Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/q3eBnPRVZ5sSRFdmqMI9Ye91g0U.roa
File: q3eBnPRVZ5sSRFdmqMI9Ye91g0U.roa (raw, json)
Hash identifier: jQaKxm+g5MsY5zZFyMAUbrdiM1WWvKedP6C676e0cPs=
Subject key identifier: AB:77:81:9C:F4:55:67:9B:12:44:57:66:A8:C2:3D:61:EF:75:83:45
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 0198994AFB03324C01A117973A48B10564AD
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/q3eBnPRVZ5sSRFdmqMI9Ye91g0U.roa
Signing time: Mon 11 Aug 2025 13:21:24 +0000
ROA not before: Mon 11 Aug 2025 13:21:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201364
IP address blocks: 203.202.233.0/24 maxlen: 24
2a05:d740::/32 maxlen: 32
2a06:e900::/32 maxlen: 32
2a07:4a01::/32 maxlen: 32
2a0a:37c0::/32 maxlen: 32
2a0b:9800::/32 maxlen: 32
2a14:4380::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:99:4a:fb:03:32:4c:01:a1:17:97:3a:48:b1:05:64:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Aug 11 13:21:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab77819cf455679b12445766a8c23d61ef758345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:65:fa:bd:0c:72:0f:c2:26:dc:11:58:10:9e:
80:81:8f:4b:26:e1:d8:e5:e5:51:c1:9f:b0:e0:5c:
fe:a1:f5:b9:03:b7:f2:83:59:1c:10:20:92:7b:ef:
35:6b:61:5a:bb:c8:63:e6:1b:75:c4:5b:c0:40:dd:
33:2f:87:77:04:dd:b9:95:a4:6f:73:8a:4a:da:f5:
ed:bd:eb:35:7b:80:7d:32:14:8d:60:26:bc:d1:32:
60:19:cd:b3:31:03:8b:9c:9d:ed:ee:cf:0a:f6:40:
65:3a:36:1a:df:e8:f9:4e:06:66:2d:68:fb:04:21:
6e:1d:2b:a6:d4:29:7d:30:5a:97:e7:9b:90:aa:4e:
32:5b:a8:13:53:ec:46:0a:09:3e:c7:b0:aa:2a:75:
90:0d:b5:6d:13:55:43:93:ff:21:6b:9f:54:7e:bc:
a5:87:1b:bf:a7:ec:0d:be:d4:72:c1:58:bc:0a:10:
19:81:11:81:40:e4:8e:af:16:02:11:f7:26:6a:24:
a6:2f:9b:db:b8:e5:0d:9b:d9:89:80:6d:c6:87:41:
b1:52:08:5e:c9:e1:42:bd:82:ac:d6:57:62:f7:41:
59:91:52:5c:9f:e2:18:51:dd:d9:2c:2e:19:61:5e:
e9:fc:84:c7:c8:69:ac:97:d8:f5:d2:c2:94:75:6b:
96:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:77:81:9C:F4:55:67:9B:12:44:57:66:A8:C2:3D:61:EF:75:83:45
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/q3eBnPRVZ5sSRFdmqMI9Ye91g0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.202.233.0/24
IPv6:
2a05:d740::/32
2a06:e900::/32
2a07:4a01::/32
2a0a:37c0::/32
2a0b:9800::/32
2a14:4380::/32
Signature Algorithm: sha256WithRSAEncryption
4b:05:b5:d4:02:74:f3:12:55:04:0a:84:1b:77:0a:28:ac:53:
77:4d:15:98:56:a4:40:4c:b6:da:ee:57:f9:21:35:eb:db:5c:
42:5a:09:51:df:99:99:cb:5f:00:a4:a6:e6:05:75:eb:38:9d:
99:f1:21:e7:fb:7a:30:d0:c6:cb:e6:91:29:33:50:6a:d7:44:
5c:27:b2:a9:7c:cc:54:2f:5e:b1:8e:07:ad:3e:51:41:ee:a5:
ed:d2:85:86:fe:2c:d9:cd:9f:bb:df:ec:f8:a0:ed:b1:6e:22:
f7:5b:fc:20:93:5c:c4:3b:35:43:0f:f0:69:b6:03:22:97:07:
dc:4a:58:bb:e5:c4:b5:8a:7f:c8:d4:4f:e5:bf:c3:25:b1:02:
c2:8b:5b:f5:e4:78:c7:6d:68:d9:f2:cc:34:3c:d5:59:24:7d:
a2:c6:ab:2e:fc:35:1b:da:6d:47:18:0c:63:13:6e:8c:4d:7e:
07:ac:b1:c5:64:d9:ed:3e:2d:35:40:38:22:52:b2:56:a0:8b:
9c:8a:fb:bd:bd:9a:9f:49:d4:38:41:0d:69:58:54:2b:17:9d:
38:91:a9:cc:85:0d:6f:1e:da:da:53:fb:2a:94:37:05:2b:03:
d5:04:e8:bd:8d:0a:08:50:c9:90:b2:7d:95:4f:25:9b:68:06:
b1:8a:b9:11
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZiZSvsDMkwBoReXOkixBWStMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz
ZWRmNGIwHhcNMjUwODExMTMyMTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjc3ODE5Y2Y0NTU2NzliMTI0NDU3NjZhOGMyM2Q2MWVmNzU4MzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGX6vQxyD8Im3BFYEJ6AgY9LJuHY
5eVRwZ+w4Fz+ofW5A7fyg1kcECCSe+81a2Fau8hj5ht1xFvAQN0zL4d3BN25laRv
c4pK2vXtves1e4B9MhSNYCa80TJgGc2zMQOLnJ3t7s8K9kBlOjYa3+j5TgZmLWj7
BCFuHSum1Cl9MFqX55uQqk4yW6gTU+xGCgk+x7CqKnWQDbVtE1VDk/8ha59Ufryl
hxu/p+wNvtRywVi8ChAZgRGBQOSOrxYCEfcmaiSmL5vbuOUNm9mJgG3Gh0GxUghe
yeFCvYKs1ldi90FZkVJcn+IYUd3ZLC4ZYV7p/ITHyGmsl9j10sKUdWuWHQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFKt3gZz0VWebEkRXZqjCPWHvdYNFMB8GA1UdIwQY
MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt
OTQ0OTk1N2ZkNWE1LzEvcTNlQm5QUlZaNXNTUkZkbXFNSTlZZTkxZzBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1
LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDAMBAIAATAGAwQAy8rpMDAE
AgACMCoDBQAqBddAAwUAKgbpAAMFACoHSgEDBQAqCjfAAwUAKguYAAMFACoUQ4Aw
DQYJKoZIhvcNAQELBQADggEBAEsFtdQCdPMSVQQKhBt3CiisU3dNFZhWpEBMttru
V/khNevbXEJaCVHfmZnLXwCkpuYFdes4nZnxIef7ejDQxsvmkSkzUGrXRFwnsql8
zFQvXrGOB60+UUHupe3ShYb+LNnNn7vf7Pig7bFuIvdb/CCTXMQ7NUMP8Gm2AyKX
B9xKWLvlxLWKf8jUT+W/wyWxAsKLW/XkeMdtaNnyzDQ81VkkfaLGqy78NRvabUcY
DGMTboxNfgesscVk2e0+LTVAOCJSslagi5yK+729mp9J1DhBDWlYVCsXnTiRqcyF
DW8e2tpT+yqUNwUrA9UE6L2NCghQyZCyfZVPJZtoBrGKuRE=
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:03:08 2025 by rpki-client