Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/sv4EXNYI7McAyTz9VxEmavOg_ZI.roa
File: sv4EXNYI7McAyTz9VxEmavOg_ZI.roa (raw, json)
Hash identifier: pthqg1S6F7UF6pnwC1X+wqv/djtBaR5pS3UCBYsUWnw=
Subject key identifier: B2:FE:04:5C:D6:08:EC:C7:00:C9:3C:FD:57:11:26:6A:F3:A0:FD:92
Certificate issuer: /CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Certificate serial: 0199DCCB0B7B25103CDAF37CC47A2A87C9BF
Authority key identifier: 31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/sv4EXNYI7McAyTz9VxEmavOg_ZI.roa
Signing time: Mon 13 Oct 2025 08:58:38 +0000
ROA not before: Mon 13 Oct 2025 08:58:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47217
IP address blocks: 212.103.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dc:cb:0b:7b:25:10:3c:da:f3:7c:c4:7a:2a:87:c9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31b0f64c69d330b66ebcd03a9bf0fdc19f3147d8
Validity
Not Before: Oct 13 08:58:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2fe045cd608ecc700c93cfd5711266af3a0fd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:39:6d:cf:2b:77:f9:c8:5f:fd:4c:f0:26:a9:
ca:ee:14:fd:f5:c7:6d:69:b6:d6:b7:9f:fc:f5:6a:
0a:4c:02:06:d0:f6:b5:10:be:03:27:2e:75:ea:d1:
e9:75:59:d9:c2:2a:7b:91:7b:0b:99:f7:fc:63:95:
86:83:e2:0c:e6:75:5c:0b:12:d1:37:d7:4b:e3:de:
b0:aa:3a:fc:40:fe:6e:0e:83:46:08:29:a7:a0:71:
6f:7e:1c:5c:03:1f:07:01:b7:54:95:a5:7e:63:a6:
52:0b:19:a2:55:c2:e2:82:1e:a6:df:ca:77:a5:3e:
75:94:06:7f:f3:b8:26:3f:f8:f8:5f:a4:89:9f:d5:
de:6a:5e:e5:77:76:79:17:e8:45:86:6d:63:66:e7:
77:79:3b:95:6c:49:4a:ce:66:89:cc:bd:d8:25:8e:
33:69:4c:a1:1b:19:a3:6b:bc:13:17:7b:7a:89:46:
24:12:89:90:d2:4a:c7:6c:f1:4c:2e:cb:81:ad:b0:
29:39:f6:07:f3:41:66:c5:ff:a8:d9:96:fe:48:2e:
fa:f8:8e:26:86:cb:45:b4:37:f9:06:dc:ad:30:ec:
43:45:32:d3:4b:56:c1:6e:9b:e9:37:4b:bb:55:05:
48:97:45:0e:e3:4f:02:72:1d:00:06:a2:80:0c:28:
c8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FE:04:5C:D6:08:EC:C7:00:C9:3C:FD:57:11:26:6A:F3:A0:FD:92
X509v3 Authority Key Identifier:
keyid:31:B0:F6:4C:69:D3:30:B6:6E:BC:D0:3A:9B:F0:FD:C1:9F:31:47:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/sv4EXNYI7McAyTz9VxEmavOg_ZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2fb473-8e6b-4f0d-ad30-d4934493a679/1/MbD2TGnTMLZuvNA6m_D9wZ8xR9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.202.0/24
Signature Algorithm: sha256WithRSAEncryption
81:e1:e1:26:7e:fa:e6:c9:7e:66:14:97:a1:dc:b4:21:4b:80:
22:43:59:d1:4a:10:6d:ea:9d:63:66:fc:1b:b2:0f:51:70:1d:
80:cb:72:5f:e0:c4:5e:62:3f:b8:4d:a8:c4:cc:9b:06:70:13:
d6:6a:fe:e0:69:f8:0d:71:22:b5:2e:b3:22:a0:28:cd:23:fa:
7f:08:a1:9e:73:26:e9:8f:ab:3b:aa:ca:0c:50:57:b4:1a:9b:
c7:61:4f:e6:84:f8:8b:d8:fe:9f:f0:52:de:c1:28:08:69:88:
57:96:16:c7:02:5d:3d:f8:f7:2b:43:f4:88:93:5a:7c:24:a6:
75:23:59:fc:c0:06:32:68:f2:64:3d:22:73:5b:6b:19:82:1e:
ab:fb:24:69:3b:f7:79:be:36:9f:b5:4e:1c:31:91:4c:2c:2e:
53:17:08:0d:2f:2b:29:aa:28:9e:25:83:67:b2:d2:1f:13:d7:
f0:4d:e4:f5:7f:81:42:17:53:2e:e5:c6:04:55:8f:30:81:96:
4f:a7:4b:5d:77:53:b9:5f:15:ac:12:c8:7c:1c:49:d7:7e:26:
2c:fc:1c:bb:62:80:38:e4:44:5f:af:03:12:99:8c:fb:e2:56:
e1:44:25:97:1d:58:77:9a:e4:11:5a:68:1c:0a:7f:47:7c:48:
82:21:6d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:45:53 2025 by rpki-client