Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/TUnjPhJqb6nHWdMSJm2IQNPN7R4.roa
File: TUnjPhJqb6nHWdMSJm2IQNPN7R4.roa (raw, json)
Hash identifier: yclmIClXa122Jcmp1p7RvivtWXCLIncvPj+GO52o/+Q=
Subject key identifier: 4D:49:E3:3E:12:6A:6F:A9:C7:59:D3:12:26:6D:88:40:D3:CD:ED:1E
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 019C198D34CBF8EFF9AEA84873FDDB200F1B
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/TUnjPhJqb6nHWdMSJm2IQNPN7R4.roa
Signing time: Sun 01 Feb 2026 14:13:30 +0000
ROA not before: Sun 01 Feb 2026 14:13:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 103.17.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:19:8d:34:cb:f8:ef:f9:ae:a8:48:73:fd:db:20:0f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Feb 1 14:13:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d49e33e126a6fa9c759d312266d8840d3cded1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:48:81:e0:ca:7e:c8:d2:e6:9a:14:3c:22:
19:50:e2:9f:a7:1a:1d:6b:a9:66:69:63:2e:16:4d:
8b:c4:15:bb:47:1b:62:bd:5e:03:f5:db:92:1e:b6:
74:88:6b:b2:e0:c4:ac:fa:c6:78:74:7d:7a:1c:eb:
45:f7:0f:ca:12:f6:c2:4b:d5:6d:8a:21:18:22:f2:
46:cd:46:b1:50:2c:57:5e:62:d3:c8:db:97:2f:3a:
50:b9:ba:73:d7:c2:2d:1a:ae:a9:7b:fb:bd:f1:8f:
7b:ec:53:8d:f8:37:86:80:f5:df:fd:8f:0b:c8:df:
fc:0a:6f:25:0b:94:8d:6d:7c:18:25:f3:85:95:d0:
46:91:66:3a:16:50:e0:8d:15:d5:65:9e:e0:84:63:
03:d1:55:c1:4d:f3:07:1b:b4:2a:2b:68:e5:76:28:
8e:c2:90:64:ac:fe:03:9d:8f:24:08:7a:c4:c1:04:
36:0e:e0:3b:43:b1:d2:1c:3b:7e:3c:dc:28:b7:a0:
b2:db:dd:f8:23:89:ac:7a:54:e7:89:9f:ff:75:ec:
89:0b:6f:ba:85:8b:20:f5:83:34:9a:ad:03:da:a8:
71:15:90:bc:83:59:9a:3e:76:ee:e9:bb:00:0b:4e:
dc:68:40:fe:27:f4:9d:61:77:ee:99:e9:f2:6e:81:
87:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:49:E3:3E:12:6A:6F:A9:C7:59:D3:12:26:6D:88:40:D3:CD:ED:1E
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/TUnjPhJqb6nHWdMSJm2IQNPN7R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.17.97.0/24
Signature Algorithm: sha256WithRSAEncryption
23:8b:5f:2f:fc:0d:b6:66:b5:23:d3:83:07:0c:3f:8e:27:67:
c9:d3:0f:e0:8d:94:1e:eb:98:81:f8:f9:cf:5c:22:66:e5:f0:
0f:70:14:fd:de:1b:f5:49:44:f1:41:3a:07:da:6c:ff:30:01:
b8:5f:26:6b:b1:75:f9:d5:f7:d7:a8:d2:5f:10:6d:cb:80:5c:
45:4a:36:93:54:36:72:a8:87:51:4b:59:36:8c:cd:5e:78:27:
20:ca:31:b6:92:5e:7e:37:62:89:27:4d:ed:0e:e9:8a:2e:58:
bc:ae:df:82:9f:08:ef:b8:53:61:03:36:6c:38:d4:7c:98:b6:
04:79:a6:89:13:15:51:93:5b:94:f8:07:d9:92:c0:9a:45:29:
cd:b8:7a:74:54:36:0b:5e:0b:35:b3:f8:9c:11:70:8a:52:01:
d8:b1:76:4f:2d:97:c9:7d:e3:e8:6d:7d:3f:2c:78:72:99:db:
60:68:e3:be:44:96:63:3a:f3:04:2e:60:45:69:cc:db:60:7a:
5d:92:a0:10:dd:eb:64:2b:4b:5a:b5:f6:a8:fa:d1:71:c7:1a:
a3:f0:14:f4:f5:f3:d9:43:38:8f:2b:48:53:e3:9a:7d:a7:b3:
12:58:f6:bd:c1:c8:45:48:16:9d:21:e4:5a:b3:3e:f3:25:71:
26:00:97:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZwZjTTL+O/5rqhIc/3bIA8bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjYwMjAxMTQxMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDQ5ZTMzZTEyNmE2ZmE5Yzc1OWQzMTIyNjZkODg0MGQzY2RlZDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxBIgeDKfsjS5poUPCIZUOKfpxod
a6lmaWMuFk2LxBW7RxtivV4D9duSHrZ0iGuy4MSs+sZ4dH16HOtF9w/KEvbCS9Vt
iiEYIvJGzUaxUCxXXmLTyNuXLzpQubpz18ItGq6pe/u98Y977FON+DeGgPXf/Y8L
yN/8Cm8lC5SNbXwYJfOFldBGkWY6FlDgjRXVZZ7ghGMD0VXBTfMHG7QqK2jldiiO
wpBkrP4DnY8kCHrEwQQ2DuA7Q7HSHDt+PNwot6Cy2934I4mselTniZ//deyJC2+6
hYsg9YM0mq0D2qhxFZC8g1maPnbu6bsAC07caED+J/SdYXfumenyboGH1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE1J4z4Sam+px1nTEiZtiEDTze0eMB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvVFVualBoSnFiNm5IV2RNU0ptMklRTlBON1I0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxFhMA0G
CSqGSIb3DQEBCwUAA4IBAQAji18v/A22ZrUj04MHDD+OJ2fJ0w/gjZQe65iB+PnP
XCJm5fAPcBT93hv1SUTxQToH2mz/MAG4XyZrsXX51ffXqNJfEG3LgFxFSjaTVDZy
qIdRS1k2jM1eeCcgyjG2kl5+N2KJJ03tDumKLli8rt+CnwjvuFNhAzZsONR8mLYE
eaaJExVRk1uU+AfZksCaRSnNuHp0VDYLXgs1s/icEXCKUgHYsXZPLZfJfePobX0/
LHhymdtgaOO+RJZjOvMELmBFaczbYHpdkqAQ3etkK0tatfao+tFxxxqj8BT09fPZ
QziPK0hT45p9p7MSWPa9wchFSBadIeRasz7zJXEmAJe+
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:47:57 2026 by rpki-client