Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/Gg2fBgym98lzpgGOw525Psta200.roa
File: Gg2fBgym98lzpgGOw525Psta200.roa (raw, json)
Hash identifier: ITzizygNHqGF0ltRY0tg7IiIoexFvZtpbGrKT1PyRcQ=
Subject key identifier: 1A:0D:9F:06:0C:A6:F7:C9:73:A6:01:8E:C3:9D:B9:3E:CB:5A:DB:4D
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 0199B5D4B712777F984C4BEF68B0F1705893
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/Gg2fBgym98lzpgGOw525Psta200.roa
Signing time: Sun 05 Oct 2025 19:24:00 +0000
ROA not before: Sun 05 Oct 2025 19:24:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211484
IP address blocks: 103.216.173.0/24 maxlen: 24
213.109.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b5:d4:b7:12:77:7f:98:4c:4b:ef:68:b0:f1:70:58:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Oct 5 19:24:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a0d9f060ca6f7c973a6018ec39db93ecb5adb4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:85:f2:0b:b2:88:d0:a7:aa:aa:73:45:33:
73:06:2c:54:71:a4:22:67:ea:d1:db:36:ab:44:d3:
58:d6:fa:9c:6c:d3:51:1a:62:74:0e:f0:54:b1:0e:
ae:06:ee:6c:39:b3:6a:08:2d:07:27:c9:3c:d3:fa:
45:f1:24:7d:fe:27:bd:e7:64:f8:df:79:87:5b:59:
a2:15:db:a3:08:5a:ba:79:2f:31:b6:de:05:f7:dd:
4f:ac:60:4e:bf:b6:33:8a:0c:9a:b4:2a:41:58:e6:
e3:49:4e:de:46:5f:7c:a4:f4:21:aa:b9:69:80:13:
ba:61:12:88:43:cd:c1:9a:83:84:a9:d7:37:86:ca:
85:e5:bc:b6:4a:ea:dd:14:72:05:b8:16:05:53:a1:
62:1f:d0:94:16:c5:dd:20:eb:e1:00:5b:25:22:d6:
41:57:b9:1e:a6:4d:48:e1:ff:bb:fb:e4:8a:bc:15:
b8:0d:4a:9f:a8:7b:74:ca:70:78:59:2e:59:8e:4b:
71:75:ae:a7:97:7e:93:34:d1:43:59:6a:7f:d9:cf:
a2:26:e9:53:b6:d4:36:3f:b3:d7:64:a7:53:2c:3e:
9a:71:72:cf:69:be:01:ea:0a:82:83:21:1b:ba:bf:
f5:67:fa:9e:52:56:60:39:95:40:bc:57:04:02:e6:
66:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0D:9F:06:0C:A6:F7:C9:73:A6:01:8E:C3:9D:B9:3E:CB:5A:DB:4D
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/Gg2fBgym98lzpgGOw525Psta200.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.173.0/24
213.109.154.0/24
Signature Algorithm: sha256WithRSAEncryption
31:26:c0:90:9b:af:69:07:26:0d:e4:bd:23:59:f1:39:fe:97:
da:07:30:5c:53:01:01:a3:15:0d:98:5c:cf:67:6b:bf:a2:0c:
41:86:9f:b2:39:86:96:ef:e5:49:6c:ed:d0:aa:bd:39:06:99:
25:20:2d:ba:04:67:63:91:21:fb:f1:be:d4:4e:d6:eb:70:06:
38:4c:fe:42:02:a4:18:31:32:f6:43:03:51:f9:29:e2:af:87:
50:e1:78:bf:f2:59:7d:dd:06:49:bd:e3:61:ac:2a:ba:64:fd:
f1:6b:9d:21:b6:02:12:ba:87:20:12:34:c7:32:c2:e4:a7:a5:
b3:57:f7:ac:29:de:87:1d:ff:2d:f6:a2:db:ec:50:5c:a1:7c:
10:b0:91:51:ab:03:d3:76:b3:58:96:83:70:b6:d1:34:ff:fb:
66:2a:3a:1f:91:51:2f:3b:30:45:30:ce:b7:8e:74:d3:0b:03:
15:57:b7:4f:45:15:4a:dd:57:bd:21:1a:9e:cf:8a:cb:d7:be:
83:48:01:73:37:5f:83:96:0c:55:db:93:c5:c6:ce:ca:36:f1:
fc:a6:2e:7d:ab:09:d9:5c:5b:ab:ab:95:ba:6c:2a:ec:37:f0:
9d:a1:fd:96:e4:4e:ab:39:1f:ff:4f:45:0d:3b:65:1d:2d:1e:
a9:f3:7b:1b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZm11LcSd3+YTEvvaLDxcFiTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz
M2RiOTYwHhcNMjUxMDA1MTkyNDAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTBkOWYwNjBjYTZmN2M5NzNhNjAxOGVjMzlkYjkzZWNiNWFkYjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI2F8guyiNCnqqpzRTNzBixUcaQi
Z+rR2zarRNNY1vqcbNNRGmJ0DvBUsQ6uBu5sObNqCC0HJ8k80/pF8SR9/ie952T4
33mHW1miFdujCFq6eS8xtt4F991PrGBOv7YzigyatCpBWObjSU7eRl98pPQhqrlp
gBO6YRKIQ83BmoOEqdc3hsqF5by2SurdFHIFuBYFU6FiH9CUFsXdIOvhAFslItZB
V7kepk1I4f+7++SKvBW4DUqfqHt0ynB4WS5Zjktxda6nl36TNNFDWWp/2c+iJulT
ttQ2P7PXZKdTLD6acXLPab4B6gqCgyEbur/1Z/qeUlZgOZVAvFcEAuZmNwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBoNnwYMpvfJc6YBjsOduT7LWttNMB8GA1UdIwQY
MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt
MmM3MDg2ZmRlZDkzLzEvR2cyZkJneW05OGx6cGdHT3c1MjVQc3RhMjAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz
LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAZ9itAwQA
1W2aMA0GCSqGSIb3DQEBCwUAA4IBAQAxJsCQm69pByYN5L0jWfE5/pfaBzBcUwEB
oxUNmFzPZ2u/ogxBhp+yOYaW7+VJbO3Qqr05BpklIC26BGdjkSH78b7UTtbrcAY4
TP5CAqQYMTL2QwNR+Snir4dQ4Xi/8ll93QZJveNhrCq6ZP3xa50htgISuocgEjTH
MsLkp6WzV/esKd6HHf8t9qLb7FBcoXwQsJFRqwPTdrNYloNwttE0//tmKjofkVEv
OzBFMM63jnTTCwMVV7dPRRVK3Ve9IRqez4rL176DSAFzN1+DlgxV25PFxs7KNvH8
pi59qwnZXFurq5W6bCrsN/Cdof2W5E6rOR//T0UNO2UdLR6p83sb
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:52 2025 by rpki-client