Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Y2YILDsbdCLlP8-r1KNzKLAbNYo.roa
File: Y2YILDsbdCLlP8-r1KNzKLAbNYo.roa (raw, json)
Hash identifier: i1clgB9jbW2qji3o2GMb+nasxKoNVYdhbKHCWdPQ0Z8=
Subject key identifier: 63:66:08:2C:3B:1B:74:22:E5:3F:CF:AB:D4:A3:73:28:B0:1B:35:8A
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01987D2B5864E7A7D95C2D033D70CAF85732
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Y2YILDsbdCLlP8-r1KNzKLAbNYo.roa
Signing time: Wed 06 Aug 2025 02:17:29 +0000
ROA not before: Wed 06 Aug 2025 02:17:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215829
IP address blocks: 62.60.148.0/22 maxlen: 24
62.60.152.0/23 maxlen: 24
62.60.154.0/23 maxlen: 24
62.60.156.0/22 maxlen: 24
62.60.172.0/22 maxlen: 24
62.60.176.0/22 maxlen: 24
62.60.186.0/24 maxlen: 24
62.60.216.0/23 maxlen: 24
62.60.228.0/22 maxlen: 24
62.60.235.0/24 maxlen: 24
62.60.236.0/22 maxlen: 24
62.60.240.0/22 maxlen: 24
62.60.244.0/22 maxlen: 24
62.60.248.0/24 maxlen: 24
62.60.249.0/24 maxlen: 24
62.60.250.0/24 maxlen: 24
62.60.251.0/24 maxlen: 24
62.60.252.0/22 maxlen: 24
213.176.64.0/22 maxlen: 24
213.176.74.0/23 maxlen: 24
213.176.92.0/22 maxlen: 24
213.176.112.0/22 maxlen: 24
213.176.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:2b:58:64:e7:a7:d9:5c:2d:03:3d:70:ca:f8:57:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 6 02:17:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6366082c3b1b7422e53fcfabd4a37328b01b358a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:30:62:55:7b:d6:40:ee:70:94:cf:f3:d1:eb:
04:ac:ab:63:ad:20:37:27:dc:8e:91:c4:e2:ce:02:
f9:f2:90:45:56:7d:ec:81:21:6b:cb:9b:a4:b9:84:
31:b3:f6:0b:c4:52:de:ec:86:f7:c9:2d:81:d6:20:
31:0c:77:27:4d:74:7a:96:2e:84:53:9c:32:63:2c:
0a:d3:a2:52:cb:4e:b2:06:bb:c2:a7:ee:4f:58:90:
c9:08:2f:e8:9b:9c:7a:ea:02:24:d3:49:0a:83:80:
fc:af:b0:0e:b6:6b:21:18:eb:c9:f6:a2:ee:a9:a8:
81:06:ca:b2:16:b1:40:0d:60:34:eb:dd:74:ed:e4:
a3:eb:ca:e0:17:87:96:49:fb:35:5c:78:a1:20:76:
94:97:d6:45:d3:5e:6b:f4:5d:ad:16:97:86:e9:8e:
ac:17:29:0c:9f:d2:9c:42:11:ee:88:73:82:cb:79:
f6:d4:26:c7:4f:22:c9:dc:b8:31:a2:89:d8:35:c1:
6e:e7:4a:1a:e0:e0:c7:e0:4b:f8:00:52:19:03:fd:
79:5b:78:d7:f3:4a:bc:fd:b1:b6:1d:71:a9:6d:54:
cf:23:6a:3e:31:b6:4d:f7:3c:11:05:b1:f0:17:87:
87:2f:1b:37:4d:bf:6d:a5:8a:71:82:eb:f8:ab:e5:
7c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:66:08:2C:3B:1B:74:22:E5:3F:CF:AB:D4:A3:73:28:B0:1B:35:8A
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Y2YILDsbdCLlP8-r1KNzKLAbNYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.148.0-62.60.159.255
