Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/N_dRdP3Vy3VH4WoO29OeUbT3HRA.roa
File: N_dRdP3Vy3VH4WoO29OeUbT3HRA.roa (raw, json)
Hash identifier: QK3AJZmSXmdelaURKRsO/zKuEz/6K3I0rSInEMyZ/EQ=
Subject key identifier: 37:F7:51:74:FD:D5:CB:75:47:E1:6A:0E:DB:D3:9E:51:B4:F7:1D:10
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01997770C8F9506706BB77EBCA6242C148BD
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/N_dRdP3Vy3VH4WoO29OeUbT3HRA.roa
Signing time: Tue 23 Sep 2025 16:38:24 +0000
ROA not before: Tue 23 Sep 2025 16:38:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20648
IP address blocks: 103.63.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:77:70:c8:f9:50:67:06:bb:77:eb:ca:62:42:c1:48:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 23 16:38:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37f75174fdd5cb7547e16a0edbd39e51b4f71d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e9:eb:c5:73:bb:7b:e0:cf:cf:dc:bf:53:0e:
cf:39:d1:69:95:f4:7f:10:8e:ff:e6:b9:83:d8:52:
45:6d:e5:b5:85:95:0d:6d:00:df:f2:90:bf:1b:61:
2c:fb:dd:9d:11:dc:81:91:5e:a3:45:6c:82:c7:60:
a5:4b:37:66:a4:00:3b:75:28:f8:cd:b1:34:b2:4e:
af:b9:c9:37:e2:2e:71:2f:d2:2c:a9:6e:6a:66:63:
3f:8b:a7:0f:15:de:bd:76:ec:ca:5f:63:9c:90:d4:
d0:81:d5:c9:f4:a4:8d:01:9c:20:2d:20:b2:87:01:
f5:fa:a9:e1:d9:bc:ae:35:c2:42:fa:db:ba:c7:14:
db:0a:3a:c8:84:fd:3f:5b:44:53:03:0e:b4:91:a9:
50:18:4a:6b:ea:e3:91:dc:7b:6b:95:d1:53:d5:0b:
21:32:c1:e3:e7:ce:61:b3:d8:40:7e:19:34:b3:6c:
7b:04:08:f4:ae:0a:a9:f0:a1:d6:d5:10:b4:48:0d:
05:03:23:93:55:2e:25:1d:5f:8c:d6:6d:bd:03:30:
14:42:1d:86:98:85:71:fa:7c:59:3d:6a:c4:37:cf:
d9:61:2b:5e:fe:0c:f2:c2:50:5c:be:cd:a4:5b:18:
4c:c2:b2:c1:77:4f:6b:0b:06:b9:de:20:d1:6a:f8:
23:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F7:51:74:FD:D5:CB:75:47:E1:6A:0E:DB:D3:9E:51:B4:F7:1D:10
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/N_dRdP3Vy3VH4WoO29OeUbT3HRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.63.31.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:1b:bb:b1:38:59:18:c5:37:0b:7d:4c:49:3b:5e:be:f3:2f:
f9:0b:7f:c4:54:ca:a5:f9:38:c0:03:6f:b3:15:89:10:b4:25:
fc:a5:56:ee:73:2f:54:b3:09:11:64:5d:87:9c:8d:00:21:7a:
ef:96:5f:bb:db:12:55:be:50:e0:ea:72:db:ef:12:88:8a:b8:
1d:5d:fb:18:ba:16:b1:0a:1b:7a:82:d1:73:a5:89:83:39:40:
1e:07:da:f7:1f:ed:d7:34:7a:2c:ff:9c:af:d3:42:22:f6:a4:
c1:77:9d:f4:ad:21:2d:82:44:c1:29:5e:4e:45:50:74:29:04:
13:72:2a:bf:16:5a:cd:09:c2:b3:7e:5e:79:9f:db:30:4d:54:
cb:79:8d:aa:1b:4c:c2:8a:24:c7:85:7f:4c:f1:46:b2:8a:61:
3f:3a:a1:b3:f1:a9:e4:e6:11:af:74:79:af:43:3a:d9:4b:29:
ba:86:23:e7:75:5f:c4:84:88:6f:79:ed:32:2d:cc:58:f7:e7:
3c:f6:df:25:f8:93:42:65:2d:29:4c:11:15:21:cf:0f:c7:13:
64:02:18:56:2a:07:fb:6f:a5:9d:f4:62:e9:d7:2c:02:df:b0:
f6:5a:5b:98:97:9c:67:34:36:75:cc:d7:dc:88:97:f9:71:3b:
39:40:35:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZl3cMj5UGcGu3frymJCwUi9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjUwOTIzMTYzODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2Y3NTE3NGZkZDVjYjc1NDdlMTZhMGVkYmQzOWU1MWI0ZjcxZDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+nrxXO7e+DPz9y/Uw7POdFplfR/
EI7/5rmD2FJFbeW1hZUNbQDf8pC/G2Es+92dEdyBkV6jRWyCx2ClSzdmpAA7dSj4
zbE0sk6vuck34i5xL9IsqW5qZmM/i6cPFd69duzKX2OckNTQgdXJ9KSNAZwgLSCy
hwH1+qnh2byuNcJC+tu6xxTbCjrIhP0/W0RTAw60kalQGEpr6uOR3HtrldFT1Qsh
MsHj585hs9hAfhk0s2x7BAj0rgqp8KHW1RC0SA0FAyOTVS4lHV+M1m29AzAUQh2G
mIVx+nxZPWrEN8/ZYSte/gzywlBcvs2kWxhMwrLBd09rCwa53iDRavgjEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDf3UXT91ct1R+FqDtvTnlG09x0QMB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvTl9kUmRQM1Z5M1ZINFdvTzI5T2VVYlQzSFJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZz8fMA0G
CSqGSIb3DQEBCwUAA4IBAQB7G7uxOFkYxTcLfUxJO16+8y/5C3/EVMql+TjAA2+z
FYkQtCX8pVbucy9UswkRZF2HnI0AIXrvll+72xJVvlDg6nLb7xKIirgdXfsYuhax
Cht6gtFzpYmDOUAeB9r3H+3XNHos/5yv00Ii9qTBd530rSEtgkTBKV5ORVB0KQQT
ciq/FlrNCcKzfl55n9swTVTLeY2qG0zCiiTHhX9M8UayimE/OqGz8ank5hGvdHmv
QzrZSym6hiPndV/EhIhvee0yLcxY9+c89t8l+JNCZS0pTBEVIc8PxxNkAhhWKgf7
b6Wd9GLp1ywC37D2WluYl5xnNDZ1zNfciJf5cTs5QDXJ
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:52 2025 by rpki-client