Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/8PGMpXHVwKq4_ENdhzxl5hYEB_M.roa
File: 8PGMpXHVwKq4_ENdhzxl5hYEB_M.roa (raw, json)
Hash identifier: oGOypLJ2ao0e3NkgwLdwqe440ZGoEPy60A6Hgw1DaG8=
Subject key identifier: F0:F1:8C:A5:71:D5:C0:AA:B8:FC:43:5D:87:3C:65:E6:16:04:07:F3
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0198A9F8B09677B1343D27C9D696933626E2
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/8PGMpXHVwKq4_ENdhzxl5hYEB_M.roa
Signing time: Thu 14 Aug 2025 19:05:04 +0000
ROA not before: Thu 14 Aug 2025 19:05:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 103.82.103.0/24 maxlen: 24
2a0a:9300::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9300:d0::/48 maxlen: 48
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9302:1::/48 maxlen: 48
2a0a:9307::/32 maxlen: 32
2a0b:7780::/29 maxlen: 29
2a0c:77c0::/32 maxlen: 32
2a0d:2dc0::/32 maxlen: 32
2a0d:2dc1::/32 maxlen: 32
2a0d:2dc2::/32 maxlen: 32
2a0d:2dc3::/32 maxlen: 32
2a0d:3880::/29 maxlen: 29
2a0e:d603::/32 maxlen: 32
2a0f:7b82::/32 maxlen: 32
2a0f:7b83::/32 maxlen: 32
2a0f:7b84::/32 maxlen: 32
2a0f:7b85::/32 maxlen: 32
2a0f:7b86::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a9:f8:b0:96:77:b1:34:3d:27:c9:d6:96:93:36:26:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Aug 14 19:05:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0f18ca571d5c0aab8fc435d873c65e6160407f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5f:38:1e:45:88:cc:de:2e:24:1b:07:ea:d4:
ee:6b:80:e4:3b:ff:5d:20:4d:80:a6:ee:ce:0f:f5:
fc:bc:80:99:d9:31:1f:9f:7a:74:51:1d:78:21:e0:
20:52:07:d6:96:a7:93:32:d4:b3:08:9d:6e:04:2f:
ee:fb:c9:d9:93:ad:b9:98:a8:dc:e4:fb:2c:cf:d5:
b8:0e:0c:46:6d:4b:8c:1c:55:ea:59:66:02:c3:98:
ed:b7:39:0c:18:37:9c:4a:a6:4f:d8:20:de:53:62:
71:13:ed:80:45:93:14:db:38:c8:69:5b:32:fb:9a:
29:93:3d:71:d6:1a:ac:ac:6c:44:e2:6c:59:0a:11:
52:37:18:8e:5e:62:fc:2f:f9:be:db:49:f2:69:3e:
bf:49:e4:60:81:b1:64:50:33:35:fb:8c:58:69:45:
08:3f:74:68:e8:1a:2e:7b:7a:09:33:de:60:c1:12:
de:5d:bf:af:ed:4d:f5:7b:c6:c9:5c:f0:cb:4d:a8:
f3:82:bb:12:c1:35:20:34:f2:1b:7a:86:24:99:e8:
e2:22:0e:e8:7d:2e:bb:1a:fe:36:fe:14:be:dc:56:
64:2c:23:0f:b1:ff:9c:2c:1e:da:b8:0f:23:c1:b7:
2f:67:20:59:ac:11:2c:5f:2d:57:6e:81:b8:4e:97:
b6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F1:8C:A5:71:D5:C0:AA:B8:FC:43:5D:87:3C:65:E6:16:04:07:F3
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/8PGMpXHVwKq4_ENdhzxl5hYEB_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.82.103.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
2a0a:9307::/32
2a0b:7780::/29
2a0c:77c0::/32
2a0d:2dc0::/30
2a0d:3880::/29
2a0e:d603::/32
2a0f:7b82::-2a0f:7b86:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
23:ad:31:6a:bc:ae:4a:c0:ea:5f:61:5c:a5:7b:0d:6f:52:02:
b2:20:5a:a7:24:36:b0:66:56:cc:a8:f8:9a:59:00:91:3e:ed:
5b:a9:16:e7:af:6e:a7:6c:15:5a:fc:9e:26:7b:5b:88:3b:34:
21:e8:cd:0e:4d:ee:34:91:f4:d0:c5:82:c2:25:0c:ed:ea:57:
93:29:45:fb:1d:8b:d5:8d:7e:20:0f:a4:ad:6d:7e:17:9a:f7:
c4:bd:22:53:9b:f6:06:c7:85:e4:7e:fe:95:cd:4f:84:48:2d:
00:31:9f:8a:75:58:b5:9d:f3:dc:1f:f4:b5:5e:1e:cf:d4:a1:
ce:be:43:e5:fd:92:5f:1d:a5:53:ed:ef:44:b4:f8:5c:34:50:
2e:58:f8:ac:af:da:71:be:b3:b3:17:cf:f2:b4:7e:3e:cf:21:
88:39:1a:84:dd:fd:76:6f:6f:7f:37:6d:86:41:11:1c:e3:53:
0b:41:69:1b:d8:96:f7:b7:d6:bf:21:f3:3b:40:04:96:40:2e:
31:ea:0b:54:3e:bc:c6:03:de:9f:86:c6:f9:45:d1:58:57:b8:
33:56:cf:2a:9a:ac:85:10:b8:c9:95:a1:f7:44:a0:83:cc:e2:
61:b4:95:c5:4b:78:7d:83:24:8f:14:04:36:4c:70:a3:84:02:
b4:84:85:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:21:35 2025 by rpki-client