Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wHomrQP-WBoZT0nZYg5xhOJbD1M.roa
File: wHomrQP-WBoZT0nZYg5xhOJbD1M.roa (raw, json)
Hash identifier: uzk8mFEXAJ3AzPaMgVriFdpCLSyaaLA3iiYlwoJjZN4=
Subject key identifier: C0:7A:26:AD:03:FE:58:1A:19:4F:49:D9:62:0E:71:84:E2:5B:0F:53
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0197F3F8A86F2EECBA509919DE62E80DC5B3
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wHomrQP-WBoZT0nZYg5xhOJbD1M.roa
Signing time: Thu 10 Jul 2025 10:54:08 +0000
ROA not before: Thu 10 Jul 2025 10:54:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215829
IP address blocks: 62.60.148.0/22 maxlen: 24
62.60.152.0/23 maxlen: 24
62.60.154.0/23 maxlen: 24
62.60.156.0/22 maxlen: 24
62.60.172.0/22 maxlen: 24
62.60.176.0/22 maxlen: 24
62.60.186.0/24 maxlen: 24
62.60.216.0/23 maxlen: 24
62.60.228.0/22 maxlen: 24
62.60.235.0/24 maxlen: 24
62.60.236.0/22 maxlen: 24
62.60.240.0/22 maxlen: 24
62.60.244.0/22 maxlen: 24
62.60.248.0/22 maxlen: 24
62.60.252.0/22 maxlen: 24
213.176.64.0/22 maxlen: 24
213.176.74.0/23 maxlen: 24
213.176.92.0/22 maxlen: 24
213.176.112.0/22 maxlen: 24
213.176.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f3:f8:a8:6f:2e:ec:ba:50:99:19:de:62:e8:0d:c5:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 10 10:54:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c07a26ad03fe581a194f49d9620e7184e25b0f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f5:36:4a:c9:cd:19:ff:46:ce:99:d2:d6:36:
82:77:02:78:99:eb:2c:01:2a:de:b4:4f:20:40:81:
5a:5c:32:09:fe:5c:1c:b5:d0:79:3c:f7:b2:23:66:
19:ad:77:c9:7a:64:84:0c:bb:28:4f:a6:74:75:6a:
4e:fd:b7:e7:cb:54:ca:25:cd:5a:40:c0:5f:cb:bd:
ed:93:b0:24:80:f1:6f:8c:d8:ac:07:eb:07:31:26:
5f:95:e4:74:65:1d:15:4d:9e:fe:7b:7b:ea:92:ce:
40:34:22:08:b0:bc:de:72:08:73:f0:5b:17:3a:77:
f7:60:dc:98:22:bc:59:36:f9:b9:4f:90:a5:a0:83:
22:29:9c:fd:9b:2c:ab:ba:b6:45:ed:6f:fb:d2:19:
af:2c:9d:1a:0f:a6:e3:6e:92:6b:cc:c6:21:6f:14:
d9:d0:95:40:b5:63:57:21:37:19:82:c8:95:c9:37:
47:fa:1c:60:fb:fa:9e:f4:86:14:ef:ba:78:63:60:
3a:5f:de:a4:d6:df:05:18:90:5d:2d:1a:2e:9c:58:
cc:6c:e6:8f:46:e6:7a:28:68:5a:60:b0:cf:ec:7c:
83:91:67:ca:2d:46:11:18:08:d1:91:a5:35:11:b8:
4a:3d:85:9b:63:90:95:1e:db:93:c5:00:84:7c:bb:
b4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7A:26:AD:03:FE:58:1A:19:4F:49:D9:62:0E:71:84:E2:5B:0F:53
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/wHomrQP-WBoZT0nZYg5xhOJbD1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.148.0-62.60.159.255
62.60.172.0-62.60.179.255
62.60.186.0/24
62.60.216.0/23
62.60.228.0/22
62.60.235.0-62.60.255.255
213.176.64.0/22
213.176.74.0/23
213.176.92.0/22
213.176.112.0/21
Signature Algorithm: sha256WithRSAEncryption
66:cd:c6:a1:1f:a7:ae:4a:d8:15:c5:38:e4:be:b2:0e:76:35:
8a:1d:8b:8e:ba:ba:54:61:f3:a1:53:b2:52:69:4b:c8:ab:03:
8c:32:26:3f:61:67:6b:88:d8:3a:b7:b1:37:51:e1:c1:2c:42:
71:fa:14:cb:04:0f:0d:6f:64:a2:16:86:5e:f6:8f:ec:d1:56:
29:29:d7:34:73:e9:de:31:8f:3f:4d:42:ca:27:f7:63:2c:29:
00:fd:6c:94:27:35:eb:b3:67:22:42:cc:4f:4a:a6:4c:57:f6:
62:f4:3b:44:ab:19:bd:57:c6:27:10:70:b4:32:fa:ba:d5:97:
ec:1e:c9:35:4a:91:80:90:1b:60:d2:4b:2f:2b:66:c9:16:1c:
fe:ef:7c:59:e4:00:f1:df:6e:c4:8a:9a:5f:76:90:44:e0:1b:
05:88:7c:fe:79:1c:8b:4b:4d:6f:0b:ac:d6:ff:a2:96:1d:1c:
f1:84:d9:a5:4e:96:29:48:07:af:10:34:50:8c:3c:d2:aa:ac:
63:61:4b:8c:d2:64:54:29:d6:6a:8e:8d:17:43:2e:70:bf:b2:
0d:63:b0:1a:38:a1:37:fb:10:4c:b2:5e:92:e4:fe:2e:b9:90:
78:cc:08:c6:1d:f1:4e:03:aa:cd:f1:d1:0c:bd:97:57:30:c8:
74:08:44:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:39:18 2025 by rpki-client