Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/bNj9mnPiOJgAqcXA8klOr3r289U.roa
File: bNj9mnPiOJgAqcXA8klOr3r289U.roa (raw, json)
Hash identifier: b/bj+v4f/YBSJP7p1ofRiHYABXW3D1c5l42Ks9G5VFQ=
Subject key identifier: 6C:D8:FD:9A:73:E2:38:98:00:A9:C5:C0:F2:49:4E:AF:7A:F6:F3:D5
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0198463610F59E936AB16A4FF67D30A33F2F
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/bNj9mnPiOJgAqcXA8klOr3r289U.roa
Signing time: Sat 26 Jul 2025 10:10:05 +0000
ROA not before: Sat 26 Jul 2025 10:10:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211904
IP address blocks: 62.60.163.0/24 maxlen: 24
62.60.190.0/23 maxlen: 24
213.176.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:36:10:f5:9e:93:6a:b1:6a:4f:f6:7d:30:a3:3f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 26 10:10:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cd8fd9a73e2389800a9c5c0f2494eaf7af6f3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:31:66:7f:80:6a:b3:48:52:d3:6a:44:0e:f3:
2c:4d:f5:e0:1c:d1:0c:44:28:d1:39:a1:e5:66:8d:
a9:4c:a3:e8:7e:a2:c1:10:fd:a2:bb:78:a3:ea:24:
6c:b1:46:13:ad:d0:9e:6b:60:64:54:69:5d:d1:9d:
f1:a5:22:f2:5b:16:94:77:23:9e:f9:34:54:7b:81:
e9:a9:e5:8b:b0:38:ab:b2:f7:9e:e8:6f:62:77:22:
1f:62:95:84:ca:cd:1a:c6:f3:45:17:1e:77:50:10:
b3:8d:4c:10:e3:cd:5a:9e:73:41:22:e3:95:2a:99:
ec:c4:e0:a5:15:83:bf:e7:fe:66:e7:21:5d:07:fa:
62:80:4f:ff:1f:42:53:76:0f:0c:2f:1b:79:0d:6e:
75:73:6f:bc:0e:c3:7f:52:db:2a:53:4c:62:c8:46:
79:6f:73:18:1f:07:8c:fc:1a:aa:07:95:89:3d:01:
57:db:95:d8:f6:f9:9c:33:7f:a0:6d:ab:ee:7e:6a:
ff:9d:3d:01:3a:72:50:7c:99:01:7b:3e:90:d6:8d:
88:88:71:2c:0a:45:28:15:76:5f:d7:45:5c:26:98:
15:d0:6c:7e:41:21:09:80:d7:5d:cb:71:03:41:3e:
f6:8d:ef:bf:0c:3d:4c:44:31:3b:3b:39:d6:d3:e2:
04:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D8:FD:9A:73:E2:38:98:00:A9:C5:C0:F2:49:4E:AF:7A:F6:F3:D5
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/bNj9mnPiOJgAqcXA8klOr3r289U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.163.0/24
62.60.190.0/23
213.176.1.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:dc:51:c3:97:69:e5:40:b7:bc:20:39:3c:0a:81:ac:62:25:
49:b6:b7:46:7d:24:4c:1c:ec:2f:df:b2:fe:c5:43:cb:82:fd:
7a:0b:f7:28:a8:d2:9a:55:e1:a6:ea:38:b1:43:61:e0:b1:ef:
60:96:0a:71:09:f9:a8:09:fb:33:80:cd:a9:f0:5f:8c:e1:c9:
07:df:40:21:bb:f1:5e:ea:84:d0:f2:14:0c:fa:2a:7c:ee:da:
8c:f9:2f:84:b9:cb:12:76:73:26:4c:5f:08:77:34:c4:f1:dc:
be:3e:2b:46:af:7a:7f:45:43:cd:e1:e7:71:5a:02:38:6a:0f:
a9:59:43:c8:cb:7e:64:a0:73:16:7d:02:b7:1b:32:05:36:cd:
82:bc:d8:80:b2:53:31:c4:ac:fb:25:29:e0:d2:a5:68:2c:58:
57:5c:a7:bb:8e:28:0b:a9:e6:f0:54:93:05:3b:23:c1:ba:d7:
b7:e5:5a:d7:00:b2:a8:a6:be:26:40:3a:5c:46:76:92:e6:93:
f2:e0:15:8c:07:3e:ca:74:a8:fd:ef:22:91:72:d1:3c:d9:0e:
96:8f:8b:6f:83:52:2c:b6:96:e4:25:0d:20:9a:d8:ef:b8:55:
97:05:b4:f7:ae:4c:18:2d:93:ba:f7:6e:0a:87:0c:86:c8:9e:
67:a8:d2:f5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZhGNhD1npNqsWpP9n0woz8vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjUwNzI2MTAxMDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2Q4ZmQ5YTczZTIzODk4MDBhOWM1YzBmMjQ5NGVhZjdhZjZmM2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTFmf4Bqs0hS02pEDvMsTfXgHNEM
RCjROaHlZo2pTKPofqLBEP2iu3ij6iRssUYTrdCea2BkVGld0Z3xpSLyWxaUdyOe
+TRUe4HpqeWLsDirsvee6G9idyIfYpWEys0axvNFFx53UBCzjUwQ481annNBIuOV
KpnsxOClFYO/5/5m5yFdB/pigE//H0JTdg8MLxt5DW51c2+8DsN/UtsqU0xiyEZ5
b3MYHweM/BqqB5WJPQFX25XY9vmcM3+gbavufmr/nT0BOnJQfJkBez6Q1o2IiHEs
CkUoFXZf10VcJpgV0Gx+QSEJgNddy3EDQT72je+/DD1MRDE7OznW0+IEAwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGzY/Zpz4jiYAKnFwPJJTq969vPVMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvYk5qOW1uUGlPSmdBcWNYQThrbE9yM3IyODlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPjyjAwQB
Pjy+AwQA1bABMA0GCSqGSIb3DQEBCwUAA4IBAQDC3FHDl2nlQLe8IDk8CoGsYiVJ
trdGfSRMHOwv37L+xUPLgv16C/coqNKaVeGm6jixQ2Hgse9glgpxCfmoCfszgM2p
8F+M4ckH30Ahu/Fe6oTQ8hQM+ip87tqM+S+EucsSdnMmTF8IdzTE8dy+PitGr3p/
RUPN4edxWgI4ag+pWUPIy35koHMWfQK3GzIFNs2CvNiAslMxxKz7JSng0qVoLFhX
XKe7jigLqebwVJMFOyPBute35VrXALKopr4mQDpcRnaS5pPy4BWMBz7KdKj97yKR
ctE82Q6Wj4tvg1IstpbkJQ0gmtjvuFWXBbT3rkwYLZO6924KhwyGyJ5nqNL1
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:10:40 2025 by rpki-client