Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/z6SnouOaRLjhmS8F9234dh95UfE.roa
File: z6SnouOaRLjhmS8F9234dh95UfE.roa (raw, json)
Hash identifier: TC9ldUQzkPUF+EKC5lrbMpMqw3etd0iQCwmLDSl2bj8=
Subject key identifier: CF:A4:A7:A2:E3:9A:44:B8:E1:99:2F:05:F7:6D:F8:76:1F:79:51:F1
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019A208030418734F6A5350DC248B41F18EC
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/z6SnouOaRLjhmS8F9234dh95UfE.roa
Signing time: Sun 26 Oct 2025 12:31:03 +0000
ROA not before: Sun 26 Oct 2025 12:31:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15611
IP address blocks: 62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
62.60.168.0/22 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
213.176.96.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
2001:790::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:80:30:41:87:34:f6:a5:35:0d:c2:48:b4:1f:18:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 26 12:31:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfa4a7a2e39a44b8e1992f05f76df8761f7951f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b9:87:d9:d2:2b:30:83:f3:ae:6e:5f:a7:a5:
3c:89:06:27:8b:dd:a2:6e:6e:2f:91:0f:d2:0f:25:
dc:17:4c:fa:c8:bd:ac:77:fa:f4:18:65:28:9f:ce:
32:9b:55:2b:ae:95:78:d5:fe:0c:25:9a:15:d7:b5:
67:8b:d5:0e:5c:80:1a:f4:95:b8:8f:73:59:6f:43:
4b:8a:ab:c0:39:5c:ba:5a:9d:4b:5e:02:5c:e3:67:
f7:15:1e:b6:c6:10:60:15:6b:b6:bb:49:f1:ab:02:
0c:c6:95:6e:c1:ac:d0:16:16:65:7a:0f:74:6a:a1:
23:67:35:c6:ee:71:a3:eb:35:5b:79:d4:a8:19:58:
bc:f3:e8:44:69:be:a0:b6:ad:43:ba:a0:f8:d1:14:
71:a7:5c:36:bb:e9:5c:f3:5d:d0:6e:db:ab:ac:c2:
db:9c:e8:a1:89:54:83:f0:c2:64:dc:fb:4f:7d:d3:
b2:4e:47:d8:ad:eb:6b:25:a6:b3:c4:e9:e0:4e:67:
79:03:1e:79:5c:78:29:a7:a2:5e:22:02:ae:27:3a:
7c:d8:db:eb:e2:38:a0:01:e7:ad:c6:b8:e0:d9:60:
ff:df:74:13:10:c8:fc:93:2c:cb:54:42:cc:56:53:
44:fc:5d:d0:a3:a0:a6:8f:4d:da:71:ba:99:c1:2d:
7e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A4:A7:A2:E3:9A:44:B8:E1:99:2F:05:F7:6D:F8:76:1F:79:51:F1
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/z6SnouOaRLjhmS8F9234dh95UfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.136.0/23
62.60.139.0-62.60.140.255
62.60.142.0/24
62.60.145.0/24
62.60.168.0/22
213.176.4.0/23
213.176.96.0/24
213.176.122.0-213.176.125.255
IPv6:
2001:790::/32
Signature Algorithm: sha256WithRSAEncryption
3f:06:93:75:95:c6:fb:b1:6b:5c:08:5c:cd:d7:6e:aa:89:70:
ea:64:1e:43:05:ed:12:d9:d3:4a:4c:91:59:b6:e1:38:d9:c9:
86:0d:90:ac:c2:1d:29:fd:25:5a:a8:17:b7:40:c4:6e:84:7a:
8a:e7:69:ea:15:bb:59:35:36:a3:92:13:18:31:93:8b:bf:60:
12:1f:3d:e5:ef:2f:56:92:eb:91:09:32:65:70:83:fd:cb:cb:
e6:a8:d7:42:e3:e3:c4:07:e5:6c:17:58:a3:98:6e:31:19:b5:
76:2b:92:92:37:22:67:10:ae:4b:ee:1f:a7:11:43:7f:70:43:
9a:58:43:29:80:b4:5f:b8:71:8f:46:96:c2:9b:38:0f:66:0d:
72:36:00:07:01:03:e6:bc:9b:d2:0d:5e:bc:57:82:8f:4b:e0:
a1:7c:fc:96:dd:22:47:5c:43:fb:0c:36:ad:e3:88:04:5c:d0:
0c:a0:56:56:68:40:09:12:f5:17:80:6b:e3:7c:fc:cb:d4:eb:
11:e3:ba:a9:30:84:97:ad:b9:08:19:d4:85:f6:60:d7:ee:9d:
73:db:a9:58:2e:f6:a0:be:4d:b0:1a:67:93:89:17:47:e2:76:
e3:57:27:8d:27:e9:f4:e6:b1:cf:dd:2d:b7:28:31:48:bb:83:
f3:5a:df:7f
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgISAZoggDBBhzT2pTUNwki0HxjsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjUxMDI2MTIzMTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmE0YTdhMmUzOWE0NGI4ZTE5OTJmMDVmNzZkZjg3NjFmNzk1MWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLmH2dIrMIPzrm5fp6U8iQYni92i
bm4vkQ/SDyXcF0z6yL2sd/r0GGUon84ym1UrrpV41f4MJZoV17Vni9UOXIAa9JW4
j3NZb0NLiqvAOVy6Wp1LXgJc42f3FR62xhBgFWu2u0nxqwIMxpVuwazQFhZleg90
aqEjZzXG7nGj6zVbedSoGVi88+hEab6gtq1DuqD40RRxp1w2u+lc813QbturrMLb
nOihiVSD8MJk3PtPfdOyTkfYretrJaazxOngTmd5Ax55XHgpp6JeIgKuJzp82Nvr
4jigAeetxrjg2WD/33QTEMj8kyzLVELMVlNE/F3Qo6Cmj03acbqZwS1+MQIDAQAB
o4ICUjCCAk4wHQYDVR0OBBYEFM+kp6LjmkS44ZkvBfdt+HYfeVHxMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvejZTbm91T2FSTGpobVM4RjkyMzRkaDk1VWZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzBGBAIAATBAAwQBPjyIMAwD
BAA+PIsDBAA+PIwDBAA+PI4DBAA+PJEDBAI+PKgDBAHVsAQDBADVsGAwDAMEAdWw
egMEAdWwfDANBAIAAjAHAwUAIAEHkDANBgkqhkiG9w0BAQsFAAOCAQEAPwaTdZXG
+7FrXAhczdduqolw6mQeQwXtEtnTSkyRWbbhONnJhg2QrMIdKf0lWqgXt0DEboR6
iudp6hW7WTU2o5ITGDGTi79gEh895e8vVpLrkQkyZXCD/cvL5qjXQuPjxAflbBdY
o5huMRm1diuSkjciZxCuS+4fpxFDf3BDmlhDKYC0X7hxj0aWwps4D2YNcjYABwED
5ryb0g1evFeCj0vgoXz8lt0iR1xD+ww2reOIBFzQDKBWVmhACRL1F4Br43z8y9Tr
EeO6qTCEl625CBnUhfZg1+6dc9upWC72oL5NsBpnk4kXR+J241cnjSfp9Oaxz90t
tygxSLuD81rffw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:23:43 2025 by rpki-client