Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1CGNvxgHDO6dm6E4jY4fdYVjUY8.roa
File: 1CGNvxgHDO6dm6E4jY4fdYVjUY8.roa (raw, json)
Hash identifier: x0c4c482+7FKcUbFXEcrC6RVuOCGbo773k4/KupOic4=
Subject key identifier: D4:21:8D:BF:18:07:0C:EE:9D:9B:A1:38:8D:8E:1F:75:85:63:51:8F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019953624FE2EAE592D8AF83975AB805B79C
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1CGNvxgHDO6dm6E4jY4fdYVjUY8.roa
Signing time: Tue 16 Sep 2025 16:36:15 +0000
ROA not before: Tue 16 Sep 2025 16:36:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 103.245.228.0/24 maxlen: 24
103.245.229.0/24 maxlen: 24
193.124.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:53:62:4f:e2:ea:e5:92:d8:af:83:97:5a:b8:05:b7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 16 16:36:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4218dbf18070cee9d9ba1388d8e1f758563518f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c9:5b:02:61:a5:a6:a5:c4:61:42:02:ca:13:
8a:bb:7c:e0:1b:dc:2b:31:7d:06:05:63:a5:6d:a0:
20:0c:9d:42:4f:cc:5b:0b:a2:22:da:1f:cb:66:dd:
bd:7f:a0:91:3f:6d:16:3b:82:63:7f:e8:31:9c:bb:
55:5f:7c:15:fb:32:ce:64:05:0c:f9:a8:ef:cc:ea:
bf:16:97:e2:95:41:70:ec:df:61:6b:24:41:a3:af:
eb:ad:b1:3b:67:4e:eb:58:ac:f9:f4:e4:91:ea:5d:
2e:7a:a5:05:1f:89:45:52:32:46:54:74:80:3f:ff:
40:d7:d2:57:7d:17:34:4b:d9:37:db:08:6a:e9:29:
e1:d8:8a:27:93:fb:43:56:0c:8b:47:69:ca:4c:b5:
ce:4f:a1:c4:82:02:a1:6c:07:d4:bd:65:82:f2:1b:
5f:67:56:85:df:22:a2:cc:0e:21:f8:b0:62:a5:3c:
89:42:fe:b4:1c:99:38:b8:da:78:cc:04:2e:3e:08:
5f:03:27:a3:3e:87:4a:ae:ca:66:b6:66:ef:26:05:
80:c3:b3:85:64:21:8e:d1:c1:cc:08:26:0d:74:59:
71:35:7b:e4:29:42:02:80:b2:1f:e8:a2:38:aa:12:
6e:4a:11:6a:2d:8a:9b:48:24:e7:ea:0b:ef:8b:22:
97:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:21:8D:BF:18:07:0C:EE:9D:9B:A1:38:8D:8E:1F:75:85:63:51:8F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/1CGNvxgHDO6dm6E4jY4fdYVjUY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.245.228.0/23
193.124.224.0/24
Signature Algorithm: sha256WithRSAEncryption
83:b4:e4:14:95:10:e0:92:58:dc:bf:54:6a:3e:05:ba:f8:c8:
c3:be:38:17:7a:23:b5:ee:bb:c2:95:b5:15:5e:14:be:c7:b6:
e6:c8:c7:01:bc:2f:ab:5d:5a:53:f9:76:d5:20:25:f9:da:02:
2a:8e:63:2a:f2:65:8c:cd:28:ea:0c:3f:d5:3a:a7:c2:50:b0:
27:3a:56:42:b7:1b:29:ab:a2:af:e6:a6:a3:da:a6:c5:8e:01:
40:43:17:eb:ce:e2:bb:eb:00:99:32:75:81:90:32:e8:aa:4a:
88:81:73:81:0d:33:a2:5d:ee:51:25:ff:ce:9a:f1:4c:04:7e:
8f:0c:5d:5f:97:76:54:ad:a4:c2:30:0c:71:2a:1d:dc:62:d4:
d6:44:c1:2b:74:eb:59:c4:46:7d:76:99:11:76:2d:84:91:39:
d9:f3:6c:34:25:25:76:e6:44:76:11:ab:a8:9d:4b:d9:bb:a6:
53:37:ce:dc:22:18:c6:6b:f3:fd:31:0a:26:ab:ae:6c:ae:b7:
0c:8e:00:d9:92:00:40:6d:c4:c8:2d:f9:62:06:2f:d5:24:52:
59:df:bc:5f:22:ad:c0:2d:e1:82:38:88:bf:d0:86:d5:5c:a5:
59:fc:e1:b0:3b:d7:cf:67:b8:83:42:91:ee:4f:66:30:9a:c4:
f5:95:01:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 01:58:05 2025 by rpki-client