Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/PrisiX9cIn99AliDWgpNGUfmj_8.roa
File: PrisiX9cIn99AliDWgpNGUfmj_8.roa (raw, json)
Hash identifier: rN8Y2pR83WML1BI+RzSSfaDf/yYr4j471dxo3B4dyzY=
Subject key identifier: 3E:B8:AC:89:7F:5C:22:7F:7D:02:58:83:5A:0A:4D:19:47:E6:8F:FF
Certificate issuer: /CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Certificate serial: 019A3021F4D8B88F82735FD1B74EABEDFB17
Authority key identifier: 20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/PrisiX9cIn99AliDWgpNGUfmj_8.roa
Signing time: Wed 29 Oct 2025 13:22:02 +0000
ROA not before: Wed 29 Oct 2025 13:22:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214461
IP address blocks: 62.113.59.0/24 maxlen: 24
111.88.134.0/24 maxlen: 24
128.0.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:21:f4:d8:b8:8f:82:73:5f:d1:b7:4e:ab:ed:fb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20ca2d4cb3e56b5d29970a97fc645eb2fd6876a1
Validity
Not Before: Oct 29 13:22:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3eb8ac897f5c227f7d0258835a0a4d1947e68fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:b3:ff:1f:62:02:d3:fc:45:47:78:96:a4:
e0:62:b4:fa:31:7b:f1:45:ba:82:ce:0a:13:0f:c4:
3a:c6:65:d5:e8:55:4d:ea:45:86:ac:3c:d8:2b:3a:
7d:ef:de:9b:e4:2d:90:e8:11:b9:c2:c7:bc:04:62:
31:43:0b:a2:67:36:84:66:33:1f:80:13:e1:13:42:
ee:cd:7d:e5:a5:59:4b:47:88:41:88:1c:70:b8:44:
12:87:f8:67:40:60:d4:7a:53:10:52:71:99:ab:cc:
dc:bf:41:6f:97:ae:b0:fa:d8:f5:0d:e4:4b:f0:83:
26:dd:1a:ce:e8:a6:3c:3f:05:0d:de:d7:34:6f:2c:
8b:a2:5a:9d:48:be:53:23:e7:47:59:73:9b:b5:ab:
52:6c:2b:9a:a2:2b:21:8b:c9:30:ba:d5:a3:27:a4:
42:63:29:52:c5:4e:a8:92:c2:f9:9b:7a:d1:15:3e:
be:6d:1d:03:7d:34:e2:ec:14:17:fd:3a:d7:fd:dc:
ee:4c:4b:4a:f3:b2:6f:70:1b:06:a7:9e:66:e7:40:
7c:9f:67:2b:04:e2:f6:25:bb:f6:7a:b2:ad:52:fa:
93:4f:7a:3f:da:aa:a1:bf:3d:bf:cc:aa:e0:c0:1f:
64:42:50:ce:69:e7:5e:6f:dd:2c:36:51:51:4e:37:
a1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B8:AC:89:7F:5C:22:7F:7D:02:58:83:5A:0A:4D:19:47:E6:8F:FF
X509v3 Authority Key Identifier:
keyid:20:CA:2D:4C:B3:E5:6B:5D:29:97:0A:97:FC:64:5E:B2:FD:68:76:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMotTLPla10plwqX_GResv1odqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/PrisiX9cIn99AliDWgpNGUfmj_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2c2817-3701-4783-8fbd-eec4885c4f8d/1/IMotTLPla10plwqX_GResv1odqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.59.0/24
111.88.134.0/24
128.0.67.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:14:d0:51:bf:ca:b4:c0:52:7d:1d:bc:7e:2d:87:fe:3b:da:
83:4c:75:44:63:ec:9f:13:ed:bc:27:c1:1d:6d:2d:95:80:92:
a3:fb:ec:46:51:37:12:91:0a:7d:5d:e7:8f:99:e0:94:5b:2a:
39:42:75:87:01:90:98:83:47:93:70:24:83:1b:c5:2a:ae:31:
6b:d8:5a:2f:1c:a2:2c:e0:fe:49:c6:b1:e8:31:d0:6b:9d:7d:
f2:fd:ba:ad:04:0f:95:11:c4:13:2d:f9:6b:53:c0:c6:f2:28:
a8:7e:d1:95:d0:f2:73:20:c6:a2:3a:a9:c0:99:a9:86:17:ea:
8f:da:e6:72:23:5d:6d:b3:e7:4c:44:e6:be:e6:0a:0c:22:5e:
bf:70:15:71:c5:d6:b8:21:16:32:87:91:a9:13:d6:ee:56:c3:
49:5c:83:53:a0:ac:c5:41:d3:0b:7e:2f:d5:42:85:78:d2:a9:
27:0c:fb:79:8e:5b:05:d2:d0:57:6d:7a:ed:78:5c:c0:69:5a:
b4:b5:3d:63:4a:08:ae:6d:2f:96:93:b3:29:a6:ba:3c:c4:77:
2e:58:3f:0e:16:7f:75:2a:e1:a8:4f:54:8c:dc:1a:38:4c:43:
36:c0:7c:74:f5:37:5c:56:f9:8c:a4:c3:29:b2:b3:36:ac:62:
12:4c:24:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:31:06 2025 by rpki-client