Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/v9Xlm2rDTZ6ib_VjzhOAZ7-bwPE.roa
File: v9Xlm2rDTZ6ib_VjzhOAZ7-bwPE.roa (raw, json)
Hash identifier: BUEqyv7kTMRP5lPlyOHoLSP3K1Ooe4VseIGvi3kCIQo=
Subject key identifier: BF:D5:E5:9B:6A:C3:4D:9E:A2:6F:F5:63:CE:13:80:67:BF:9B:C0:F1
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 0197D62ED52C614D43A99DC0792C9C640ADF
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/v9Xlm2rDTZ6ib_VjzhOAZ7-bwPE.roa
Signing time: Fri 04 Jul 2025 16:04:42 +0000
ROA not before: Fri 04 Jul 2025 16:04:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36137
IP address blocks: 103.17.202.0/24 maxlen: 24
103.17.203.0/24 maxlen: 24
103.86.36.0/23 maxlen: 24
103.124.156.0/23 maxlen: 24
110.34.32.0/24 maxlen: 24
110.34.37.0/24 maxlen: 24
110.34.38.0/24 maxlen: 24
116.204.166.0/24 maxlen: 24
222.167.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d6:2e:d5:2c:61:4d:43:a9:9d:c0:79:2c:9c:64:0a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jul 4 16:04:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfd5e59b6ac34d9ea26ff563ce138067bf9bc0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bd:e1:4b:41:0d:dd:5f:59:c5:ba:b0:ea:7f:
b4:2f:db:c3:f3:2b:18:e8:16:cb:28:26:4a:0c:f5:
78:22:04:c9:e0:fa:55:c0:dd:18:d8:a8:f5:a7:55:
08:56:f4:7e:8f:ec:ee:c1:22:11:04:fb:32:3f:70:
a6:88:60:20:b4:1c:8c:38:1e:a7:18:6a:48:98:45:
d7:d2:5d:01:5a:81:6a:a2:e1:65:c5:b8:4b:38:b5:
16:e5:0b:2e:87:e3:97:97:93:59:b8:03:94:08:f0:
79:c6:29:bb:63:8f:ea:89:2a:83:24:ba:7c:b9:11:
db:bd:10:c8:a2:85:7e:df:86:e4:bb:7d:9a:7e:2f:
6c:5c:6e:ad:ad:c3:b1:92:18:41:ad:22:71:7d:c8:
6f:88:25:43:30:07:28:65:9c:c2:19:fe:46:cf:9b:
ae:76:f7:6a:77:10:25:20:24:d6:a3:fe:c7:e1:2b:
5d:ec:f5:d6:c1:3c:bb:cf:ff:35:80:b1:1c:8a:2b:
c7:6f:ce:18:b0:81:1b:a4:a1:be:d6:50:8d:49:44:
94:0f:17:49:c1:34:22:9a:28:59:88:15:a4:1a:c3:
e3:31:20:d8:f4:7b:62:86:cf:55:d7:e4:8a:30:41:
19:e7:34:c5:7c:9d:b3:c1:76:fe:cb:63:e5:7e:9b:
b0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D5:E5:9B:6A:C3:4D:9E:A2:6F:F5:63:CE:13:80:67:BF:9B:C0:F1
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/v9Xlm2rDTZ6ib_VjzhOAZ7-bwPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.17.202.0/23
103.86.36.0/23
103.124.156.0/23
110.34.32.0/24
110.34.37.0-110.34.38.255
116.204.166.0/24
222.167.208.0/21
Signature Algorithm: sha256WithRSAEncryption
32:96:39:c1:d1:ac:f9:7e:ca:78:c0:c9:cb:fc:16:c8:f9:44:
35:6e:94:29:4d:14:3f:df:a0:25:85:5e:74:a6:c5:8e:71:23:
20:22:81:dc:05:33:5f:69:3b:43:88:05:d3:f1:49:c1:a4:2e:
2a:d7:3e:58:76:6c:71:95:e4:14:25:64:36:55:8a:6a:c2:36:
75:2c:8f:f2:62:32:5e:ac:ce:2a:7e:f0:95:cb:82:15:54:f6:
89:67:5c:62:57:fa:45:fe:82:40:fb:4a:86:29:7f:36:fa:db:
5f:97:ca:f2:fe:98:93:31:e6:09:8d:00:3f:83:3f:f5:1c:56:
7b:2c:a8:07:6c:f2:64:f6:86:57:46:79:15:35:47:3c:5a:ae:
93:e4:e8:48:78:e4:bb:d8:9a:33:00:e2:83:3c:53:1f:92:ab:
92:3e:e2:0c:28:76:cf:93:13:65:98:a0:b0:77:4d:47:c7:23:
5e:db:34:5e:5c:59:ba:90:49:b3:df:51:18:03:9f:1d:30:2d:
97:e6:80:14:b6:ca:86:ef:a8:2a:ca:1d:a2:3b:3f:66:69:b9:
93:e8:02:94:6b:1a:5d:e7:26:e4:83:41:22:2f:fd:02:64:3d:
b4:5b:f6:2d:ea:7b:45:d3:08:db:60:8b:f5:25:23:5c:60:7f:
7e:a0:97:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 08:09:38 2025 by rpki-client