Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/RVm4rdCgdoI668nq8Q9miwJGBGo.roa
File: RVm4rdCgdoI668nq8Q9miwJGBGo.roa (raw, json)
Hash identifier: qtrc2+m3M5DudD2OYj/rcT3g7PyOeBDCehvsJIWl2AQ=
Subject key identifier: 45:59:B8:AD:D0:A0:76:82:3A:EB:C9:EA:F1:0F:66:8B:02:46:04:6A
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01980D6AA274614E1F1FB2FD975E4056ABE7
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/RVm4rdCgdoI668nq8Q9miwJGBGo.roa
Signing time: Tue 15 Jul 2025 09:29:08 +0000
ROA not before: Tue 15 Jul 2025 09:29:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202656
IP address blocks: 103.147.170.0/24 maxlen: 24
103.148.141.0/24 maxlen: 24
103.149.85.0/24 maxlen: 24
103.152.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:6a:a2:74:61:4e:1f:1f:b2:fd:97:5e:40:56:ab:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Jul 15 09:29:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4559b8add0a076823aebc9eaf10f668b0246046a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:5e:e1:e0:28:80:d1:35:3c:fa:30:bb:77:
92:1d:7c:5e:57:51:0c:46:da:e9:e4:30:85:3e:13:
30:92:80:ad:78:6b:a4:cb:67:02:39:35:f5:5c:44:
d0:ff:7f:a7:cc:45:92:f2:e2:11:dd:8a:02:18:92:
ab:61:d0:f0:9a:f1:7f:de:7a:42:0f:89:19:c2:8a:
69:16:fa:c9:af:e7:c3:0c:c4:5f:f4:2f:69:fe:ef:
d6:f9:83:33:6a:e2:fd:74:5e:bf:4c:02:e7:04:5f:
d8:43:d5:0e:38:2d:b9:63:98:a8:c8:cf:65:d1:7b:
c2:ff:f4:ab:83:fc:be:e6:f8:fd:b2:b7:cb:60:05:
ea:47:94:b1:79:f1:42:26:7d:ac:1a:d1:3d:57:a7:
f3:16:f7:dd:93:3b:57:62:c4:2b:c2:33:50:2a:29:
e4:da:e5:8e:6c:54:3e:3f:0c:76:e5:6c:55:6a:58:
4c:12:82:8e:e9:93:48:d5:5f:35:0e:a8:49:9d:91:
15:39:27:f7:ad:16:3e:24:2b:23:56:34:e8:44:b2:
ba:b4:40:f7:1c:75:bc:c3:84:af:e8:f4:2d:bb:b9:
48:47:8f:60:e7:ab:aa:05:b8:fb:1e:e4:63:fa:e7:
86:da:5a:37:ef:87:39:c9:fe:9a:b3:83:ac:83:fc:
c5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:59:B8:AD:D0:A0:76:82:3A:EB:C9:EA:F1:0F:66:8B:02:46:04:6A
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/RVm4rdCgdoI668nq8Q9miwJGBGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.170.0/24
103.148.141.0/24
103.149.85.0/24
103.152.175.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:6e:34:6e:3c:65:56:d2:6e:5f:1d:63:76:53:db:a2:5d:d3:
20:2b:02:ea:3d:de:88:01:e1:1c:7a:87:41:8d:bf:03:d5:01:
cd:e9:7f:79:97:74:45:41:35:17:91:f4:30:e7:92:d6:87:12:
ae:dd:c5:f3:e4:5d:69:45:50:ce:c5:39:e5:94:52:94:60:66:
f9:68:9b:52:3e:71:fb:82:64:fb:4b:d6:37:79:ed:5c:7a:c7:
19:74:44:d4:56:f7:08:94:3c:1c:fc:68:cc:20:f9:32:df:ac:
b2:85:fe:93:da:85:25:ea:b6:99:59:5d:a8:1e:93:09:e9:1f:
1a:22:e2:45:95:cb:ea:c2:37:c3:a1:1b:cb:ef:7a:35:34:46:
1c:c7:88:16:07:10:c3:72:66:89:b6:ef:c5:5f:87:b6:76:12:
ab:b8:e2:ef:32:1d:dc:99:41:30:ca:f9:e9:75:60:f4:21:f7:
c5:9f:a4:a5:74:c3:d3:d2:e1:2c:83:70:31:18:ef:1b:9c:fa:
3e:2d:09:89:23:1a:91:0b:9e:9b:38:40:38:a4:09:e5:5c:3e:
7b:2e:56:3f:23:fe:df:9e:e4:3b:81:5e:c6:9a:d7:64:ff:f1:
af:e3:cd:ba:cd:a8:b5:45:b8:a1:0d:c7:ac:67:40:a9:c6:20:
87:c6:6e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 12:29:32 2025 by rpki-client