Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/2QQsJJ6tXNfySMKhFuk0X4eceCs.roa
File: 2QQsJJ6tXNfySMKhFuk0X4eceCs.roa (raw, json)
Hash identifier: ThLO2KhLuPTXapRFxGR4popYmJIUwR3wQqbgs/aqfNw=
Subject key identifier: D9:04:2C:24:9E:AD:5C:D7:F2:48:C2:A1:16:E9:34:5F:87:9C:78:2B
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019841D3A18174BBEBA7661471C09632F36F
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/2QQsJJ6tXNfySMKhFuk0X4eceCs.roa
Signing time: Fri 25 Jul 2025 13:44:05 +0000
ROA not before: Fri 25 Jul 2025 13:44:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211056
IP address blocks: 62.60.184.0/23 maxlen: 24
62.60.189.0/24 maxlen: 24
62.60.194.0/23 maxlen: 24
62.60.195.0/24 maxlen: 24
213.176.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:d3:a1:81:74:bb:eb:a7:66:14:71:c0:96:32:f3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 25 13:44:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9042c249ead5cd7f248c2a116e9345f879c782b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:bb:22:e6:3e:60:00:f4:e4:97:7d:85:a0:
5f:8e:e9:9d:30:4d:ff:89:92:b9:c5:f7:80:a7:2f:
c7:6e:e9:b4:15:3d:ba:f4:44:7c:6c:be:2c:0e:fa:
21:28:60:9d:15:d1:89:cd:a3:47:33:53:65:5d:e7:
40:ab:f9:1d:7f:e5:f5:4e:30:80:c8:81:5f:7d:77:
a2:f3:dc:99:51:83:83:00:58:8b:f2:83:fd:88:c2:
15:f9:a0:ed:00:4b:ac:95:ec:69:27:a6:71:f2:92:
12:6c:fa:be:30:87:f1:aa:e9:48:e2:4b:93:4b:9d:
a9:4d:e6:be:71:f6:4d:5c:93:46:01:7d:f9:47:f8:
c4:f1:0c:e3:9a:77:2d:64:71:f9:02:4b:a6:0e:12:
91:e9:2f:e7:b9:71:40:b8:ea:3e:8d:75:d2:4f:6a:
d6:7c:3a:d2:94:89:12:da:05:f7:15:ba:5d:df:54:
f5:8a:7d:3d:58:92:2a:9a:2d:77:a7:7c:08:c8:0e:
be:27:eb:21:84:b1:63:d2:77:15:41:9e:a3:d7:40:
bd:e9:b9:d8:dc:43:b9:cd:e0:b3:61:eb:fa:c0:3e:
90:77:ce:14:6a:89:a9:3c:ee:d0:3e:b4:17:f5:93:
d2:bf:42:f5:4f:47:fb:c7:41:ee:29:96:bf:3a:b5:
6a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:04:2C:24:9E:AD:5C:D7:F2:48:C2:A1:16:E9:34:5F:87:9C:78:2B
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/2QQsJJ6tXNfySMKhFuk0X4eceCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.184.0/23
62.60.189.0/24
62.60.194.0/23
213.176.121.0/24
Signature Algorithm: sha256WithRSAEncryption
97:24:48:8c:f1:b9:69:48:2a:bd:41:9f:1b:f6:1c:64:52:fd:
28:a7:85:31:52:a3:1d:2c:f0:cd:50:62:f1:c3:68:84:13:60:
6b:91:51:73:63:0f:15:7e:43:7c:84:83:79:43:3d:9a:45:1f:
01:32:df:d4:51:67:52:df:a9:41:a7:c3:47:e8:d5:8b:58:03:
71:39:99:38:36:0a:54:92:1a:27:0d:52:b0:ea:6a:f2:ec:55:
32:d3:fe:3c:9b:82:b3:c4:a0:d8:7e:91:b4:9b:99:26:e6:b0:
f2:fc:54:1a:60:4e:09:ae:0b:d3:29:c5:17:4d:7f:f1:d3:37:
b6:ea:c7:0a:39:f5:c3:83:98:b0:11:3f:9c:c1:69:e5:3b:2d:
48:8a:10:61:65:fc:eb:62:a8:cb:34:8e:b1:51:98:00:5f:3c:
02:d4:29:27:43:1a:5f:38:3b:f6:92:00:d8:c3:be:60:23:bf:
64:a3:4d:92:e6:e0:dc:e1:bc:0a:bb:4b:08:26:b9:32:36:dc:
2b:c8:79:cc:3c:90:75:66:06:d2:df:88:51:bd:fb:ea:8b:4d:
7c:fd:cf:a7:b7:1d:cf:1d:55:ec:00:81:8a:86:b3:1f:b7:63:
02:f7:20:6c:f2:2f:a1:7b:00:32:1e:9b:1d:3d:1e:cc:1d:68:
06:e8:01:e5
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZhB06GBdLvrp2YUccCWMvNvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjUwNzI1MTM0NDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTA0MmMyNDllYWQ1Y2Q3ZjI0OGMyYTExNmU5MzQ1Zjg3OWM3ODJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/C7IuY+YAD05Jd9haBfjumdME3/
iZK5xfeApy/Hbum0FT269ER8bL4sDvohKGCdFdGJzaNHM1NlXedAq/kdf+X1TjCA
yIFffXei89yZUYODAFiL8oP9iMIV+aDtAEuslexpJ6Zx8pISbPq+MIfxqulI4kuT
S52pTea+cfZNXJNGAX35R/jE8QzjmnctZHH5AkumDhKR6S/nuXFAuOo+jXXST2rW
fDrSlIkS2gX3Fbpd31T1in09WJIqmi13p3wIyA6+J+shhLFj0ncVQZ6j10C96bnY
3EO5zeCzYev6wD6Qd84UaompPO7QPrQX9ZPSv0L1T0f7x0HuKZa/OrVq+wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFNkELCSerVzX8kjCoRbpNF+HnHgrMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvMlFRc0pKNnRYTmZ5U01LaEZ1azBYNGVjZUNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBPjy4AwQA
Pjy9AwQBPjzCAwQA1bB5MA0GCSqGSIb3DQEBCwUAA4IBAQCXJEiM8blpSCq9QZ8b
9hxkUv0op4UxUqMdLPDNUGLxw2iEE2BrkVFzYw8VfkN8hIN5Qz2aRR8BMt/UUWdS
36lBp8NH6NWLWANxOZk4NgpUkhonDVKw6mry7FUy0/48m4KzxKDYfpG0m5km5rDy
/FQaYE4JrgvTKcUXTX/x0ze26scKOfXDg5iwET+cwWnlOy1IihBhZfzrYqjLNI6x
UZgAXzwC1CknQxpfODv2kgDYw75gI79ko02S5uDc4bwKu0sIJrkyNtwryHnMPJB1
ZgbS34hRvfvqi018/c+ntx3PHVXsAIGKhrMft2MC9yBs8i+hewAyHpsdPR7MHWgG
6AHl
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:09:56 2025 by rpki-client