Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/M9icYFpRdfuUP8GszU75Wi0Nv1A.roa
File: M9icYFpRdfuUP8GszU75Wi0Nv1A.roa (raw, json)
Hash identifier: enDVpQ7OlTMZIE4utPL8AG9YkPcxUy6DkUw1A6uMG2w=
Subject key identifier: 33:D8:9C:60:5A:51:75:FB:94:3F:C1:AC:CD:4E:F9:5A:2D:0D:BF:50
Certificate issuer: /CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
Certificate serial: 0199E32C59B4C9036B6251A79B07568A78D2
Authority key identifier: 97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/M9icYFpRdfuUP8GszU75Wi0Nv1A.roa
Signing time: Tue 14 Oct 2025 14:42:38 +0000
ROA not before: Tue 14 Oct 2025 14:42:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197537
IP address blocks: 103.156.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e3:2c:59:b4:c9:03:6b:62:51:a7:9b:07:56:8a:78:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
Validity
Not Before: Oct 14 14:42:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33d89c605a5175fb943fc1accd4ef95a2d0dbf50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:24:d0:c8:8c:67:01:c3:3c:00:d0:8f:57:8f:
7d:be:51:bf:ac:d3:0a:95:ee:16:38:67:7b:f4:3b:
c3:05:d4:30:06:0b:7c:fa:86:b9:bb:53:9d:ca:a1:
18:25:8a:68:29:56:2e:28:0c:e9:9f:3a:d2:52:42:
c0:8e:17:f4:aa:af:a6:75:13:1d:53:a5:61:ca:8d:
a9:a3:36:18:06:b8:4d:ad:cc:ea:cc:d4:26:32:12:
e9:d0:a8:e1:50:78:b6:e0:bd:4f:c2:b2:0e:57:ce:
4c:03:18:c8:89:61:bc:56:f1:f3:c4:6d:c4:cd:07:
3e:e6:3d:ff:74:72:65:18:87:24:21:ab:58:02:01:
32:bd:4f:ac:1e:6b:85:1d:3c:93:5a:b9:55:c6:fb:
d7:a1:13:08:97:73:c3:0d:bc:4c:8b:fe:25:6c:41:
c6:2b:49:77:fe:77:27:c7:16:48:a2:4e:e8:fe:5e:
22:63:77:f7:30:e0:cd:b4:1d:e0:b4:4b:b0:a5:19:
b1:f6:bf:af:e5:66:ae:03:60:48:12:31:0c:b1:73:
49:f3:8a:84:cc:30:f0:7c:8f:7c:68:79:ff:ea:17:
b2:72:ba:ab:59:a9:7b:01:04:af:81:4e:61:3d:8c:
c5:3a:3d:d8:64:0e:f8:dd:4a:20:b8:47:07:73:39:
95:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D8:9C:60:5A:51:75:FB:94:3F:C1:AC:CD:4E:F9:5A:2D:0D:BF:50
X509v3 Authority Key Identifier:
keyid:97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/M9icYFpRdfuUP8GszU75Wi0Nv1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.156.185.0/24
Signature Algorithm: sha256WithRSAEncryption
07:29:8e:86:86:ad:dc:41:0a:87:88:56:6b:b6:29:80:af:04:
55:92:4b:5f:e1:58:0f:b5:14:d8:c4:29:0c:3c:81:2d:a3:68:
cc:88:72:31:29:53:e8:60:3f:80:ba:2a:34:27:58:be:c8:ca:
3c:2d:8a:03:c2:01:a4:6d:4c:a5:b5:9d:ec:c8:23:fd:5b:ae:
86:4c:d1:1a:9a:86:68:83:11:b4:cd:39:b6:32:26:e1:7c:e4:
8a:f1:ff:7d:c1:01:ea:d8:e2:03:35:e1:b2:4f:d1:88:e8:ce:
12:e0:e4:73:02:28:9b:48:cf:6a:e0:6c:aa:52:f9:6a:a2:c7:
fc:c8:a2:34:f8:e8:d1:cb:16:00:fb:e4:d9:a7:94:d2:72:47:
65:16:d5:f5:42:4e:0d:1d:2c:13:52:08:c4:8f:4a:63:d7:7f:
2e:b9:38:2c:fc:51:8b:fe:e0:79:ec:89:58:f1:d7:99:9f:fc:
b8:f1:96:6e:80:f2:e5:8e:97:fe:5b:50:aa:d1:0f:cb:f6:8c:
70:35:8e:73:98:81:87:46:1d:85:e5:50:32:cf:32:d7:0d:b2:
ce:54:32:b0:99:e0:a0:3f:63:c4:ed:79:de:c2:db:d7:76:71:
29:15:fa:34:96:1f:49:bf:4b:55:a6:78:b2:4d:76:03:fa:ad:
22:9a:de:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:24:20 2025 by rpki-client