Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/DefjgqgW3k0sn_tO0MEiDyeFL90.roa
File: DefjgqgW3k0sn_tO0MEiDyeFL90.roa (raw, json)
Hash identifier: +8yaQDhhnZ95vny+dtdrD/Qy2l/JoW7VG40b+SfRWeM=
Subject key identifier: 0D:E7:E3:82:A8:16:DE:4D:2C:9F:FB:4E:D0:C1:22:0F:27:85:2F:DD
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0199B92F7ABDFF20B3FD0D26F39CE152CB82
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/DefjgqgW3k0sn_tO0MEiDyeFL90.roa
Signing time: Mon 06 Oct 2025 11:02:00 +0000
ROA not before: Mon 06 Oct 2025 11:02:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213999
IP address blocks: 103.82.102.0/24 maxlen: 24
103.82.103.0/24 maxlen: 24
103.127.76.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b9:2f:7a:bd:ff:20:b3:fd:0d:26:f3:9c:e1:52:cb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Oct 6 11:02:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0de7e382a816de4d2c9ffb4ed0c1220f27852fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:54:aa:4c:d7:5b:62:7e:b3:04:cc:6c:54:
40:9a:78:7a:57:19:de:a3:ba:2b:0e:77:db:cf:d1:
e0:64:8b:4e:41:15:e0:c5:09:c8:1e:bd:39:fe:69:
f0:a0:75:1e:ea:40:65:39:2a:80:e2:cf:8e:4b:0c:
81:d0:5c:ac:31:33:50:1d:2f:25:e5:24:99:46:f8:
f2:5e:02:a5:59:24:b0:13:58:03:e8:7e:c7:53:eb:
d8:a7:78:31:82:09:d5:69:fe:12:f0:0e:c8:9c:03:
d7:ed:12:b8:c4:d7:c4:8e:ae:7c:58:4f:f8:0e:c1:
5d:5b:39:5d:4e:9e:d6:d2:d0:06:b4:87:21:93:11:
a8:11:fc:f7:35:c9:f8:b8:1c:de:6a:0f:f5:69:e1:
d1:c8:90:97:2e:d8:0e:65:b9:27:69:26:90:2a:1a:
b5:35:86:d6:ed:e8:1b:d0:12:f0:85:32:a5:c4:1d:
5f:b1:dc:9c:38:cb:ce:83:43:97:6f:ea:aa:2f:99:
f5:8a:fe:63:2e:3f:a8:61:eb:d0:33:4c:cc:95:93:
75:b7:47:ac:5f:31:57:e2:e2:ed:67:0c:aa:b9:6b:
c7:64:6d:1d:23:75:49:f8:e7:fe:b8:2a:ef:3a:9e:
f9:01:0f:b1:30:99:a1:17:65:50:5d:ce:04:aa:46:
db:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E7:E3:82:A8:16:DE:4D:2C:9F:FB:4E:D0:C1:22:0F:27:85:2F:DD
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/DefjgqgW3k0sn_tO0MEiDyeFL90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.82.102.0/23
103.127.76.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:a1:ed:35:ab:c0:18:dd:6f:25:30:cb:a6:8c:47:9c:a3:27:
c5:c0:69:89:73:9d:68:56:b8:78:a5:20:9d:30:79:2b:28:17:
e9:1e:a9:6b:7e:fe:f0:21:08:aa:8c:85:bd:b2:24:4f:c5:4a:
01:48:4a:a0:93:46:9f:24:e2:c0:d4:a4:e9:2b:0a:64:98:02:
4a:f7:36:2d:6a:45:93:3c:51:dc:a0:b3:26:75:5a:1b:0f:45:
e5:27:04:5f:dd:32:07:ba:46:1d:c0:f3:91:82:49:57:9a:e6:
2a:6a:1b:06:10:b0:8a:a5:77:94:28:78:0d:7e:8c:23:47:d8:
a4:9e:87:fa:22:9a:b2:8e:04:70:f1:a3:32:1f:94:37:8f:34:
5b:19:64:5f:4c:d4:3b:3f:b3:36:bd:98:44:eb:5f:10:84:ce:
c2:eb:26:f2:ff:30:1a:7d:e0:27:b2:1f:d6:d4:32:f2:e4:30:
46:71:26:d0:28:1e:7a:55:99:64:3d:b0:df:f8:f3:9e:11:21:
6b:bb:05:48:e4:99:fe:14:5e:aa:6b:20:31:0a:9d:d6:f2:1d:
07:80:5a:20:93:64:9c:07:c3:c8:27:78:6d:d6:5c:a3:40:79:
0d:f2:f8:ab:01:dc:b0:4c:ae:46:2d:ba:72:1c:95:7a:9c:b1:
f8:28:36:ec
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZm5L3q9/yCz/Q0m85zhUsuCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjUxMDA2MTEwMjAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGU3ZTM4MmE4MTZkZTRkMmM5ZmZiNGVkMGMxMjIwZjI3ODUyZmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAZUqkzXW2J+swTMbFRAmnh6Vxne
o7orDnfbz9HgZItOQRXgxQnIHr05/mnwoHUe6kBlOSqA4s+OSwyB0FysMTNQHS8l
5SSZRvjyXgKlWSSwE1gD6H7HU+vYp3gxggnVaf4S8A7InAPX7RK4xNfEjq58WE/4
DsFdWzldTp7W0tAGtIchkxGoEfz3Ncn4uBzeag/1aeHRyJCXLtgOZbknaSaQKhq1
NYbW7egb0BLwhTKlxB1fsdycOMvOg0OXb+qqL5n1iv5jLj+oYevQM0zMlZN1t0es
XzFX4uLtZwyquWvHZG0dI3VJ+Of+uCrvOp75AQ+xMJmhF2VQXc4EqkbbiQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA3n44KoFt5NLJ/7TtDBIg8nhS/dMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvRGVmamdxZ1czazBzbl90TzBNRWlEeWVGTDkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBZ1JmAwQB
Z39MMA0GCSqGSIb3DQEBCwUAA4IBAQAroe01q8AY3W8lMMumjEecoyfFwGmJc51o
Vrh4pSCdMHkrKBfpHqlrfv7wIQiqjIW9siRPxUoBSEqgk0afJOLA1KTpKwpkmAJK
9zYtakWTPFHcoLMmdVobD0XlJwRf3TIHukYdwPORgklXmuYqahsGELCKpXeUKHgN
fowjR9iknof6IpqyjgRw8aMyH5Q3jzRbGWRfTNQ7P7M2vZhE618QhM7C6yby/zAa
feAnsh/W1DLy5DBGcSbQKB56VZlkPbDf+POeESFruwVI5Jn+FF6qayAxCp3W8h0H
gFogk2ScB8PIJ3ht1lyjQHkN8virAdywTK5GLbpyHJV6nLH4KDbs
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:27 2025 by rpki-client