Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/Z6T-mH64Ktjyv15PrCDxC1HFCdI.roa
File: Z6T-mH64Ktjyv15PrCDxC1HFCdI.roa (raw, json)
Hash identifier: 3XMoK/THw8/0HobmxoCjCg9LTB+PwSAZm57uiGwgmxc=
Subject key identifier: 67:A4:FE:98:7E:B8:2A:D8:F2:BF:5E:4F:AC:20:F1:0B:51:C5:09:D2
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019C8B5EBC3497F6D9456F85426D7BA1933D
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/Z6T-mH64Ktjyv15PrCDxC1HFCdI.roa
Signing time: Mon 23 Feb 2026 16:39:27 +0000
ROA not before: Mon 23 Feb 2026 16:39:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 984
IP address blocks: 110.34.32.0/24 maxlen: 24
116.204.164.0/24 maxlen: 24
150.107.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8b:5e:bc:34:97:f6:d9:45:6f:85:42:6d:7b:a1:93:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Feb 23 16:39:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67a4fe987eb82ad8f2bf5e4fac20f10b51c509d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:13:cf:2e:94:71:64:3e:ed:c8:37:5a:6a:c0:
0d:57:13:c7:58:98:10:6b:e4:03:0f:dc:40:a5:01:
3d:a8:c4:d6:97:bc:f8:8e:76:e5:08:06:d1:74:1d:
dc:63:61:00:cb:21:57:78:5a:5e:c0:af:9d:47:35:
57:ef:29:d3:75:45:b5:39:30:4f:c6:df:88:0d:7f:
28:a4:4a:90:99:f8:09:f8:9b:56:ea:e7:55:8a:57:
30:25:38:49:8a:92:b7:67:d1:b9:b3:7b:b6:bc:66:
ed:df:7e:c8:a8:3e:d1:7d:fe:04:a7:55:a8:40:0e:
f2:1b:c1:fb:a8:ba:3a:4f:03:ed:87:9a:db:30:67:
5a:00:13:d3:ce:ba:1a:32:c4:b9:50:15:5a:b8:0a:
31:54:71:75:1b:3b:10:b0:c0:5e:45:22:92:1c:2a:
84:c6:46:b9:e5:b3:e6:29:f3:8b:32:23:d7:d9:34:
57:81:ad:35:c7:05:68:46:8b:a5:9c:e6:7b:13:b2:
b7:64:f5:76:93:f1:88:e3:e0:dd:76:5b:08:92:88:
3c:b9:37:46:57:32:0d:bc:43:c0:51:63:86:cc:1e:
35:45:7f:1d:a6:5c:7c:ea:49:c7:5f:38:dd:0a:ee:
b1:c8:da:6a:25:86:9d:b4:32:da:82:ba:bc:4d:33:
9d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A4:FE:98:7E:B8:2A:D8:F2:BF:5E:4F:AC:20:F1:0B:51:C5:09:D2
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/Z6T-mH64Ktjyv15PrCDxC1HFCdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.34.32.0/24
116.204.164.0/24
150.107.49.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:2e:84:55:84:9e:c3:60:81:8b:c6:f7:78:8e:39:a9:6d:2a:
ae:be:de:04:40:02:75:5a:34:21:7d:9a:43:23:cf:77:f7:43:
a1:cf:1d:f4:8c:9d:78:53:4a:5a:79:e1:66:46:6b:c7:ee:32:
e6:b2:ca:52:ae:31:29:20:93:31:b7:d1:89:4d:70:a2:35:27:
95:48:7f:e2:b3:d7:92:d3:8b:2e:62:bc:26:58:a6:8e:9d:a0:
dc:86:52:9d:ea:d2:4b:f8:fc:d1:75:12:86:23:27:a5:39:ce:
92:da:95:d0:c9:37:39:6b:9c:0e:98:50:5d:4e:3d:38:34:c5:
8d:f8:09:d3:a8:a8:ca:a5:67:fa:34:8b:c7:36:2f:35:9c:7f:
c9:2e:65:54:97:f5:56:6d:19:9a:af:2e:5c:6d:37:95:6f:d7:
03:20:55:f3:2b:a3:db:7e:3e:aa:c2:ff:e0:26:03:5a:3c:aa:
df:25:30:18:eb:cb:b8:b5:14:c6:bd:fc:04:e8:27:aa:e8:59:
fe:d7:13:a6:9e:2e:65:69:36:7a:a6:c4:aa:6e:2e:c0:ef:f7:
5c:eb:1a:bd:43:97:d5:98:80:65:bb:d2:14:e4:8f:93:0c:68:
98:d0:e0:a9:c4:7d:07:a5:7c:5e:b7:4f:d1:10:64:7f:a5:79:
ea:1b:92:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:43:17 2026 by rpki-client