Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/l8KsXLX85RsayVlk0ttqfDsBncI.roa
File: l8KsXLX85RsayVlk0ttqfDsBncI.roa (raw, json)
Hash identifier: E687cvEfnwSsesEQWoBDfUT4xpbV4WIU4oZTx1AN8BA=
Subject key identifier: 97:C2:AC:5C:B5:FC:E5:1B:1A:C9:59:64:D2:DB:6A:7C:3B:01:9D:C2
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01982897FC0E9BFE9D6D708C524A0EDA051D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/l8KsXLX85RsayVlk0ttqfDsBncI.roa
Signing time: Sun 20 Jul 2025 16:08:25 +0000
ROA not before: Sun 20 Jul 2025 16:08:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151734
IP address blocks: 103.63.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 18:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:97:fc:0e:9b:fe:9d:6d:70:8c:52:4a:0e:da:05:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 20 16:08:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97c2ac5cb5fce51b1ac95964d2db6a7c3b019dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ec:38:de:0c:51:4c:4d:75:d8:e3:75:9d:78:
8b:05:97:51:10:b2:3b:13:16:0d:a1:db:78:18:9f:
f5:38:ab:61:38:9c:2b:d8:fb:cb:a4:8f:ac:fe:90:
06:01:38:ea:f7:4f:51:a6:d5:17:10:e3:e0:22:a2:
71:78:03:63:27:2f:f6:53:9b:98:01:9f:a8:3f:b4:
1c:3f:25:bc:31:39:72:80:ff:3c:c0:ec:fc:72:f3:
54:bb:11:e0:4c:ed:f3:4a:2a:9f:eb:67:c3:1b:84:
b7:c1:65:42:bd:db:f5:6b:42:82:54:ce:b3:af:06:
99:2c:44:d1:46:92:08:9c:db:dd:c6:19:e8:41:98:
44:19:3e:38:8a:62:33:53:eb:48:cd:d4:e4:20:e3:
c0:a1:32:16:a9:de:52:83:0c:d2:9c:29:d0:ac:06:
c0:cc:23:59:68:dd:a6:51:53:54:05:1b:0f:4e:29:
1b:ca:0d:45:97:0f:77:d6:3a:91:41:d0:7e:fa:e1:
78:8f:4a:b7:fb:52:db:48:c4:88:27:b9:c7:4f:e9:
1b:6e:8b:92:0c:b8:cf:6a:93:61:56:db:c4:62:39:
ab:8f:2c:6f:83:12:71:a8:49:fb:d4:37:43:c5:55:
46:7d:56:50:fd:af:75:68:88:17:aa:f6:a4:39:de:
17:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C2:AC:5C:B5:FC:E5:1B:1A:C9:59:64:D2:DB:6A:7C:3B:01:9D:C2
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/l8KsXLX85RsayVlk0ttqfDsBncI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.63.31.0/24
Signature Algorithm: sha256WithRSAEncryption
df:3c:c9:f8:ef:92:8e:d3:9a:a2:41:69:00:15:fa:03:90:fd:
88:ea:95:e2:a4:da:6a:dd:f7:86:4b:fd:fb:8f:d9:ad:47:58:
0d:16:d3:08:7d:2c:01:ce:e4:a1:ed:48:3d:ad:81:1a:31:a4:
c8:96:23:99:83:70:32:08:0a:1c:ac:03:65:50:a7:b6:5b:c7:
fd:94:fd:c2:c0:83:55:a8:30:94:92:e9:36:2e:3b:4c:8e:ef:
1d:5a:50:2c:d9:67:9e:7c:1b:e3:bd:da:31:9f:c1:fc:34:36:
ca:3a:29:ef:64:64:cc:5f:27:ca:06:8a:73:6d:20:97:ec:ea:
a8:34:a7:c8:25:1a:eb:d3:a4:d8:a6:a6:7f:57:f9:a6:71:c6:
84:e9:d2:f6:9f:70:c5:70:7c:c3:dd:a8:ab:a3:be:8d:fc:64:
f2:ad:56:88:01:0e:7b:f3:9c:1e:29:d3:9a:92:0f:65:53:72:
ef:ee:ee:2c:09:3d:9f:d3:da:a4:2f:65:4a:7a:2c:68:0b:f7:
d7:b3:ad:5f:b0:37:da:71:25:ed:4a:cf:5b:ea:3e:6b:78:83:
f9:b3:52:4b:d6:0e:f6:d3:55:8d:a8:0e:28:41:81:9a:3e:62:
08:df:b8:59:cc:53:98:a9:bd:74:a2:4a:39:60:d7:1c:4e:96:
5a:29:95:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:45:24 2025 by rpki-client