Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/yq4mDy7IWiKa_jUZsF8HmOo9YAA.roa
File: yq4mDy7IWiKa_jUZsF8HmOo9YAA.roa (raw, json)
Hash identifier: D7e3OOFi7lIh2fyesD48w9fTpDFZydPZVUW+H+QSZ9A=
Subject key identifier: CA:AE:26:0F:2E:C8:5A:22:9A:FE:35:19:B0:5F:07:98:EA:3D:60:00
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 0197D431CB45144E7343EE19B1724D771B5A
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/yq4mDy7IWiKa_jUZsF8HmOo9YAA.roa
Signing time: Fri 04 Jul 2025 06:48:42 +0000
ROA not before: Fri 04 Jul 2025 06:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202015
IP address blocks: 103.124.84.0/22 maxlen: 22
103.144.160.0/23 maxlen: 23
103.149.130.0/23 maxlen: 23
103.228.84.0/22 maxlen: 22
139.5.20.0/23 maxlen: 23
209.40.216.0/21 maxlen: 21
209.92.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:31:cb:45:14:4e:73:43:ee:19:b1:72:4d:77:1b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Jul 4 06:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=caae260f2ec85a229afe3519b05f0798ea3d6000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:95:5c:b2:6f:f5:8b:b7:f2:a5:09:bf:12:c8:
cc:00:de:38:d1:04:1a:41:73:8a:97:b1:57:a5:ab:
c4:d0:29:19:7a:e1:34:4e:9d:e8:89:f2:23:b0:a9:
ea:81:34:71:67:76:6e:94:c8:e6:27:bb:ca:2d:0d:
9d:51:dd:4b:0c:72:81:3f:c6:52:93:30:14:fe:10:
5e:1a:86:37:b5:2c:11:6e:8c:78:fc:12:59:06:fe:
ea:c0:2c:5d:53:af:48:17:de:2b:31:e1:6c:f0:f7:
01:7a:f9:c6:6b:86:7d:bf:0e:c3:d5:23:4f:28:ce:
09:5a:75:40:93:08:33:8f:ad:c2:37:ee:fb:c2:ef:
1f:27:3e:2a:7b:cb:87:b1:be:bf:f9:1d:30:22:1a:
a8:56:c2:56:73:53:fe:f0:e3:46:39:69:6c:a5:b1:
a4:16:e6:77:42:24:c5:72:05:fe:82:9f:2f:29:46:
cb:fd:7a:aa:16:78:88:f2:0a:25:5d:36:98:f2:21:
f7:a9:71:5e:59:ed:d0:72:20:01:44:fe:29:bc:0d:
fa:e6:18:fa:34:9b:4b:88:c1:7c:34:7a:bb:34:98:
18:4d:51:25:85:1c:0a:90:3b:71:26:d2:d3:e5:50:
92:3a:f5:aa:5c:67:e8:aa:7b:de:fe:88:d7:11:28:
fa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AE:26:0F:2E:C8:5A:22:9A:FE:35:19:B0:5F:07:98:EA:3D:60:00
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/yq4mDy7IWiKa_jUZsF8HmOo9YAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.124.84.0/22
103.144.160.0/23
103.149.130.0/23
103.228.84.0/22
139.5.20.0/23
209.40.216.0/21
209.92.8.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:60:b8:a4:95:e5:61:64:d6:17:ef:29:ae:e6:8b:3a:75:55:
