Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/pjCkQXuBbqOHzoKD1mw-qrFiWGY.roa
File: pjCkQXuBbqOHzoKD1mw-qrFiWGY.roa (raw, json)
Hash identifier: MiX/u7zxhzpsdUN3cx+sdMgoTiE427DJRykzUPzL3BI=
Subject key identifier: A6:30:A4:41:7B:81:6E:A3:87:CE:82:83:D6:6C:3E:AA:B1:62:58:66
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 019809CCEDC97D0EE6EC0427B040E5F25526
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/pjCkQXuBbqOHzoKD1mw-qrFiWGY.roa
Signing time: Mon 14 Jul 2025 16:38:01 +0000
ROA not before: Mon 14 Jul 2025 16:38:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62390
IP address blocks: 103.75.68.0/24 maxlen: 24
103.75.69.0/24 maxlen: 24
103.75.70.0/24 maxlen: 24
103.75.71.0/24 maxlen: 24
103.76.128.0/24 maxlen: 24
103.76.129.0/24 maxlen: 24
103.76.130.0/24 maxlen: 24
103.76.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 10:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:cc:ed:c9:7d:0e:e6:ec:04:27:b0:40:e5:f2:55:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: Jul 14 16:38:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a630a4417b816ea387ce8283d66c3eaab1625866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:91:65:a2:45:1d:fc:f2:2e:aa:19:79:5e:
b9:8c:77:49:86:f9:d1:d7:8a:c2:86:99:7f:83:39:
fe:0d:98:70:bc:a9:f3:9f:7c:cb:e4:32:64:bf:b3:
65:72:b3:17:23:9c:60:c2:bd:b5:e7:c1:13:fb:68:
2b:3d:a1:3a:ec:8f:2c:57:e2:30:bc:55:de:41:87:
9a:7a:53:d7:97:f3:39:a6:85:f0:5b:66:44:e2:1e:
09:96:09:1e:61:1a:66:ae:4f:d5:77:45:d7:3f:ca:
0a:1c:33:62:19:a6:c2:62:a5:9a:fd:c1:f9:53:82:
54:de:cb:ab:6b:07:69:87:f5:b1:9f:8f:a6:50:3a:
f0:af:a3:ad:a5:2f:b3:ab:e2:86:eb:e9:ad:56:f2:
04:35:fe:aa:40:4d:a6:00:21:e4:36:14:cb:e3:c4:
1e:00:e4:cb:d9:cc:fa:76:b8:82:4b:20:6c:ba:f2:
01:3f:5b:13:46:fd:7b:e8:3e:67:00:95:4d:79:2f:
6a:af:b2:27:04:99:25:62:83:1b:b1:fb:ea:14:8f:
50:c3:b3:1f:c8:db:06:ed:a0:be:c9:b1:f6:78:a0:
94:b6:1e:f9:77:16:2d:10:bf:9c:32:00:f9:dc:b8:
2f:f1:fb:4c:b0:4c:00:56:8d:8b:fb:ab:74:84:a1:
51:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:30:A4:41:7B:81:6E:A3:87:CE:82:83:D6:6C:3E:AA:B1:62:58:66
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/pjCkQXuBbqOHzoKD1mw-qrFiWGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.75.68.0/22
103.76.128.0/22
Signature Algorithm: sha256WithRSAEncryption
68:52:5b:33:7f:3a:e3:2b:1b:6e:0f:26:2d:8f:ef:93:89:6c:
b6:4f:27:08:57:d2:57:d1:a3:2a:17:36:39:01:9e:3e:7d:52:
8b:c8:c5:01:64:ab:f8:17:ee:3b:13:91:46:54:a0:45:aa:f6:
b2:2a:d6:96:c0:d6:3a:bb:f7:ba:7e:9d:96:be:06:8b:3c:d5:
d2:ec:c9:dc:0f:45:f3:e6:91:15:2e:1f:a1:73:ea:bc:95:24:
39:ad:29:65:31:a8:58:6f:b4:41:e9:d1:6b:94:ee:ab:bd:1e:
8d:f3:49:43:cd:91:23:73:81:54:15:14:48:4f:28:01:f3:26:
fc:c5:a9:5c:e7:75:05:db:62:51:9a:e6:c0:f7:4f:21:a0:c1:
ab:d7:c3:f6:c1:0f:86:50:df:3e:4c:0a:4c:cc:42:16:26:ee:
0b:47:92:d0:ff:3f:3e:71:f5:06:53:bd:42:b5:f1:14:9d:8c:
f2:cc:7c:cb:4a:f4:df:ca:36:8e:ac:ad:41:16:d2:1f:4f:82:
8d:6b:b9:01:3f:da:f6:52:24:e1:02:8a:06:b5:28:98:30:f1:
9e:17:fa:88:61:90:8f:28:75:3d:cf:86:37:c8:d4:79:c9:c8:
9a:5a:62:73:e0:6e:04:55:68:a3:28:82:69:c2:55:f4:43:67:
f8:25:ea:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:05:33 2025 by rpki-client