Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/wRHBU_tIlHPadsLQLwBGJFuQGqc.roa
File: wRHBU_tIlHPadsLQLwBGJFuQGqc.roa (raw, json)
Hash identifier: HGZ2hfZbOO64qRGA+DNha/b0kQHhKQIKwFw+uvw3jek=
Subject key identifier: C1:11:C1:53:FB:48:94:73:DA:76:C2:D0:2F:00:46:24:5B:90:1A:A7
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01985AFE8FE00CEC7F8326D779E70097136C
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/wRHBU_tIlHPadsLQLwBGJFuQGqc.roa
Signing time: Wed 30 Jul 2025 11:01:29 +0000
ROA not before: Wed 30 Jul 2025 11:01:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399073
IP address blocks: 62.72.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:fe:8f:e0:0c:ec:7f:83:26:d7:79:e7:00:97:13:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jul 30 11:01:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c111c153fb489473da76c2d02f0046245b901aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:57:25:3d:bb:3f:8a:f3:d6:2f:7b:ea:a4:
c6:81:1c:57:d4:d6:44:7e:20:be:25:81:4d:fe:22:
bd:24:6a:e5:90:ac:59:91:39:97:bc:10:a3:61:3f:
f1:6d:18:ed:ef:b6:35:e6:3e:0c:75:84:48:1d:16:
3b:3b:eb:8f:1e:16:71:ae:e8:3e:40:fc:f2:d5:fa:
92:19:7b:be:fa:29:8d:25:a4:cd:a6:83:b5:0b:31:
38:7f:d2:3a:13:db:94:22:34:19:b6:7c:3d:5f:f4:
8e:dd:8d:d2:dd:08:2c:67:84:50:99:5f:22:3b:2f:
64:3b:59:7b:fb:99:5e:98:48:fb:77:1b:f0:5b:e1:
de:34:00:ba:55:7e:81:8c:18:d2:b8:5f:f4:e2:72:
3f:37:d0:2f:f5:5d:40:33:43:39:88:ad:16:f1:15:
b0:ca:49:45:d5:42:bf:a4:17:4a:f2:9b:97:0f:47:
e5:1a:1d:b4:da:f3:5a:01:7a:95:23:83:01:b8:7e:
06:57:c6:89:44:fb:de:9d:00:ac:3d:c8:1b:00:d6:
e3:25:2f:76:e7:3e:2f:a3:16:bf:af:4b:b5:cf:df:
fb:32:f2:d3:4c:d4:9e:a6:39:b8:8f:7c:a3:d6:1c:
26:48:a1:b7:e2:e2:fe:35:93:15:a2:92:70:fc:b8:
56:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:11:C1:53:FB:48:94:73:DA:76:C2:D0:2F:00:46:24:5B:90:1A:A7
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/wRHBU_tIlHPadsLQLwBGJFuQGqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.185.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:50:6c:b7:08:32:db:50:6e:ba:43:d4:8a:d6:05:31:cd:ca:
3c:bf:84:2c:1b:13:da:98:7b:bd:fb:06:ef:3d:85:1b:ac:65:
cb:99:77:28:a2:03:12:c1:92:8a:43:3f:ff:b7:0e:e6:42:84:
cb:52:1c:21:cc:48:62:21:b8:c5:24:8b:f9:2d:51:9f:38:69:
90:3f:04:54:c6:bb:d2:bf:b5:6c:27:03:69:13:13:62:cb:64:
d7:ec:7b:85:52:7b:58:01:8b:22:6d:35:77:71:b9:e2:bc:67:
be:5f:34:14:44:e8:b9:17:69:3d:49:5a:af:10:b0:c3:2d:c7:
b2:27:46:68:b3:a5:33:e1:46:3b:5d:ab:b8:df:23:f4:63:78:
0f:3f:ce:3e:e4:fa:7d:13:56:e7:ab:00:4a:f2:47:66:ef:f2:
52:23:e6:33:9e:c3:46:8e:16:e6:27:ba:d7:8d:19:eb:6d:80:
5e:9e:c0:fe:69:c4:70:3c:40:94:00:7a:04:e9:66:7d:e5:d0:
73:f6:d4:94:23:f6:da:b8:2f:fa:b0:32:c1:fc:d0:a4:b4:d9:
a3:61:63:1f:09:b0:f6:84:4f:53:e4:03:e7:bc:4c:76:f7:04:
2f:07:3f:b6:bb:02:48:d0:60:64:ca:7d:d2:72:a9:d7:99:80:
47:78:25:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:55:22 2025 by rpki-client