Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/SiQZbt7Y66GtmJ_f96kwaY-G998.roa
File: SiQZbt7Y66GtmJ_f96kwaY-G998.roa (raw, json)
Hash identifier: dgNLChdS6cQ5M1MIq+zgZcYxmgFmlTXUHjgAF6gyPTw=
Subject key identifier: 4A:24:19:6E:DE:D8:EB:A1:AD:98:9F:DF:F7:A9:30:69:8F:86:F7:DF
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019835AA3C735EBF4DA155824C8A530BD2EC
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/SiQZbt7Y66GtmJ_f96kwaY-G998.roa
Signing time: Wed 23 Jul 2025 05:03:25 +0000
ROA not before: Wed 23 Jul 2025 05:03:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 103.211.101.0/24 maxlen: 24
124.155.240.0/24 maxlen: 24
124.155.241.0/24 maxlen: 24
124.155.242.0/24 maxlen: 24
124.155.243.0/24 maxlen: 24
124.155.244.0/24 maxlen: 24
124.155.245.0/24 maxlen: 24
124.155.246.0/24 maxlen: 24
124.155.247.0/24 maxlen: 24
124.155.249.0/24 maxlen: 24
124.155.250.0/24 maxlen: 24
124.155.252.0/24 maxlen: 24
124.155.253.0/24 maxlen: 24
124.155.254.0/24 maxlen: 24
124.155.255.0/24 maxlen: 24
202.71.6.0/24 maxlen: 24
202.71.7.0/24 maxlen: 24
207.45.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:aa:3c:73:5e:bf:4d:a1:55:82:4c:8a:53:0b:d2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jul 23 05:03:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a24196eded8eba1ad989fdff7a930698f86f7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:df:10:bd:00:f8:a5:0a:8e:e2:47:fb:d9:
e8:99:2f:d0:9c:7c:69:cc:db:97:33:2c:b6:91:9d:
b4:9e:94:8a:a8:b5:11:41:f9:df:26:3d:cf:72:ff:
75:72:4d:18:c0:05:fa:fb:b3:97:f3:5c:f0:21:19:
79:e6:88:d2:43:fd:65:0e:8c:b0:1b:88:59:c0:36:
c0:aa:5c:2a:48:41:f9:f7:7d:6f:4b:3e:98:69:40:
6c:2b:63:7b:48:bd:0e:5a:37:73:2d:82:55:69:06:
56:90:76:83:98:9f:1b:74:b8:31:f6:58:60:2c:6d:
94:e1:1a:dd:c2:21:52:99:fe:43:ff:31:f1:93:c0:
6e:b2:61:4c:27:16:0c:6f:5e:70:0d:e3:bc:86:c5:
5d:02:56:ff:57:49:aa:88:9d:75:86:f1:20:bc:54:
2e:bb:3f:f5:bb:b9:ac:45:bf:60:cd:17:82:e5:ec:
84:07:b1:80:a6:e7:e6:98:dd:a6:2c:25:f7:42:3e:
36:33:ed:0b:3e:c0:19:b4:ab:e1:89:74:f7:1e:11:
f4:b7:67:62:bc:48:ab:70:a4:4d:51:23:2b:56:18:
dd:92:a2:1a:f1:c6:40:37:1f:a2:9c:09:75:ed:c8:
2f:0f:84:d2:8e:8c:4b:c6:38:ac:f1:e8:1d:23:01:
5a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:24:19:6E:DE:D8:EB:A1:AD:98:9F:DF:F7:A9:30:69:8F:86:F7:DF
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/SiQZbt7Y66GtmJ_f96kwaY-G998.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.211.101.0/24
124.155.240.0/21
124.155.249.0-124.155.250.255
124.155.252.0/22
202.71.6.0/23
207.45.8.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:f2:5e:15:b1:e2:73:bc:65:a5:c3:ea:a0:d5:bb:c3:3f:81:
c0:3f:9b:e4:43:b9:65:65:9e:8c:29:1c:56:51:c2:ac:ac:56:
d3:c9:a0:70:ca:15:6e:79:89:12:13:46:c1:96:df:f2:ef:e9:
b7:27:59:33:ca:61:c9:16:99:84:f0:25:99:db:ac:60:eb:df:
c0:8f:e9:9b:22:ca:06:26:34:7c:b0:1b:2d:fc:67:da:fd:3a:
21:40:17:bf:a1:60:c5:f9:15:21:b9:91:ff:23:84:65:a7:e0:
92:3a:ab:f0:25:8a:cc:66:e2:7b:e3:57:14:55:ad:39:78:e1:
c3:4c:98:c9:bc:be:87:12:0c:3d:20:40:b2:d2:1a:04:31:39:
20:aa:5b:43:03:2f:50:e7:3f:d8:6b:a5:33:5a:e5:c9:26:81:
ed:10:0a:26:fe:e8:d9:3b:d3:c8:ff:16:1c:fd:64:c5:fb:19:
3a:ef:47:20:b1:9c:c1:6a:f3:3b:3d:88:ca:c4:22:43:82:eb:
9a:37:40:bd:2a:2c:4b:5a:02:1b:76:28:7b:45:05:11:a7:5a:
e5:7c:8e:a0:7c:53:6c:45:7c:63:06:e9:95:ad:20:e5:d5:fd:
da:e5:3b:81:41:fd:0c:6c:1d:69:f8:8c:6a:0b:9e:1c:62:2f:
47:cb:43:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:18:49 2025 by rpki-client