Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/d3jC5FrVCU6deYGz56A8xH8Tz24.roa
File: d3jC5FrVCU6deYGz56A8xH8Tz24.roa (raw, json)
Hash identifier: EEf3EKHXGl/MGjvhaDBjNExCSWB1bA3J+U/K+9OLzcQ=
Subject key identifier: 77:78:C2:E4:5A:D5:09:4E:9D:79:81:B3:E7:A0:3C:C4:7F:13:CF:6E
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 0199CE48E5C452EB1796825EDDB81B8D7CBD
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/d3jC5FrVCU6deYGz56A8xH8Tz24.roa
Signing time: Fri 10 Oct 2025 13:21:47 +0000
ROA not before: Fri 10 Oct 2025 13:21:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54252
IP address blocks: 103.69.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ce:48:e5:c4:52:eb:17:96:82:5e:dd:b8:1b:8d:7c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Oct 10 13:21:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7778c2e45ad5094e9d7981b3e7a03cc47f13cf6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:83:97:4f:62:30:6c:5d:40:55:f1:c1:9f:98:
5b:32:f3:0e:50:62:15:03:79:f4:5a:9d:92:bb:6e:
90:d3:b0:25:65:ab:bc:17:4c:16:5c:f2:43:5e:c6:
80:7d:32:b9:07:f0:7b:dc:43:6e:44:10:e5:05:5e:
8f:25:d9:89:1c:91:d5:cf:72:29:14:05:e1:e1:b3:
6a:2d:aa:c8:bf:d8:70:88:33:a9:93:bc:74:d5:a2:
c9:1f:f6:8e:46:fa:9c:b5:f0:96:95:ca:13:31:3f:
5a:d1:00:2f:13:ea:d2:7a:41:10:e8:3b:ea:42:fb:
ad:00:4a:93:f2:80:82:f6:77:0f:36:06:50:43:e9:
c3:d9:1f:f2:43:25:23:6c:ca:a7:1d:7b:92:2a:5a:
56:e4:09:df:49:f2:cd:65:b9:66:e7:a3:3e:33:02:
d3:5f:2e:9a:0d:41:09:1e:b4:ca:5a:6a:db:c7:27:
2b:f6:9c:83:dd:32:0b:6f:c9:54:45:47:76:4e:49:
33:9a:75:d3:d3:08:95:97:74:c4:9c:31:fc:28:48:
26:fa:37:72:69:d7:57:f2:82:c0:9f:f6:81:c1:5a:
04:64:47:e9:42:57:66:05:0d:da:8f:c8:35:ab:5b:
7f:ad:5e:49:b5:c6:37:a5:32:2a:33:b2:25:80:de:
bf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:78:C2:E4:5A:D5:09:4E:9D:79:81:B3:E7:A0:3C:C4:7F:13:CF:6E
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/d3jC5FrVCU6deYGz56A8xH8Tz24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.69.227.0/24
Signature Algorithm: sha256WithRSAEncryption
94:4c:2e:ac:21:a3:ec:09:16:21:3c:91:f0:68:01:a6:78:35:
a6:b7:22:6e:ef:4a:ec:ad:a5:16:48:ac:56:4a:bb:31:3e:f2:
f4:87:98:67:6a:09:f9:26:2d:7f:bf:fd:b7:d2:ed:bc:18:65:
64:06:b0:26:ff:9b:dd:03:77:08:f6:6d:a7:09:9b:21:f7:24:
8a:41:96:a4:98:d8:e7:6a:e5:a3:96:9d:78:cc:ab:a1:14:a3:
84:8d:93:cb:0c:a7:c3:4f:53:3e:c4:08:78:80:d8:de:be:f8:
be:9a:22:b1:ac:46:02:ba:c5:f2:49:8b:3d:7b:95:33:be:35:
c1:ef:bf:ec:f0:a9:f3:33:9c:89:1c:6c:6f:f1:6b:78:ae:09:
b7:48:ed:da:8d:90:39:5f:1f:dc:11:61:6a:18:04:8d:a4:59:
95:16:45:d4:3e:39:62:95:a6:41:d3:e5:2c:52:35:4c:0e:b2:
1e:84:e3:b4:27:3c:7a:cf:eb:b4:a7:7b:f8:de:c6:c5:cd:a5:
bb:f1:21:32:db:a6:d0:61:73:d0:51:79:22:b9:89:1d:6a:f2:
45:cb:c4:44:90:08:ef:49:d4:da:21:ba:68:2b:bb:11:94:ee:
46:4b:b6:f0:54:28:93:3a:28:7c:f2:2b:73:06:6b:b0:87:33:
9e:90:81:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:00:02 2025 by rpki-client