Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/vxkaE8HcRmctvzsbnfwU1QZslMg.roa
File: vxkaE8HcRmctvzsbnfwU1QZslMg.roa (raw, json)
Hash identifier: T9eJSoy6nMWNYhwlXC0AyroCOIMJaYxhMB2BLD6Lg40=
Subject key identifier: BF:19:1A:13:C1:DC:46:67:2D:BF:3B:1B:9D:FC:14:D5:06:6C:94:C8
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 01984639BBD458ABC343708C9DA08E4CCD39
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/vxkaE8HcRmctvzsbnfwU1QZslMg.roa
Signing time: Sat 26 Jul 2025 10:14:05 +0000
ROA not before: Sat 26 Jul 2025 10:14:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48147
IP address blocks: 62.60.162.0/24 maxlen: 24
62.60.196.0/23 maxlen: 24
62.60.199.0/24 maxlen: 24
62.60.222.0/23 maxlen: 24
62.60.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:39:bb:d4:58:ab:c3:43:70:8c:9d:a0:8e:4c:cd:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 26 10:14:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf191a13c1dc46672dbf3b1b9dfc14d5066c94c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:23:60:e8:1a:05:a6:31:54:7e:2c:8d:cd:
b7:48:78:d0:10:c3:d1:6f:ee:89:93:1f:15:b5:79:
f6:12:40:68:2a:d8:8c:ee:2e:58:dc:47:7f:e7:b9:
3b:b8:62:37:c0:3b:f3:24:e1:b9:cb:8a:cb:d7:ba:
d5:6c:a3:38:12:2e:28:97:5e:93:dd:fd:c6:4f:e5:
e0:6a:2a:7b:66:37:9d:f8:63:72:b9:c3:17:01:5f:
80:d2:e2:f3:e3:76:f0:a5:f0:66:f3:c0:3a:cd:00:
40:97:c5:71:a7:6c:24:0a:dc:1a:6f:c6:16:3b:93:
ca:e1:62:04:61:e6:a0:53:d4:16:96:d2:0f:e0:98:
6e:e7:e3:3f:98:6b:c3:a3:11:b1:c5:c0:7c:ae:08:
07:2c:ae:ca:0b:fd:d8:c9:83:64:6d:0c:de:a2:cc:
23:a1:f9:9b:2a:0a:7f:f8:ce:93:7c:4d:1f:ad:67:
3b:e1:bd:98:bd:d3:c8:1e:c3:05:30:bd:a9:15:49:
77:63:c6:1b:bc:ab:ca:0e:55:15:38:ae:5c:a9:3f:
b4:7d:df:96:62:9a:eb:91:c8:aa:e4:60:cf:21:8d:
c1:fc:6b:8b:0b:91:12:49:1d:60:4b:06:7b:cd:2d:
57:4d:9f:19:ed:08:cc:2d:35:55:b6:08:ae:d7:ea:
1c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:19:1A:13:C1:DC:46:67:2D:BF:3B:1B:9D:FC:14:D5:06:6C:94:C8
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/vxkaE8HcRmctvzsbnfwU1QZslMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.162.0/24
62.60.196.0/23
62.60.199.0/24
62.60.222.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:2b:29:1f:c1:8a:d0:dc:fe:d8:ef:3c:3a:d8:53:2a:6e:f2:
4b:b1:2a:b3:6e:9f:0a:3b:85:57:86:ff:77:c8:21:96:6e:75:
7e:6b:07:4e:f3:4b:e2:6e:fc:bb:8b:e8:87:e6:ff:52:c8:88:
8c:4c:55:3c:e9:f2:da:b0:cb:2d:8c:82:11:b4:11:38:db:a5:
6c:a9:6d:d1:9c:5b:11:ea:ae:80:05:ae:9c:90:53:1f:b6:12:
48:31:fc:1f:e0:a1:a4:a3:c8:d9:75:fa:00:d3:8b:fa:4d:f8:
78:4c:27:f5:cf:da:0a:c1:e2:5c:81:9e:d8:f5:ae:89:81:64:
4a:44:67:bf:ec:2e:1c:b6:9d:9d:5d:01:24:ec:b8:2b:13:07:
fa:78:72:1d:d9:73:62:d1:87:13:9d:52:3b:72:da:a3:1b:6a:
5d:39:b6:bf:84:43:7a:01:0e:bd:c9:7b:40:8d:62:ce:ed:e5:
f9:98:2e:4b:85:56:a0:99:59:ce:59:83:2d:7c:8a:48:c5:37:
4c:a4:18:67:da:98:85:7c:c4:bb:bb:12:4a:ef:69:44:e2:b1:
24:10:e7:7f:ca:92:0f:83:ea:a7:81:43:0d:c9:9d:82:f7:6a:
bb:55:b4:f1:25:e4:4a:5e:65:61:6c:b0:3b:de:44:7b:c9:f4:
92:31:ca:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:26:09 2025 by rpki-client