Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/acHzabKTxQItZ_lUgjeBHcntuVk.roa
File: acHzabKTxQItZ_lUgjeBHcntuVk.roa (raw, json)
Hash identifier: ECBtXcC/973WUU8/kufMw9/3iO/wPTD2NVRSwiqEFmo=
Subject key identifier: 69:C1:F3:69:B2:93:C5:02:2D:67:F9:54:82:37:81:1D:C9:ED:B9:59
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0198463266D7ED108AF3D18863414EB8DF08
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/acHzabKTxQItZ_lUgjeBHcntuVk.roa
Signing time: Sat 26 Jul 2025 10:06:04 +0000
ROA not before: Sat 26 Jul 2025 10:06:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215930
IP address blocks: 62.60.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:32:66:d7:ed:10:8a:f3:d1:88:63:41:4e:b8:df:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 26 10:06:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69c1f369b293c5022d67f9548237811dc9edb959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:47:11:0d:2c:c0:78:5d:87:78:f6:0b:7f:
7a:05:0e:6a:05:85:07:07:f6:26:bc:a0:68:b8:a9:
bf:73:4b:a9:e2:30:b5:05:05:c0:55:5a:e3:39:38:
42:c9:01:7e:06:16:37:3a:f7:ac:25:ac:17:f6:e7:
cf:39:a4:00:77:ef:93:a2:6d:5c:a7:87:04:55:ff:
86:6f:01:2b:57:7d:28:50:94:53:32:8f:c6:c8:a8:
4f:33:ca:81:a9:31:95:4c:4a:dd:0e:21:c9:b2:0b:
31:72:5e:bb:16:0b:52:fe:e9:db:b1:29:53:b8:68:
97:89:25:8b:cc:ad:ab:72:a6:3f:7c:ce:a2:1c:0a:
36:dd:cc:39:d8:28:6b:bb:50:1b:fa:24:e7:78:48:
46:4e:9d:44:a9:d1:91:f3:ea:f3:27:0f:a7:97:32:
1d:af:87:a6:d8:d6:9b:01:46:6f:ae:3e:98:09:26:
19:94:8b:29:5f:e8:4d:9a:57:c9:6d:7e:d1:e3:83:
91:98:33:93:3b:de:a9:d4:46:7f:a5:f2:24:1c:cb:
dc:51:e5:9b:47:d9:36:b9:e1:a0:c1:43:02:e0:d9:
70:d7:85:e0:83:e5:ae:cb:0d:3f:d1:85:b6:e2:b0:
b7:54:13:d6:9b:68:48:6e:75:52:2d:9d:65:8b:d0:
b1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C1:F3:69:B2:93:C5:02:2D:67:F9:54:82:37:81:1D:C9:ED:B9:59
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/acHzabKTxQItZ_lUgjeBHcntuVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.208.0/24
Signature Algorithm: sha256WithRSAEncryption
74:43:78:95:a8:0b:b9:28:a5:75:92:84:c5:a1:86:7e:7c:3c:
51:27:5e:2a:66:f4:55:c8:8e:0c:f9:ff:8b:08:88:c9:09:4e:
92:99:7b:fc:12:c9:0c:bb:c5:f7:23:54:23:db:b0:1f:dc:60:
b7:53:4d:c0:00:99:08:c2:51:b7:f4:76:86:35:00:95:f2:de:
b0:d1:23:74:b6:90:cf:aa:5b:e2:f0:f0:54:d3:3f:8e:63:85:
2c:d0:6c:33:87:97:96:4a:a8:87:e7:91:34:f3:7e:a9:e8:ee:
c1:48:85:f2:8f:63:4b:f3:0b:d5:56:e5:b9:f9:4d:82:1f:94:
dc:37:19:88:36:50:02:0d:45:7c:41:77:65:04:03:01:67:42:
6b:1c:09:7b:2e:78:05:9a:36:c3:d3:92:28:82:79:3a:17:2b:
ed:b1:ea:1b:1e:d8:97:bb:7c:2f:85:15:5f:3b:69:89:eb:c9:
c2:e4:10:34:64:2d:b9:d0:9f:53:f3:d5:a2:27:ad:0f:80:f3:
c4:db:6e:b7:dc:3e:af:97:4c:fc:f2:75:1d:e7:dc:ef:ae:86:
82:28:a6:4d:b6:20:87:ce:30:21:ca:45:ad:69:c5:ab:f9:f0:
d3:b7:e2:11:23:3e:d8:8d:6f:91:12:43:9f:7b:61:a0:35:5e:
e7:9f:e3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:47:17 2025 by rpki-client