Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/KkcDPt-mqrzjIGcK9CxKo7l2cCw.roa
File: KkcDPt-mqrzjIGcK9CxKo7l2cCw.roa (raw, json)
Hash identifier: E08Kwyt2URP4nbJ9ZFQtZH8fcrUoxrxOEFuigCOwmfI=
Subject key identifier: 2A:47:03:3E:DF:A6:AA:BC:E3:20:67:0A:F4:2C:4A:A3:B9:76:70:2C
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0198EB35BDDC9DF6FF2357AD48B9EFF88C08
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/KkcDPt-mqrzjIGcK9CxKo7l2cCw.roa
Signing time: Wed 27 Aug 2025 11:07:04 +0000
ROA not before: Wed 27 Aug 2025 11:07:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 103.74.93.0/24 maxlen: 24
103.74.94.0/24 maxlen: 24
103.74.95.0/24 maxlen: 24
103.88.240.0/24 maxlen: 24
103.88.241.0/24 maxlen: 24
103.88.242.0/24 maxlen: 24
103.88.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:eb:35:bd:dc:9d:f6:ff:23:57:ad:48:b9:ef:f8:8c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Aug 27 11:07:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a47033edfa6aabce320670af42c4aa3b976702c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cb:e7:e7:ae:7f:81:26:7b:4b:fb:5c:e2:01:
a1:2a:43:99:f0:52:bb:dd:af:f4:df:bb:ed:6c:99:
49:5b:f0:aa:59:9a:7e:ac:00:d3:13:ea:e8:aa:98:
91:6c:3d:9e:43:7e:94:6f:fb:ae:43:00:02:ae:d9:
85:de:e8:b8:08:42:75:af:58:cb:3b:57:5e:6d:ac:
e7:57:fa:a6:51:7d:0f:99:84:d5:a1:93:6e:18:a2:
a9:3e:f1:90:f8:5c:7d:13:00:af:6f:6b:c3:9c:a5:
58:72:cc:de:52:eb:49:17:b4:94:b7:13:f7:96:88:
86:43:49:d7:b0:4e:6e:ae:63:9a:eb:16:08:70:50:
c3:39:a4:ff:f1:f4:56:3b:6a:4e:85:57:78:37:70:
03:0a:ae:ba:cc:4b:29:78:1d:cb:0b:f5:c7:0b:cb:
e5:eb:e3:ab:52:a4:4b:41:f0:ae:dc:a1:62:d7:af:
59:20:92:65:02:2f:a4:e7:15:e3:fb:30:1a:5a:f8:
6e:aa:6a:5a:ff:62:2b:f1:dd:8a:84:00:75:51:22:
9e:c9:78:76:77:af:34:83:b0:56:03:df:65:c1:6d:
92:46:a5:b9:c3:b8:65:bc:f4:f4:0b:94:2f:3c:97:
2b:02:8b:ea:c5:93:1b:b3:aa:7b:83:eb:be:b6:e1:
59:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:47:03:3E:DF:A6:AA:BC:E3:20:67:0A:F4:2C:4A:A3:B9:76:70:2C
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/KkcDPt-mqrzjIGcK9CxKo7l2cCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.74.93.0-103.74.95.255
103.88.240.0/22
Signature Algorithm: sha256WithRSAEncryption
31:7c:91:eb:de:b9:7a:94:0f:d3:6d:1b:89:b7:c9:27:c3:1d:
26:8a:be:94:d7:61:06:2a:84:0b:04:31:65:cc:1e:13:9c:dd:
0a:b6:e4:d0:45:88:89:d7:74:4f:a1:c2:c0:93:39:33:1c:64:
3f:65:bb:9d:9d:e3:e0:cb:c9:7c:eb:e5:15:0f:ae:66:ba:46:
a9:8a:d3:57:3f:2a:68:af:fa:b8:3c:76:9b:68:75:08:ba:d5:
12:97:39:98:a9:71:45:3e:84:36:f8:c3:46:51:f3:2a:d0:27:
97:2d:9e:6f:62:eb:c4:d0:19:e0:1c:13:7a:53:e2:f9:57:d2:
80:7d:08:0c:97:b8:19:07:5c:97:7c:51:46:ea:2f:2a:f5:8a:
24:a3:28:0d:8d:4b:12:d4:69:06:dc:c8:87:57:03:df:2e:7f:
11:70:31:8d:c4:02:b1:99:bd:83:4d:fa:5c:db:97:cb:4c:29:
d6:bd:76:98:5c:83:47:fa:37:01:79:f1:2b:65:4c:56:aa:6e:
fa:ee:f6:63:11:e6:10:cf:2b:f5:00:28:6c:52:f6:88:53:0e:
8d:67:d0:19:ce:31:0c:13:07:33:29:96:04:60:d9:6e:fc:b9:
86:6b:9e:b0:37:5d:40:cf:47:02:b1:1b:d7:07:8d:1a:37:0f:
ff:59:c9:7f
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZjrNb3cnfb/I1etSLnv+IwIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx
ZmE4MzkwHhcNMjUwODI3MTEwNzA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTQ3MDMzZWRmYTZhYWJjZTMyMDY3MGFmNDJjNGFhM2I5NzY3MDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8vn565/gSZ7S/tc4gGhKkOZ8FK7
3a/037vtbJlJW/CqWZp+rADTE+roqpiRbD2eQ36Ub/uuQwACrtmF3ui4CEJ1r1jL
O1debaznV/qmUX0PmYTVoZNuGKKpPvGQ+Fx9EwCvb2vDnKVYcszeUutJF7SUtxP3
loiGQ0nXsE5urmOa6xYIcFDDOaT/8fRWO2pOhVd4N3ADCq66zEspeB3LC/XHC8vl
6+OrUqRLQfCu3KFi169ZIJJlAi+k5xXj+zAaWvhuqmpa/2Ir8d2KhAB1USKeyXh2
d680g7BWA99lwW2SRqW5w7hlvPT0C5QvPJcrAovqxZMbs6p7g+u+tuFZuwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFCpHAz7fpqq84yBnCvQsSqO5dnAsMB8GA1UdIwQY
MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt
MzA0OTVmNDAzNzg0LzEvS2tjRFB0LW1xcnpqSUdjSzlDeEtvN2wyY0N3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0
LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABnSl0D
BAVnSkADBAJnWPAwDQYJKoZIhvcNAQELBQADggEBADF8keveuXqUD9NtG4m3ySfD
HSaKvpTXYQYqhAsEMWXMHhOc3Qq25NBFiInXdE+hwsCTOTMcZD9lu52d4+DLyXzr
5RUPrma6RqmK01c/Kmiv+rg8dptodQi61RKXOZipcUU+hDb4w0ZR8yrQJ5ctnm9i
68TQGeAcE3pT4vlX0oB9CAyXuBkHXJd8UUbqLyr1iiSjKA2NSxLUaQbcyIdXA98u
fxFwMY3EArGZvYNN+lzbl8tMKda9dphcg0f6NwF58StlTFaqbvru9mMR5hDPK/UA
KGxS9ohTDo1n0BnOMQwTBzMplgRg2W78uYZrnrA3XUDPRwKxG9cHjRo3D/9ZyX8=
-----END CERTIFICATE-----
Generated at Sat Sep 6 17:26:40 2025 by rpki-client