62.60.172.0-62.60.179.255
62.60.186.0/24
62.60.216.0/23
62.60.228.0/22
62.60.235.0-62.60.255.255
213.176.64.0/22
213.176.74.0/23
213.176.92.0/22
213.176.112.0/21
Signature Algorithm: sha256WithRSAEncryption
58:7c:45:18:12:e0:13:62:e0:c3:bb:d1:31:ea:ca:35:d9:8b:
ba:08:a6:aa:05:c2:22:5f:45:b9:29:e0:82:a4:9e:38:58:78:
fd:64:e4:c7:d7:54:b7:07:be:f2:69:c2:2f:4f:f6:ee:ad:4b:
33:83:0f:96:93:60:c7:6e:2d:bc:48:08:c1:cf:f7:5c:f9:78:
c4:2f:f2:42:55:9c:40:a3:c7:f2:a9:cb:8f:4f:6a:1a:91:47:
17:1b:4e:36:99:e3:12:77:60:29:0b:c5:29:8c:3a:df:82:66:
b3:a7:ae:5a:2a:91:da:fb:fa:8d:88:84:07:12:f4:bf:fb:1d:
86:a5:21:74:d4:bb:e8:5e:8a:1c:1d:3f:24:c1:8d:1e:1d:ac:
c4:38:1b:a9:24:43:0e:cd:bf:07:cf:1c:76:8e:eb:59:30:2d:
ad:2e:3d:62:4e:13:0b:34:10:29:8f:0a:28:fc:25:f8:f0:0b:
8c:42:47:14:51:78:ae:a8:50:29:3c:e9:01:69:36:da:64:cb:
c4:92:5e:58:0f:28:71:0b:3a:a5:df:e6:af:35:54:96:ac:e3:
2a:f3:75:48:32:e9:30:02:d8:4a:24:58:e9:86:79:63:e4:89:
99:17:73:ac:6e:53:a4:15:27:4c:2b:47:fa:19:bc:0e:4a:7a:
36:91:bb:d4
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgISAZh9K1hk56fZXC0DPXDK+FcyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjUwODA2MDIxNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzY2MDgyYzNiMWI3NDIyZTUzZmNmYWJkNGEzNzMyOGIwMWIzNThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTBiVXvWQO5wlM/z0esErKtjrSA3
J9yOkcTizgL58pBFVn3sgSFry5ukuYQxs/YLxFLe7Ib3yS2B1iAxDHcnTXR6li6E
U5wyYywK06JSy06yBrvCp+5PWJDJCC/om5x66gIk00kKg4D8r7AOtmshGOvJ9qLu
qaiBBsqyFrFADWA069107eSj68rgF4eWSfs1XHihIHaUl9ZF015r9F2tFpeG6Y6s
FykMn9KcQhHuiHOCy3n21CbHTyLJ3LgxoonYNcFu50oa4ODH4Ev4AFIZA/15W3jX
80q8/bG2HXGpbVTPI2o+MbZN9zwRBbHwF4eHLxs3Tb9tpYpxguv4q+V8nwIDAQAB
o4ICVjCCAlIwHQYDVR0OBBYEFGNmCCw7G3Qi5T/Pq9SjcyiwGzWKMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvWTJZSUxEc2JkQ0xsUDgtcjFLTnpLTEFiTllvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzBZBAIAATBTMAwDBAI+PJQD
BAU+PIAwDAMEAj48rAMEAj48sAMEAD48ugMEAT482AMEAj485DALAwQAPjzrAwMA
PjwDBALVsEADBAHVsEoDBALVsFwDBAPVsHAwDQYJKoZIhvcNAQELBQADggEBAFh8
RRgS4BNi4MO70THqyjXZi7oIpqoFwiJfRbkp4IKknjhYeP1k5MfXVLcHvvJpwi9P
9u6tSzODD5aTYMduLbxICMHP91z5eMQv8kJVnECjx/Kpy49PahqRRxcbTjaZ4xJ3
YCkLxSmMOt+CZrOnrloqkdr7+o2IhAcS9L/7HYalIXTUu+heihwdPyTBjR4drMQ4
G6kkQw7NvwfPHHaO61kwLa0uPWJOEws0ECmPCij8JfjwC4xCRxRReK6oUCk86QFp
Ntpky8SSXlgPKHELOqXf5q81VJas4yrzdUgy6TAC2EokWOmGeWPkiZkXc6xuU6QV
J0wrR/oZvA5KejaRu9Q=
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:42:08 2025 by rpki-client