Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/laPe02BW1dF6qI7VPAvoJwJhF4s.roa
File: laPe02BW1dF6qI7VPAvoJwJhF4s.roa (raw, json)
Hash identifier: v/D94ZtejY8jUNkheDIBk4h8vVHwuUMimac0Kl0P0Sk=
Subject key identifier: 95:A3:DE:D3:60:56:D5:D1:7A:A8:8E:D5:3C:0B:E8:27:02:61:17:8B
Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Certificate serial: 0197A2A436F7ADC7E4021B3F458FF0197A49
Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/laPe02BW1dF6qI7VPAvoJwJhF4s.roa
Signing time: Tue 24 Jun 2025 15:52:40 +0000
ROA not before: Tue 24 Jun 2025 15:52:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197981
IP address blocks: 103.57.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a2:a4:36:f7:ad:c7:e4:02:1b:3f:45:8f:f0:19:7a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Validity
Not Before: Jun 24 15:52:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95a3ded36056d5d17aa88ed53c0be8270261178b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:62:cd:8c:43:ac:bf:2e:23:03:8c:33:a4:
6f:44:d4:23:59:87:61:5c:88:2b:4d:20:55:f8:e0:
58:98:6c:bd:84:02:79:e9:bc:67:35:52:4d:4f:9f:
5f:71:c3:19:45:06:54:96:a7:1e:0f:f1:8c:91:0a:
88:09:22:be:fe:4c:20:87:1f:fc:19:c7:ce:8d:2d:
f7:79:9f:ff:23:fa:d0:d3:d9:4c:aa:6a:15:79:45:
63:af:f5:c2:15:44:54:bf:56:7d:95:1c:ab:02:fa:
bb:17:d1:a7:b8:b5:3a:e7:ac:7c:18:ce:c9:c0:8f:
1d:e8:31:ec:d7:67:d6:bd:65:5b:b8:c1:5d:72:16:
22:e0:9e:1a:84:a7:d2:d7:cf:a2:5e:bc:2f:2e:79:
18:95:e0:0f:37:46:23:cf:55:25:4c:d8:9c:80:4d:
56:e3:fb:9b:f9:16:6d:e5:a0:67:c5:1c:7b:f4:1c:
89:df:ce:d3:c8:fb:e3:31:fc:62:bf:21:62:79:19:
a8:b8:fb:ac:eb:7f:07:17:c8:9a:4b:73:5f:71:80:
3e:c0:1c:63:14:f8:b0:9f:e7:37:a8:eb:87:39:9d:
1e:76:95:07:55:11:f8:20:97:ee:30:98:96:57:8e:
75:f4:82:71:4a:29:ff:da:58:17:29:43:43:90:36:
b8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A3:DE:D3:60:56:D5:D1:7A:A8:8E:D5:3C:0B:E8:27:02:61:17:8B
X509v3 Authority Key Identifier:
keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/laPe02BW1dF6qI7VPAvoJwJhF4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.57.156.0/22
Signature Algorithm: sha256WithRSAEncryption
49:2b:3f:03:4f:36:2c:13:ca:f7:33:88:f5:20:d5:85:07:34:
38:3a:d9:41:8f:38:02:88:5d:8a:24:ee:ff:55:d8:22:60:7c:
23:e2:89:8f:39:46:5b:bd:9e:da:8a:42:74:0e:32:5a:75:a7:
45:ea:b1:26:02:d5:90:4c:3b:58:f4:81:93:4d:d3:c9:56:39:
a9:23:7a:ea:dc:c2:52:38:d0:17:d0:1d:f5:48:03:77:ca:fc:
48:b6:77:57:72:09:18:f2:de:4d:2e:c9:0f:7e:4f:16:f9:92:
47:a0:2c:49:95:28:25:c8:ca:71:54:36:05:ae:73:fd:7b:79:
17:4d:90:af:ad:a3:aa:2b:02:88:b6:8b:f6:48:17:46:71:b2:
44:66:51:9a:b2:b3:1b:e6:fa:e3:be:e8:6c:83:ad:f0:bb:f6:
e1:8b:5f:21:c1:15:be:d5:81:c5:39:ba:1b:d1:7b:9c:77:e4:
cf:46:4d:05:81:af:7f:62:3b:da:b7:9d:1c:c7:1b:62:b5:eb:
2d:4f:82:b1:38:57:6f:cd:b9:74:71:29:61:54:bc:a1:8a:79:
52:0a:95:d5:13:1d:76:26:a5:00:90:6f:ba:2a:c3:29:3d:59:
46:59:09:67:4d:25:6f:b1:a7:33:4a:92:7a:13:a8:ab:68:8e:
51:9f:12:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZeipDb3rcfkAhs/RY/wGXpJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz
NzllNDQwHhcNMjUwNjI0MTU1MjQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWEzZGVkMzYwNTZkNWQxN2FhODhlZDUzYzBiZTgyNzAyNjExNzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvJizYxDrL8uIwOMM6RvRNQjWYdh
XIgrTSBV+OBYmGy9hAJ56bxnNVJNT59fccMZRQZUlqceD/GMkQqICSK+/kwghx/8
GcfOjS33eZ//I/rQ09lMqmoVeUVjr/XCFURUv1Z9lRyrAvq7F9GnuLU656x8GM7J
wI8d6DHs12fWvWVbuMFdchYi4J4ahKfS18+iXrwvLnkYleAPN0Yjz1UlTNicgE1W
4/ub+RZt5aBnxRx79ByJ387TyPvjMfxivyFieRmouPus638HF8iaS3NfcYA+wBxj
FPiwn+c3qOuHOZ0edpUHVRH4IJfuMJiWV4519IJxSin/2lgXKUNDkDa4HQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJWj3tNgVtXReqiO1TwL6CcCYReLMB8GA1UdIwQY
MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt
ZGZlZDEyZjFhMDFlLzEvbGFQZTAyQlcxZEY2cUk3VlBBdm9Kd0poRjRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl
LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZzmcMA0G
CSqGSIb3DQEBCwUAA4IBAQBJKz8DTzYsE8r3M4j1INWFBzQ4OtlBjzgCiF2KJO7/
VdgiYHwj4omPOUZbvZ7aikJ0DjJadadF6rEmAtWQTDtY9IGTTdPJVjmpI3rq3MJS
ONAX0B31SAN3yvxItndXcgkY8t5NLskPfk8W+ZJHoCxJlSglyMpxVDYFrnP9e3kX
TZCvraOqKwKItov2SBdGcbJEZlGasrMb5vrjvuhsg63wu/bhi18hwRW+1YHFObob
0Xucd+TPRk0Fga9/Yjvat50cxxtitestT4KxOFdvzbl0cSlhVLyhinlSCpXVEx12
JqUAkG+6KsMpPVlGWQlnTSVvsaczSpJ6E6iraI5RnxJA
-----END CERTIFICATE-----
Generated at Thu Jul 3 03:11:22 2025 by rpki-client