6f:e4:9b:e6:4d:55:98:1f:1e:fa:20:d8:33:ba:a9:8e:83:9a:
ff:33:da:8f:63:36:42:1d:6c:71:9f:82:29:3d:ed:8e:2d:52:
04:0c:1c:a6:46:70:c3:51:0c:e7:a3:d1:7c:97:27:0a:6c:5c:
c3:60:1b:6f:56:dc:ad:1f:36:19:c3:40:26:a8:dc:75:c5:cc:
86:a3:44:90:b0:ca:f5:6a:e6:01:f7:b5:73:53:54:cb:77:bb:
d9:e6:17:6c:d2:b5:b4:c6:1f:72:de:b4:73:98:bb:c9:31:9c:
9d:7d:dc:1e:90:61:f1:cc:b3:f2:eb:98:76:29:63:4e:dd:cd:
21:be:96:9f:cc:0c:0e:6f:c7:6f:2e:98:74:1e:cb:82:13:30:
ff:63:32:39:1d:0f:6b:52:9b:d0:28:8b:5c:b9:b5:cd:f8:54:
6c:fb:e5:6e:e0:11:e2:b1:89:ae:88:a6:54:3c:94:43:12:9a:
ec:cf:2d:38:5e:5a:46:5d:2d:da:44:3a:4a:74:d8:72:b1:0d:
6c:64:a9:c2:2f:4d:ba:52:bf:63:04:78:fa:25:79:96:56:15:
8e:46:46:ed:e3:49:f7:78:49:15:48:a4:81:7f:09:a3:98:13:
97:63:4e:8d
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZfUMctFFE5zQ+4ZsXJNdxtaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMDIxYjI1MjIyMjk5N2JmZTMzYjdlNGIzMTVhYzhkNWUw
Njc5NTQwHhcNMjUwNzA0MDY0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWFlMjYwZjJlYzg1YTIyOWFmZTM1MTliMDVmMDc5OGVhM2Q2MDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25Vcsm/1i7fypQm/EsjMAN440QQa
QXOKl7FXpavE0CkZeuE0Tp3oifIjsKnqgTRxZ3ZulMjmJ7vKLQ2dUd1LDHKBP8ZS
kzAU/hBeGoY3tSwRbox4/BJZBv7qwCxdU69IF94rMeFs8PcBevnGa4Z9vw7D1SNP
KM4JWnVAkwgzj63CN+77wu8fJz4qe8uHsb6/+R0wIhqoVsJWc1P+8ONGOWlspbGk
FuZ3QiTFcgX+gp8vKUbL/XqqFniI8golXTaY8iH3qXFeWe3QciABRP4pvA365hj6
NJtLiMF8NHq7NJgYTVElhRwKkDtxJtLT5VCSOvWqXGfoqnve/ojXESj6XQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFMquJg8uyFoimv41GbBfB5jqPWAAMB8GA1UdIwQY
MBaAFCECGyUiIpl7/jO35LMVrI1eBnlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMt
NmVhYzYyZTYwZGY3LzEveXE0bUR5N0lXaUthX2pVWnNGOEhtT285WUFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC81OTI5NGMtMGYyNC00MGM1LWI1YzMtNmVhYzYyZTYwZGY3
LzEvSVFJYkpTSWltWHYtTTdma3N4V3NqVjRHZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCZ3xUAwQB
Z5CgAwQBZ5WCAwQCZ+RUAwQBiwUUAwQD0SjYAwQD0VwIMA0GCSqGSIb3DQEBCwUA
A4IBAQAqYLikleVhZNYX7ymu5os6dVVv5JvmTVWYHx76INgzuqmOg5r/M9qPYzZC
HWxxn4IpPe2OLVIEDBymRnDDUQzno9F8lycKbFzDYBtvVtytHzYZw0AmqNx1xcyG
o0SQsMr1auYB97VzU1TLd7vZ5hds0rW0xh9y3rRzmLvJMZydfdwekGHxzLPy65h2
KWNO3c0hvpafzAwOb8dvLph0HsuCEzD/YzI5HQ9rUpvQKItcubXN+FRs++Vu4BHi
sYmuiKZUPJRDEprszy04XlpGXS3aRDpKdNhysQ1sZKnCL026Ur9jBHj6JXmWVhWO
Rkbt40n3eEkVSKSBfwmjmBOXY06N
-----END CERTIFICATE-----
Generated at Mon Jul 21 12:36:25 2025 by rpki-client