks: 103.17.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:83:c7:d3:cd:04:da:09:59:2a:e7:23:91:12:a9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Sep 18 17:15:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d310860a40483eddc7389f2a2f75311565723ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1a:fe:25:01:ec:fc:81:b5:58:d7:af:54:91:
27:cd:1f:d3:cf:62:e4:a7:bf:c3:96:8b:5f:af:9f:
54:b3:9b:61:8d:42:05:f4:c1:4c:11:ff:83:9f:6c:
6d:34:67:7d:4c:90:e5:86:7a:c9:e9:f4:c9:58:64:
9e:fb:f5:85:fe:53:a9:61:39:50:c1:25:be:96:b6:
6f:e0:b2:3f:73:cd:5d:8a:c4:03:de:7b:41:90:7c:
f2:1d:17:19:fc:ca:43:16:9a:a9:9c:a7:28:71:80:
a0:de:5d:aa:0c:9e:ca:5c:87:f7:d9:dd:f8:79:84:
c5:77:17:68:84:d0:56:78:81:00:ff:d8:44:f7:36:
c2:f4:94:ea:38:04:b6:f9:d0:e9:f3:fc:19:f1:f9:
ee:1b:00:90:4d:28:e0:6e:eb:96:26:7c:e0:f6:7b:
1e:6d:77:cc:dd:7c:59:84:7c:33:a9:38:de:c3:ab:
8a:70:8c:f1:a5:dd:ae:af:8d:15:d1:6b:3c:e2:a4:
98:46:26:f7:d5:58:8d:e9:1a:c4:b6:b8:2b:a2:a1:
3c:14:9c:e3:e3:05:9b:f3:c5:6f:bd:86:eb:99:35:
61:57:7d:25:eb:de:2e:c9:84:b5:a0:fa:48:f7:65:
57:ad:33:c8:42:ed:f0:ed:a1:fb:a4:28:6a:5c:6d:
44:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:31:08:60:A4:04:83:ED:DC:73:89:F2:A2:F7:53:11:56:57:23:CE
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/DTEIYKQEg-3cc4nyovdTEVZXI84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.17.97.0/24
Signature Algorithm: sha256WithRSAEncryption
63:7e:d5:05:35:ec:eb:6f:3f:7a:b2:80:d3:73:be:db:4e:70:
b9:87:bc:41:a3:b8:fb:e6:df:0f:fb:cc:21:03:0d:11:c2:b8:
61:aa:4a:98:ea:70:87:4a:97:fe:f7:f8:18:15:d7:75:3f:06:
17:68:8c:51:6d:37:4c:07:35:7b:49:9a:53:a0:d7:d9:0f:ae:
fb:c9:49:23:96:da:2b:d0:01:ed:38:17:1d:86:de:dd:51:64:
63:09:4d:3e:03:3b:83:a4:bb:ea:e0:77:62:dd:79:f3:56:47:
61:5c:ad:62:c1:c8:dc:30:86:68:e9:55:a0:4e:e8:61:e1:42:
06:48:58:b7:6d:bd:5c:40:a4:af:f5:36:5b:76:bf:8d:cb:9b:
72:09:88:7a:e1:d5:5c:55:fc:fe:5b:ee:c4:43:67:9c:e2:9d:
55:ed:4c:49:70:d6:f0:f6:74:2d:f8:b6:12:89:6b:fe:02:8f:
c7:b2:2a:ab:9a:20:6a:83:51:b5:6d:a0:e5:1d:f2:ff:e4:e3:
03:52:f7:c1:45:3f:00:4a:df:57:17:3b:b6:38:11:9e:aa:4e:
1b:d0:f0:1c:54:d2:a9:01:f6:1c:10:ef:38:10:c1:55:ab:08:
67:d8:b5:ae:57:7d:69:51:ee:75:36:46:98:c6:92:b4:ed:c9:
1f:d6:40:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:27:41 2026 by rpki-client