Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/2-cHxc1zMtCcD-GzEWoOdBTTabs.roa
File: 2-cHxc1zMtCcD-GzEWoOdBTTabs.roa (raw, json)
Hash identifier: 52l6FusBa/jk0I0sBfVHrE4CEvIY/yW7vGg69O8iKSQ=
Subject key identifier: DB:E7:07:C5:CD:73:32:D0:9C:0F:E1:B3:11:6A:0E:74:14:D3:69:BB
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0198463D6390B6CF647B4CBA8C7FAB6A42C8
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/2-cHxc1zMtCcD-GzEWoOdBTTabs.roa
Signing time: Sat 26 Jul 2025 10:18:05 +0000
ROA not before: Sat 26 Jul 2025 10:18:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214922
IP address blocks: 62.60.185.0/24 maxlen: 24
62.60.188.0/24 maxlen: 24
62.60.192.0/24 maxlen: 24
62.60.193.0/24 maxlen: 24
62.60.220.0/24 maxlen: 24
62.60.221.0/24 maxlen: 24
62.60.222.0/23 maxlen: 24
62.60.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:3d:63:90:b6:cf:64:7b:4c:ba:8c:7f:ab:6a:42:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 26 10:18:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbe707c5cd7332d09c0fe1b3116a0e7414d369bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:f7:d2:6e:ed:87:a4:67:c3:fe:4b:f1:eb:
c5:09:ae:17:96:e6:2d:67:2b:cc:9b:12:cc:9f:db:
0a:29:9e:5e:3c:a8:ab:54:12:58:c7:c7:6d:95:d6:
1c:63:fd:c2:c0:46:60:83:91:a0:ea:2a:b0:af:eb:
78:ae:fe:6d:7d:78:cc:77:8b:50:d9:32:80:6c:c2:
86:49:a5:e2:cb:8e:af:65:b3:e0:3a:d6:bd:ca:40:
31:23:56:dd:81:a6:0d:e5:bd:c7:0e:70:a6:57:5b:
f8:38:77:c9:dd:f5:ed:1a:c3:2b:24:a1:82:69:e8:
8c:65:e5:c5:70:9d:cc:c3:b4:04:f6:b8:aa:57:69:
69:96:b8:93:7e:f2:a9:1d:b6:9f:93:b0:05:ca:a1:
df:96:3c:e7:4b:73:82:6c:cd:03:a9:ea:c2:b3:2e:
3f:4f:79:9f:b7:3b:4d:2f:9b:ce:b1:7a:7f:01:52:
c6:6e:72:c4:f3:81:2b:26:43:f0:6b:49:cf:c6:19:
20:0a:21:fe:32:2e:4a:96:e5:b8:dc:3a:7c:45:ae:
0f:60:1c:79:57:2b:92:33:d2:c5:4f:65:74:c6:08:
16:43:31:60:6b:f4:23:39:95:ed:e5:f4:9e:dd:5a:
50:73:7b:c9:22:7b:2c:62:81:68:39:4b:ad:e8:b3:
79:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E7:07:C5:CD:73:32:D0:9C:0F:E1:B3:11:6A:0E:74:14:D3:69:BB
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/2-cHxc1zMtCcD-GzEWoOdBTTabs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.185.0/24
62.60.188.0/24
62.60.192.0/23
62.60.220.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:cf:61:10:07:63:34:ee:1b:d0:f6:7b:9c:44:a3:cc:9a:52:
f7:a7:04:47:31:bd:62:18:34:fb:01:3b:a4:e3:ec:71:5d:ea:
f1:02:07:f2:7c:bb:9f:70:af:53:5e:ed:0a:6c:fb:b0:71:b3:
a0:78:41:ac:fa:51:36:9d:0e:6b:9e:93:14:10:8b:db:01:60:
44:d1:46:82:39:70:74:81:20:5e:1f:0c:7a:99:b7:65:84:b1:
6c:81:06:38:14:67:1b:f4:e3:eb:fd:7b:7b:ff:3a:8f:13:39:
c0:6a:b5:a3:56:70:f4:02:d8:fe:7c:c3:af:9f:28:63:97:49:
7d:d4:58:ed:f3:ad:93:2f:19:31:dd:4d:e5:42:7b:75:34:7f:
ec:b5:9c:4c:c3:fe:d5:8d:f5:8e:b0:fa:90:d8:7b:5c:dd:38:
fc:be:95:8a:ef:28:7e:dc:70:e7:6a:ea:6a:3d:03:da:69:8c:
99:4c:87:91:80:dd:83:1d:86:60:55:a2:60:ef:69:65:5c:ca:
27:e3:6b:3e:c8:ff:cf:75:d4:1a:45:9f:22:08:c8:9e:ae:65:
57:10:47:6d:bd:a5:c8:ba:06:45:1a:b5:cb:8a:15:a9:c5:94:
85:03:06:23:2c:16:cb:3c:1f:01:9d:22:63:0c:d3:36:c5:e9:
49:51:b3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:20:50 2025 by rpki-client