Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/QhrrCdJtzdJX_c12vE-ZQ8Da7YY.roa
File: QhrrCdJtzdJX_c12vE-ZQ8Da7YY.roa (raw, json)
Hash identifier: rkVqPs1fexqZNRh0F63HT4hXiYiSmw86Y4ULqhqeko0=
Subject key identifier: 42:1A:EB:09:D2:6D:CD:D2:57:FD:CD:76:BC:4F:99:43:C0:DA:ED:86
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 0197CF30F9987845F8DB6358365CD3BF7460
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/QhrrCdJtzdJX_c12vE-ZQ8Da7YY.roa
Signing time: Thu 03 Jul 2025 07:29:42 +0000
ROA not before: Thu 03 Jul 2025 07:29:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 103.69.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:30:f9:98:78:45:f8:db:63:58:36:5c:d3:bf:74:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Jul 3 07:29:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=421aeb09d26dcdd257fdcd76bc4f9943c0daed86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:22:75:7d:8d:af:41:51:31:45:a6:71:64:1c:
96:b2:a6:08:b8:37:12:86:fe:59:92:1d:e5:01:37:
34:c2:7a:0f:83:ed:3d:75:65:13:6c:2a:6c:40:d3:
e3:1b:5e:67:26:2b:c1:8b:be:ac:a1:db:cf:cb:59:
8f:fc:4d:6b:74:66:3b:db:de:ea:53:cb:4f:0b:bc:
58:16:0b:31:16:f6:bf:2a:9a:62:96:b9:f7:5a:4b:
05:99:5c:e0:8a:03:7b:e4:45:34:d2:0a:92:bb:d3:
ef:41:f6:4a:ce:b5:17:91:0a:a9:ff:34:d1:b2:f9:
41:82:34:63:e5:0a:61:7f:57:5d:33:f8:4b:f3:5e:
e9:2c:43:4e:e2:64:04:a1:73:5b:dd:48:ae:06:00:
31:04:45:f7:8a:65:43:d9:8e:9f:69:98:fb:ab:6b:
de:f6:a1:16:34:40:0b:fe:c2:38:c2:af:dd:67:35:
d5:8b:3c:26:3c:4e:4d:c6:8d:2f:58:14:43:40:3b:
07:d3:f8:25:6f:58:ec:38:93:21:ba:40:b2:1e:74:
f6:cb:ee:55:c6:d4:ff:c0:d5:21:8b:0b:53:2a:c3:
66:a0:5b:f7:2a:f7:24:b9:7b:c5:de:61:b1:9d:46:
c9:2c:d2:a6:4b:09:20:e7:49:51:10:3b:94:24:03:
58:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1A:EB:09:D2:6D:CD:D2:57:FD:CD:76:BC:4F:99:43:C0:DA:ED:86
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/QhrrCdJtzdJX_c12vE-ZQ8Da7YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.69.226.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:02:6d:72:7f:1c:4b:11:d0:e2:ee:a4:31:5c:1e:f4:16:23:
68:82:06:88:ce:54:66:a7:c1:2e:40:0d:2e:e2:b7:43:9b:45:
fb:d3:7d:c0:b8:a0:1c:d7:a4:c3:4b:53:e7:31:a4:79:01:fd:
be:8b:0c:67:b5:08:92:34:1d:a1:62:d5:96:3c:8b:0c:52:e0:
79:f8:7c:09:6a:17:25:a5:54:7c:65:ab:00:70:33:cc:29:ba:
cd:f3:e6:f8:38:4f:83:b1:28:89:77:9f:4f:55:31:fa:a2:93:
a6:5f:a0:fa:1a:74:45:2e:2e:57:b1:af:1b:80:1d:85:cf:8f:
70:5a:c7:c6:6c:59:86:69:eb:50:46:06:b9:15:c1:eb:29:e0:
f1:c9:57:a6:22:73:7e:e0:6f:ec:5c:42:75:0f:16:10:c2:05:
78:0e:78:35:28:6b:75:55:5b:47:72:a1:b2:4f:28:04:0f:53:
25:64:3b:ee:7e:44:80:4b:6e:ad:bc:0c:79:98:eb:93:be:ed:
a9:dc:c6:0f:53:51:f6:8b:07:97:c6:04:5e:e6:bf:89:d7:e6:
8f:4d:e0:6a:2b:f4:4c:27:a9:74:15:e4:0b:70:e8:a8:b3:69:
47:43:ac:27:16:d1:80:e7:40:62:fb:d8:80:fd:b4:40:1e:b1:
45:1a:e5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:22:28 2025 by rpki-client