Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/BoBPYN3SOSdy3lh1g-WsSMGKS-o.roa
File: BoBPYN3SOSdy3lh1g-WsSMGKS-o.roa (raw, json)
Hash identifier: hsqosdIEll0MiLYkz9TsDKV9j3PS3KS6pU17EuLnFW8=
Subject key identifier: 06:80:4F:60:DD:D2:39:27:72:DE:58:75:83:E5:AC:48:C1:8A:4B:EA
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019809336BF2F85D8AB974D3FFBA87F70D5F
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/BoBPYN3SOSdy3lh1g-WsSMGKS-o.roa
Signing time: Mon 14 Jul 2025 13:50:21 +0000
ROA not before: Mon 14 Jul 2025 13:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 103.82.103.0/24 maxlen: 24
2a0a:9300::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9300:d0::/48 maxlen: 48
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9302:1::/48 maxlen: 48
2a0b:7780::/29 maxlen: 29
2a0c:77c0::/32 maxlen: 32
2a0d:2dc0::/32 maxlen: 32
2a0d:2dc1::/32 maxlen: 32
2a0d:2dc2::/32 maxlen: 32
2a0d:2dc3::/32 maxlen: 32
2a0d:3880::/29 maxlen: 29
2a0e:d603::/32 maxlen: 32
2a0f:7b82::/32 maxlen: 32
2a0f:7b83::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:09:33:6b:f2:f8:5d:8a:b9:74:d3:ff:ba:87:f7:0d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 14 13:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06804f60ddd2392772de587583e5ac48c18a4bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:1d:ee:dd:38:21:61:e1:12:2b:69:f8:15:
46:f1:fb:3e:47:b5:88:21:65:34:34:ba:20:96:1f:
dd:0e:03:e8:88:d4:05:ae:df:f2:47:34:9d:e6:3c:
d1:c9:8f:7e:c4:b2:c8:e9:dc:90:b5:33:fe:51:76:
2f:57:3b:fb:a2:1f:2b:f9:ae:f3:c5:5c:d8:3d:b8:
a1:1d:a0:69:e4:13:ed:a6:d4:3d:d3:7c:03:00:be:
73:9f:d3:f5:55:35:c0:de:e4:ab:8f:2f:f7:a1:c0:
7d:95:5e:5e:1d:5f:da:de:cb:8a:8e:00:c3:ac:97:
ce:87:35:26:cb:80:38:d8:ae:10:a5:16:e4:23:bd:
15:26:83:6b:b6:f0:aa:4e:be:3e:d1:db:65:fc:64:
a9:6a:e0:4d:5d:81:f2:2b:bb:41:04:db:ab:2e:fe:
dc:43:3b:15:28:a0:f8:fb:6d:4c:7d:14:29:26:96:
89:e6:b2:02:13:ba:f5:c2:45:c6:8b:c9:a0:d3:62:
57:35:da:85:85:ee:3b:af:73:e9:12:70:97:86:3e:
1c:aa:5c:1c:49:24:89:32:49:95:7d:3e:94:8a:85:
4b:d3:74:c8:ca:6b:6d:f6:77:05:07:f7:8a:96:08:
a1:c2:56:85:4a:1c:29:d8:0f:f1:67:01:83:7a:49:
ca:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:80:4F:60:DD:D2:39:27:72:DE:58:75:83:E5:AC:48:C1:8A:4B:EA
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/BoBPYN3SOSdy3lh1g-WsSMGKS-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.82.103.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
