Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/jgSrNBRl0O58OF2uJ1T4Vq5j9mc.roa
File: jgSrNBRl0O58OF2uJ1T4Vq5j9mc.roa (raw, json)
Hash identifier: O5nsMxX+wHNr1n7zDqUhnxSWx/mpO17MWYa1hHPwxzM=
Subject key identifier: 8E:04:AB:34:14:65:D0:EE:7C:38:5D:AE:27:54:F8:56:AE:63:F6:67
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 019876A56AD3EC79BD0EE2F955DD752D5E8E
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/jgSrNBRl0O58OF2uJ1T4Vq5j9mc.roa
Signing time: Mon 04 Aug 2025 19:53:28 +0000
ROA not before: Mon 04 Aug 2025 19:53:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210456
IP address blocks: 103.102.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:76:a5:6a:d3:ec:79:bd:0e:e2:f9:55:dd:75:2d:5e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Aug 4 19:53:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e04ab341465d0ee7c385dae2754f856ae63f667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:ca:d5:05:dc:23:30:5a:f8:d8:f7:08:9c:
69:02:17:e3:63:52:c3:e4:29:c5:64:25:b0:08:63:
4e:7e:44:28:4e:e0:a0:64:67:f5:d4:b4:b7:5a:f2:
1c:c1:c8:13:4a:fa:0c:a4:e2:5d:93:92:fa:dd:86:
f5:29:6b:dc:eb:1d:32:fc:cc:ae:90:cc:e9:65:f9:
37:60:59:bb:25:36:42:85:43:0a:7a:4b:a0:93:2f:
43:4a:6b:44:ea:94:dd:0c:0d:24:9b:75:c0:08:ff:
c6:98:30:ec:17:b6:ce:60:39:b6:7b:90:f0:3a:fe:
c4:53:24:2c:ae:b5:34:e3:25:78:1c:98:9a:3c:84:
3d:cb:42:be:b4:ac:0b:6a:c3:7a:b5:da:31:ba:e5:
ab:28:52:d2:63:21:91:77:31:ef:30:3d:29:a8:28:
07:64:28:35:5b:d3:58:da:ed:ce:7c:31:ed:f0:65:
00:e5:6f:03:86:b1:1f:cd:7d:6b:71:ae:1e:2c:81:
06:a4:4f:6e:66:0a:a2:3b:72:c4:9d:6f:44:00:0d:
2a:2f:7c:ef:80:b3:ed:3f:04:fe:88:89:87:ee:37:
d3:88:06:2a:3e:2c:fa:56:dd:78:73:a0:f6:d3:46:
fa:15:40:79:e5:5a:cc:46:05:89:32:d1:f7:ac:e4:
88:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:04:AB:34:14:65:D0:EE:7C:38:5D:AE:27:54:F8:56:AE:63:F6:67
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/jgSrNBRl0O58OF2uJ1T4Vq5j9mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.231.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:46:65:1c:6d:a4:42:b4:da:30:11:62:85:2e:fe:57:ec:c8:
7e:09:d8:47:bc:dd:38:e1:42:34:44:72:40:59:4c:0b:74:4a:
97:e8:b6:87:c8:f9:bd:dc:3c:e0:cc:9f:54:bc:e5:b4:d5:18:
0b:0b:4f:76:1a:4a:e1:d7:8f:ad:a5:29:01:08:ed:e4:a7:7a:
96:32:46:61:96:33:2b:a1:df:62:27:a7:9f:c1:86:22:a0:54:
c2:a4:b2:1c:7e:84:3f:c4:a8:14:42:fb:49:36:8d:be:8c:47:
90:b6:de:8e:f2:5d:0b:39:34:de:3f:f7:02:ab:c4:9e:dc:0f:
db:f0:fd:cd:58:70:e7:1c:c7:5c:04:8c:29:e7:3a:76:b9:e6:
1e:8b:b9:f6:8b:f2:52:3d:88:1e:25:13:71:a1:7f:4d:74:2a:
1d:1a:ea:33:b7:cf:e1:a6:1f:ce:f9:9c:08:ed:82:7a:ea:bb:
fc:fd:aa:79:ee:c8:b4:1a:01:bf:23:09:4c:fc:b4:63:51:f1:
42:a2:37:1a:f1:42:a3:06:8a:9c:50:b0:98:21:46:2b:12:3e:
7d:8b:bc:40:b2:58:a7:39:5b:dd:b5:1a:f7:3c:c7:f9:c7:5d:
0a:a2:d2:d5:68:75:fc:83:da:1e:ce:30:4a:b5:79:6e:14:ee:
64:1a:0d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 21:01:05 2025 by rpki-client