Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/pVdfXUwosJ8KsorkaZco4tqDBa8.roa
File: pVdfXUwosJ8KsorkaZco4tqDBa8.roa (raw, json)
Hash identifier: Lt1k5lM1qRumIXSyRVec7p+24rwON9jxZ+FAtlLGexw=
Subject key identifier: A5:57:5F:5D:4C:28:B0:9F:0A:B2:8A:E4:69:97:28:E2:DA:83:05:AF
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0198347FC6FD1EEF0573396C985CD50A3730
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/pVdfXUwosJ8KsorkaZco4tqDBa8.roa
Signing time: Tue 22 Jul 2025 23:37:25 +0000
ROA not before: Tue 22 Jul 2025 23:37:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11404
IP address blocks: 103.216.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:7f:c6:fd:1e:ef:05:73:39:6c:98:5c:d5:0a:37:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jul 22 23:37:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5575f5d4c28b09f0ab28ae4699728e2da8305af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:6a:e1:3c:24:4d:90:f8:bc:ed:f3:b5:81:
d2:df:57:1c:26:fc:12:be:50:0c:1c:1a:2b:11:bf:
cc:26:8b:65:55:07:06:c1:0f:2e:df:1b:d6:94:a8:
ca:a3:1e:90:fc:b5:3c:af:6d:d6:e3:11:4a:25:26:
29:1a:41:9b:77:8a:30:33:e9:bf:ff:37:f4:29:38:
69:35:b1:83:61:fe:19:2b:98:ef:1e:14:57:0e:af:
6e:c6:d2:51:89:c9:44:b5:28:1d:81:6c:3e:c3:67:
02:22:a6:79:9d:a4:b9:5f:10:00:f2:af:3a:7b:60:
b5:cc:55:f5:6d:9e:96:2d:3d:c6:81:c5:5f:3b:b1:
28:1e:f3:30:61:4e:d5:76:3c:54:75:39:6e:ae:66:
9c:4c:62:f1:27:ec:60:2d:b7:f4:da:cd:8b:42:f5:
fd:d7:29:14:94:99:73:23:e2:b7:27:57:00:e3:3c:
6a:e4:91:35:5b:2b:45:a1:87:28:97:0b:09:df:c2:
99:f2:d3:04:4d:84:b8:a6:f7:4b:c9:b8:2a:9b:fe:
6b:2f:25:c2:eb:df:f9:a8:83:c4:94:bf:77:95:16:
2b:09:4d:33:32:73:f6:fe:66:22:e6:41:15:c0:bc:
05:e0:5a:ec:9b:1c:96:88:65:23:92:90:1b:33:6c:
49:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:57:5F:5D:4C:28:B0:9F:0A:B2:8A:E4:69:97:28:E2:DA:83:05:AF
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/pVdfXUwosJ8KsorkaZco4tqDBa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.196.0/24
Signature Algorithm: sha256WithRSAEncryption
64:fa:14:90:97:18:af:bb:09:b8:5a:61:9f:61:aa:d8:3f:f3:
a8:73:16:6a:a9:0c:b9:a9:1f:05:e7:47:12:25:f4:30:4d:e4:
a7:58:4f:1c:3e:09:b1:78:a1:9b:33:7d:22:a2:94:18:63:ef:
00:be:25:ea:16:58:79:51:c8:a2:81:a4:67:d3:28:c2:a3:e0:
d1:ac:f5:51:3c:d8:c1:a7:44:84:b1:7f:56:b9:61:ea:1f:12:
b9:26:46:07:96:b1:54:45:5a:a3:72:1d:9a:e2:37:63:35:1c:
5a:59:bb:9b:6c:89:7d:b4:54:74:74:c6:9e:66:1d:44:aa:e9:
7e:61:87:2e:48:f8:a6:a2:bc:94:29:47:24:3f:6c:c9:38:de:
1d:78:bc:e8:a9:9f:7b:28:6b:28:26:0f:30:3b:fa:8d:e5:c0:
61:8f:74:00:8f:35:a5:6c:d1:e9:01:a8:8a:15:8a:4f:1f:59:
5c:1d:ef:90:29:87:e3:d6:f2:3c:fa:e2:36:fe:34:e2:e5:60:
ab:ae:a6:8d:19:2f:af:eb:ce:8e:00:66:c5:ad:06:36:07:57:
b0:9e:1c:e6:f3:b1:53:e4:b8:35:f0:52:df:3d:e9:58:0e:f7:
46:f6:ec:72:53:5b:ce:08:6f:42:9a:df:fd:e6:dd:b9:c8:14:
db:26:f3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 16:05:01 2025 by rpki-client