2a0b:7780::/29
2a0c:77c0::/32
2a0d:2dc0::/30
2a0d:3880::/29
2a0e:d603::/32
2a0f:7b82::/31
Signature Algorithm: sha256WithRSAEncryption
61:d6:0a:2d:99:c2:6f:8b:88:46:7e:6d:c5:85:b7:23:67:22:
89:b3:fe:2d:f6:db:a8:c5:65:d8:42:21:22:5c:f8:d4:f0:5b:
54:18:6f:a1:6b:37:7a:16:14:7e:a8:b1:25:5b:71:00:ab:b7:
84:4e:8b:58:bb:3a:6b:9c:be:e9:01:e9:18:93:57:8b:79:18:
13:c9:ff:e4:8f:e7:78:cf:2d:10:f5:5d:47:c0:7b:be:64:7b:
dc:5b:a9:8c:6d:d1:e2:82:20:a6:78:de:08:b5:9c:d5:6c:dd:
99:4f:f2:75:fe:c4:3a:95:1d:dc:e6:d3:fd:2d:37:aa:9b:e5:
fe:25:f4:21:dc:99:ce:33:12:e4:bb:28:7a:37:5b:62:af:1a:
1c:87:65:15:b3:fe:52:db:80:74:ac:a2:7d:ba:a6:4c:ef:ad:
2d:9d:c2:17:7e:cb:c7:b2:7e:09:15:ed:69:b0:0e:57:3d:21:
3e:23:ad:f9:09:bd:f9:ab:3c:5e:01:0f:cf:6b:d5:b4:10:5c:
2d:ea:2b:b5:ad:e7:04:60:75:d6:25:47:3d:f6:0c:fb:06:eb:
1d:94:d2:6d:e4:12:72:14:a0:7d:e0:e7:a1:bd:b2:81:8d:72:
0b:d2:c3:d9:0e:30:c6:64:7e:c8:07:51:a6:d1:bc:bb:a7:d8:
67:e1:c0:f8
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgISAZgJM2vy+F2KuXTT/7qH9w1fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjUwNzE0MTM1MDIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjgwNGY2MGRkZDIzOTI3NzJkZTU4NzU4M2U1YWM0OGMxOGE0YmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKcd7t04IWHhEitp+BVG8fs+R7WI
IWU0NLoglh/dDgPoiNQFrt/yRzSd5jzRyY9+xLLI6dyQtTP+UXYvVzv7oh8r+a7z
xVzYPbihHaBp5BPtptQ903wDAL5zn9P1VTXA3uSrjy/3ocB9lV5eHV/a3suKjgDD
rJfOhzUmy4A42K4QpRbkI70VJoNrtvCqTr4+0dtl/GSpauBNXYHyK7tBBNurLv7c
QzsVKKD4+21MfRQpJpaJ5rICE7r1wkXGi8mg02JXNdqFhe47r3PpEnCXhj4cqlwc
SSSJMkmVfT6UioVL03TIymtt9ncFB/eKlgihwlaFShwp2A/xZwGDeknKxQIDAQAB
o4ICfDCCAngwHQYDVR0OBBYEFAaAT2Dd0jknct5YdYPlrEjBikvqMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvQm9CUFlOM1NPU2R5M2xoMWctV3NTTUdLUy1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGRBggrBgEFBQcBBwEB/wSBgTB/MAwEAgABMAYDBABnUmcw
bwQCAAIwaQMHACoKkwAAAAMHACoKkwAAAjASAwcEKgqTAADQAwcAKgqTAADSMBAD
BQAqCpMBAwcAKgqTAQACAwUAKgqTAgMFAyoLd4ADBQAqDHfAAwUCKg0twAMFAyoN
OIADBQAqDtYDAwUBKg97gjANBgkqhkiG9w0BAQsFAAOCAQEAYdYKLZnCb4uIRn5t
xYW3I2ciibP+LfbbqMVl2EIhIlz41PBbVBhvoWs3ehYUfqixJVtxAKu3hE6LWLs6
a5y+6QHpGJNXi3kYE8n/5I/neM8tEPVdR8B7vmR73FupjG3R4oIgpnjeCLWc1Wzd
mU/ydf7EOpUd3ObT/S03qpvl/iX0IdyZzjMS5LsoejdbYq8aHIdlFbP+UtuAdKyi
fbqmTO+tLZ3CF37Lx7J+CRXtabAOVz0hPiOt+Qm9+as8XgEPz2vVtBBcLeorta3n
BGB11iVHPfYM+wbrHZTSbeQSchSgfeDnob2ygY1yC9LD2Q4wxmR+yAdRptG8u6fY
Z+HA+A==
-----END CERTIFICATE-----
Generated at Mon Jul 21 07:29:18 2025 by rpki-client