Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/muJ6BoKN6UJKjXIiMD_vSPffAQs.roa
File: muJ6BoKN6UJKjXIiMD_vSPffAQs.roa (raw, json)
Hash identifier: Trtl5skBlLwn8vYaSomOWXsELEFXr89fuz0Ec3SlFmU=
Subject key identifier: 9A:E2:7A:06:82:8D:E9:42:4A:8D:72:22:30:3F:EF:48:F7:DF:01:0B
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 0197F61DF8FB0CF63FA5DF8562656C870CC0
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/muJ6BoKN6UJKjXIiMD_vSPffAQs.roa
Signing time: Thu 10 Jul 2025 20:54:08 +0000
ROA not before: Thu 10 Jul 2025 20:54:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44382
IP address blocks: 103.83.86.0/24 maxlen: 24
103.83.87.0/24 maxlen: 24
203.202.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f6:1d:f8:fb:0c:f6:3f:a5:df:85:62:65:6c:87:0c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Jul 10 20:54:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ae27a06828de9424a8d7222303fef48f7df010b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e1:f1:72:7d:e3:d9:01:78:ce:6c:21:e2:50:
bb:71:f7:57:4f:65:98:b2:eb:55:d4:40:b6:53:2c:
28:49:7a:07:6c:83:6c:68:03:d4:24:87:e6:f2:f6:
b0:95:7b:5c:ab:af:f5:9d:98:d7:8b:bd:2c:c8:db:
c8:e6:fa:61:19:ca:0a:f5:64:b1:68:c4:9a:71:32:
fc:9b:af:01:3e:38:72:dc:62:70:49:0e:06:d9:1f:
60:5b:a8:f9:80:a3:46:c7:16:5a:c7:aa:97:d0:48:
6a:14:b5:de:a2:e6:12:fa:22:b1:04:b5:e2:7b:74:
f1:c9:ad:64:6d:52:42:5e:e8:a1:2f:ef:1b:0b:96:
ac:77:cb:8a:6e:74:48:88:25:42:cd:ca:6e:48:81:
14:cd:53:b5:d4:6d:91:a9:15:e9:91:c9:3d:3c:04:
c9:d3:ed:70:82:14:c6:d8:82:a1:2c:37:ec:22:3d:
32:a7:23:71:a9:18:8e:b0:cf:f5:93:37:7a:96:2c:
be:56:04:b4:b6:7b:af:a5:99:36:b2:41:57:0c:94:
b8:81:a5:25:38:f2:2c:97:36:4d:4f:e4:73:b1:f4:
2e:30:0f:43:46:99:60:03:8f:cc:3e:15:e3:70:fd:
46:16:06:3c:25:08:27:fd:9c:94:c6:bf:b8:fe:9a:
c3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E2:7A:06:82:8D:E9:42:4A:8D:72:22:30:3F:EF:48:F7:DF:01:0B
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/muJ6BoKN6UJKjXIiMD_vSPffAQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.83.86.0/23
203.202.232.0/24
Signature Algorithm: sha256WithRSAEncryption
60:95:26:0c:06:ea:c2:7a:27:59:19:4f:50:a4:e7:19:a0:50:
e1:b8:0f:cc:4c:a9:d0:15:5b:b1:58:e9:da:16:5f:00:7d:a8:
cb:6b:6b:80:80:41:ec:79:46:ed:87:fe:29:d7:6d:3a:be:7f:
31:2b:34:21:a0:70:24:c7:e7:57:02:85:2f:54:ba:75:ba:55:
8c:f3:7e:55:75:e1:54:cb:8f:d6:76:ff:97:5a:54:65:78:4a:
95:31:53:f2:c2:bc:31:70:bd:ce:a4:b0:c0:8f:cd:3c:89:53:
e8:24:ea:6b:3e:eb:a7:3d:74:32:e4:2b:0d:96:6e:65:ff:27:
1a:9e:9e:74:f3:22:00:62:9f:b0:d7:49:5c:86:86:2c:40:81:
e1:da:c1:61:70:a5:0c:5a:0c:5a:b4:71:b5:d2:55:28:0f:26:
d9:72:75:a4:ef:ec:2e:22:c7:ed:f3:6e:7c:95:29:55:98:8a:
a2:03:64:ed:af:64:df:bc:0d:73:24:44:1a:e4:0f:0c:02:9d:
12:05:1b:3e:88:ef:37:6b:e7:2f:78:b5:42:a9:ae:52:f3:03:
dc:49:f9:f7:10:1a:ac:85:bf:e5:c0:c3:f2:f3:e1:e9:96:70:
00:73:bb:f5:1f:fa:c4:14:a0:7b:99:2f:f1:59:97:e1:35:1d:
16:80:7b:ad
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZf2Hfj7DPY/pd+FYmVshwzAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz
ZWRmNGIwHhcNMjUwNzEwMjA1NDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWUyN2EwNjgyOGRlOTQyNGE4ZDcyMjIzMDNmZWY0OGY3ZGYwMTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8eHxcn3j2QF4zmwh4lC7cfdXT2WY
sutV1EC2UywoSXoHbINsaAPUJIfm8vawlXtcq6/1nZjXi70syNvI5vphGcoK9WSx
aMSacTL8m68BPjhy3GJwSQ4G2R9gW6j5gKNGxxZax6qX0EhqFLXeouYS+iKxBLXi
e3Txya1kbVJCXuihL+8bC5asd8uKbnRIiCVCzcpuSIEUzVO11G2RqRXpkck9PATJ
0+1wghTG2IKhLDfsIj0ypyNxqRiOsM/1kzd6liy+VgS0tnuvpZk2skFXDJS4gaUl
OPIslzZNT+RzsfQuMA9DRplgA4/MPhXjcP1GFgY8JQgn/ZyUxr+4/prD1wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJriegaCjelCSo1yIjA/70j33wELMB8GA1UdIwQY
MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt
OTQ0OTk1N2ZkNWE1LzEvbXVKNkJvS042VUpLalhJaU1EX3ZTUGZmQVFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1
LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBZ1NWAwQA
y8roMA0GCSqGSIb3DQEBCwUAA4IBAQBglSYMBurCeidZGU9QpOcZoFDhuA/MTKnQ
FVuxWOnaFl8AfajLa2uAgEHseUbth/4p1206vn8xKzQhoHAkx+dXAoUvVLp1ulWM
835VdeFUy4/Wdv+XWlRleEqVMVPywrwxcL3OpLDAj808iVPoJOprPuunPXQy5CsN
lm5l/ycanp508yIAYp+w10lchoYsQIHh2sFhcKUMWgxatHG10lUoDybZcnWk7+wu
Isft8258lSlVmIqiA2Ttr2TfvA1zJEQa5A8MAp0SBRs+iO83a+cveLVCqa5S8wPc
Sfn3EBqshb/lwMPy8+HplnAAc7v1H/rEFKB7mS/xWZfhNR0WgHut
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:50:54 2025 by rpki-client