Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/cSRmR2jdWhIYKKIkNZwNstEHVSs.roa
File: cSRmR2jdWhIYKKIkNZwNstEHVSs.roa (raw, json)
Hash identifier: Yno/y4yf4qO8RguL818J/rZjcH+POozcS6bAx4zw4Xk=
Subject key identifier: 71:24:66:47:68:DD:5A:12:18:28:A2:24:35:9C:0D:B2:D1:07:55:2B
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 019813804F070300DF40AB2D154F2E8C90D8
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/cSRmR2jdWhIYKKIkNZwNstEHVSs.roa
Signing time: Wed 16 Jul 2025 13:50:32 +0000
ROA not before: Wed 16 Jul 2025 13:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60490
IP address blocks: 62.113.66.0/24 maxlen: 24
62.113.67.0/24 maxlen: 24
62.113.71.0/24 maxlen: 24
62.113.72.0/24 maxlen: 24
91.185.95.0/24 maxlen: 24
176.109.64.0/23 maxlen: 23
176.109.64.0/24 maxlen: 24
176.109.65.0/24 maxlen: 24
176.109.67.0/24 maxlen: 24
176.109.70.0/24 maxlen: 24
178.236.25.0/24 maxlen: 24
194.150.88.0/24 maxlen: 24
194.150.89.0/24 maxlen: 24
194.150.90.0/24 maxlen: 24
194.150.91.0/24 maxlen: 24
2a02:28:7::/48 maxlen: 48
2a02:2a:1000::/36 maxlen: 48
2a02:2a:1000::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:13:80:4f:07:03:00:df:40:ab:2d:15:4f:2e:8c:90:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jul 16 13:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7124664768dd5a121828a224359c0db2d107552b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:ba:70:cb:81:0a:af:37:ad:ca:bf:b8:f8:
37:9c:13:1d:02:02:d9:d5:d8:3a:7c:ba:52:86:7d:
69:c6:7d:9f:a3:f9:b9:bf:79:4e:0e:af:a2:4a:9f:
28:55:0f:8b:76:64:14:18:7f:02:5e:4b:64:b1:32:
16:ea:27:d4:b1:98:fa:60:5e:13:52:be:3a:20:39:
a8:89:56:9d:6f:a6:e9:d4:0e:a1:0a:3f:03:20:e2:
7e:60:89:1c:9b:28:70:c9:fd:a1:78:2f:77:99:3d:
e6:6a:cb:cc:0c:8a:9d:f7:37:1a:a7:94:91:c7:e1:
ee:1a:a9:c5:5b:d3:59:e4:17:df:0d:05:56:79:66:
52:a0:61:f8:10:b6:47:1d:eb:75:3a:16:f1:d8:47:
21:96:64:35:4e:ad:84:b3:ff:a0:dd:ff:6d:3c:83:
9f:67:79:88:f9:60:9c:d5:57:6d:17:a6:5c:b0:3f:
b1:0c:af:89:78:da:79:f2:85:95:a0:bd:11:22:53:
f7:6c:cc:32:e1:8b:4f:3a:a7:b0:52:c7:1c:a4:e3:
9d:2d:ac:94:5e:13:dc:f6:c2:9b:88:e9:58:b7:ea:
c5:9a:c4:3e:1e:30:cd:29:a8:ac:60:41:79:1a:91:
c5:07:56:73:eb:69:5e:80:a1:ac:3f:30:f7:54:77:
6d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:24:66:47:68:DD:5A:12:18:28:A2:24:35:9C:0D:B2:D1:07:55:2B
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/cSRmR2jdWhIYKKIkNZwNstEHVSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.66.0/23
62.113.71.0-62.113.72.255
91.185.95.0/24
176.109.64.0/23
176.109.67.0/24
176.109.70.0/24
178.236.25.0/24
194.150.88.0/22
IPv6:
2a02:28:7::/48
2a02:2a:1000::/36
Signature Algorithm: sha256WithRSAEncryption
12:6e:8c:64:50:27:9a:53:e5:14:da:2e:bc:ba:80:87:37:e4:
3f:68:74:b7:ce:52:e3:aa:27:b7:d2:ec:b7:ff:40:2b:7f:fb:
31:2b:70:8c:70:42:a0:6e:73:e4:dc:75:da:c9:25:85:35:33:
07:4c:a5:6d:d3:3d:1e:dc:a3:24:26:05:ad:a2:55:5f:e5:44:
11:c0:3e:a1:d7:5d:a1:93:39:9c:da:a0:d4:95:40:25:8d:93:
93:ed:81:df:de:e7:42:83:68:f2:aa:81:76:84:79:72:e7:da:
0f:62:22:ea:a5:9e:39:a5:94:62:55:f9:cb:e0:dd:2a:e7:c7:
e6:19:0f:41:24:aa:e3:41:24:b5:e6:77:53:3a:bf:9d:53:0c:
ef:5c:a2:67:86:34:4e:f9:d8:8d:95:98:82:32:f1:f5:e5:7e:
8f:f5:db:01:2f:4d:05:6e:de:16:d4:52:35:f9:43:87:41:23:
94:a6:0f:26:44:0e:d2:92:b8:0b:8f:ea:97:4d:46:a2:84:69:
d4:9c:4a:5d:73:37:1d:c5:20:6b:78:cb:99:1b:a6:79:c9:d5:
da:66:03:68:c6:43:80:fd:71:d6:b5:fc:14:fa:bd:4c:98:93:
8a:ff:c6:5e:c9:93:79:cc:13:5c:53:5a:48:ed:ad:7c:3c:ee:
45:ed:b3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:25:18 2025 by rpki-client