Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/PUTRXVMGg80zZushy_zk1SbL8pc.roa
File: PUTRXVMGg80zZushy_zk1SbL8pc.roa (raw, json)
Hash identifier: O/+XUU3dxzTBt/lI+dLvc9tfmcvz48zEev6aYeomJ38=
Subject key identifier: 3D:44:D1:5D:53:06:83:CD:33:66:EB:21:CB:FC:E4:D5:26:CB:F2:97
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019836DF5EC38BEAB6854BEB54649476514B
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/PUTRXVMGg80zZushy_zk1SbL8pc.roa
Signing time: Wed 23 Jul 2025 10:41:05 +0000
ROA not before: Wed 23 Jul 2025 10:41:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 103.82.103.0/24 maxlen: 24
2a0a:9300::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9300:d0::/48 maxlen: 48
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9302:1::/48 maxlen: 48
2a0a:9307::/32 maxlen: 32
2a0b:7780::/29 maxlen: 29
2a0c:77c0::/32 maxlen: 32
2a0d:2dc0::/32 maxlen: 32
2a0d:2dc1::/32 maxlen: 32
2a0d:2dc2::/32 maxlen: 32
2a0d:2dc3::/32 maxlen: 32
2a0d:3880::/29 maxlen: 29
2a0e:d603::/32 maxlen: 32
2a0f:7b82::/32 maxlen: 32
2a0f:7b83::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:df:5e:c3:8b:ea:b6:85:4b:eb:54:64:94:76:51:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 23 10:41:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d44d15d530683cd3366eb21cbfce4d526cbf297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:4c:b2:3b:e8:1f:98:b3:b2:99:2d:b2:3c:
ff:38:a9:ba:7f:0b:aa:65:47:91:25:98:ce:34:ad:
2b:ce:94:99:37:eb:38:41:8b:9f:f3:6d:4a:bd:bc:
3b:34:d8:ad:69:cd:54:17:7b:25:6e:9c:5d:43:ac:
ea:2a:85:27:ca:0c:40:46:f4:f9:fd:c6:9e:a0:aa:
67:e9:1b:ec:06:82:0e:03:2c:89:ac:e8:94:19:64:
d8:87:3d:b1:cc:3f:98:e2:f2:11:05:89:aa:a7:24:
38:e6:59:44:b9:bc:f6:ca:ef:3c:9a:24:c7:b7:76:
6f:ce:df:5b:52:2c:2c:e9:b2:a6:99:f8:85:eb:18:
bd:07:e8:82:ed:a5:bf:1c:75:a2:ee:de:08:22:7d:
22:bc:48:b5:fe:4c:6b:ff:c8:96:95:10:bf:e9:ae:
52:ab:20:21:2d:82:14:5d:6b:67:b1:02:ad:03:bc:
b2:75:10:64:a3:73:4b:f4:de:db:7e:39:b8:a4:fb:
0c:1c:6a:0a:05:89:24:f0:92:82:3b:58:64:9b:16:
2c:48:4f:cf:77:17:fd:1b:c3:02:43:be:6c:02:45:
00:1d:42:9e:1c:bf:80:fa:7b:0c:9d:19:3f:ad:4e:
c9:58:ea:af:b4:32:cd:cd:74:38:3b:d5:b7:a8:c3:
6f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:44:D1:5D:53:06:83:CD:33:66:EB:21:CB:FC:E4:D5:26:CB:F2:97
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/PUTRXVMGg80zZushy_zk1SbL8pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.82.103.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
2a0a:9307::/32
2a0b:7780::/29
2a0c:77c0::/32
2a0d:2dc0::/30
2a0d:3880::/29
2a0e:d603::/32
2a0f:7b82::/31
Signature Algorithm: sha256WithRSAEncryption
22:e3:b2:e3:a2:fc:64:8c:b8:29:59:c3:64:f4:a6:45:10:d0:
1e:d8:d5:8c:86:f4:80:11:88:c2:bf:ff:ee:78:0f:94:8a:01:
c9:95:33:be:3a:8d:da:59:6b:10:cc:c6:60:2c:7f:9e:a9:d2:
5e:49:0c:a0:6e:44:3d:1c:6e:15:63:27:9f:8c:9b:fc:48:23:
8c:7b:b2:f4:9b:ba:a8:57:87:df:21:6d:37:7a:d0:b4:63:48:
9a:aa:6d:be:10:e9:d4:52:33:be:e3:91:dc:51:a4:71:58:d8:
6d:db:bb:aa:1a:4d:f2:80:33:f2:9f:31:b7:4e:07:e2:07:48:
24:a9:ce:0e:d1:c5:46:d5:da:b6:28:79:a7:9f:e7:c6:24:06:
2c:3f:21:ac:c1:0b:a1:fc:a3:19:c5:77:07:7e:ff:13:85:d6:
6b:93:b8:e2:25:93:b7:c1:5c:43:20:42:99:dc:88:1b:fd:70:
a8:48:78:6f:12:43:ab:33:3a:e8:73:31:e4:c2:2b:36:89:79:
1f:35:5b:26:c2:b3:55:26:2e:01:c6:5b:fb:ac:04:0e:40:73:
5a:a5:e7:81:ee:d5:4b:0c:db:54:69:17:b2:31:bf:0c:3f:3c:
c5:bf:83:f4:f9:e7:98:60:e4:1e:09:d2:07:92:aa:42:58:ed:
2e:98:0f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:51:54 2025 by rpki-client