Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/rf6L0TwRlHBLPhVKaPDEKnbqT_w.roa
File: rf6L0TwRlHBLPhVKaPDEKnbqT_w.roa (raw, json)
Hash identifier: AzTZWJBoZdwqFymIdorc82U7WjpDv54tYnTW1K3fl6o=
Subject key identifier: AD:FE:8B:D1:3C:11:94:70:4B:3E:15:4A:68:F0:C4:2A:76:EA:4F:FC
Certificate issuer: /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial: 0197F3418BDB6F929916CE0053D508DF6272
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/rf6L0TwRlHBLPhVKaPDEKnbqT_w.roa
Signing time: Thu 10 Jul 2025 07:34:08 +0000
ROA not before: Thu 10 Jul 2025 07:34:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 62.201.192.0/24 maxlen: 24
62.201.199.0/24 maxlen: 24
62.201.200.0/24 maxlen: 24
62.201.201.0/24 maxlen: 24
62.201.202.0/24 maxlen: 24
62.201.203.0/24 maxlen: 24
62.201.204.0/24 maxlen: 24
62.201.205.0/24 maxlen: 24
62.201.207.0/24 maxlen: 24
62.201.208.0/24 maxlen: 24
62.201.237.0/24 maxlen: 24
62.201.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:f3:41:8b:db:6f:92:99:16:ce:00:53:d5:08:df:62:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Validity
Not Before: Jul 10 07:34:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=adfe8bd13c1194704b3e154a68f0c42a76ea4ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:37:b6:d7:25:0b:a1:42:6d:d5:02:4d:60:
97:14:10:6d:37:00:f2:02:f6:6e:7b:8a:13:06:9a:
eb:08:29:99:0d:a3:39:51:85:3d:1b:52:50:c1:bf:
5b:71:db:1f:d7:44:dc:76:95:93:93:4a:6e:e9:df:
9a:41:f0:a9:1e:58:44:4e:4a:d8:a7:6c:eb:1e:6f:
8a:fd:93:2e:99:00:bc:62:ea:75:a8:74:07:34:51:
8f:e2:62:ec:7e:66:52:d5:c5:89:2b:55:c5:ae:aa:
a7:67:e9:8d:ec:f1:0a:e2:db:14:c1:43:fc:44:15:
c2:33:00:51:0d:7b:36:a0:72:a7:38:bd:25:88:5c:
be:56:c6:c8:55:06:6a:f5:cf:9d:70:13:fd:6d:be:
17:a8:59:71:e5:27:2d:ed:2f:06:08:7d:57:ad:57:
9c:53:eb:34:e7:cd:a4:72:2f:80:e0:b5:52:2b:3b:
ca:63:4e:f2:96:80:e9:8f:15:16:34:bd:74:d1:94:
61:38:c7:00:d5:0a:7d:f6:f0:52:f0:e7:a7:5c:73:
41:fc:c6:cc:76:de:3c:46:46:69:05:8d:26:4a:99:
47:38:14:91:da:1f:be:5e:40:50:0f:f3:12:df:90:
da:1f:1d:c8:3b:11:d5:bd:3c:a5:15:fc:2d:03:60:
14:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FE:8B:D1:3C:11:94:70:4B:3E:15:4A:68:F0:C4:2A:76:EA:4F:FC
X509v3 Authority Key Identifier:
keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/rf6L0TwRlHBLPhVKaPDEKnbqT_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.201.192.0/24
62.201.199.0-62.201.205.255
62.201.207.0-62.201.208.255
62.201.237.0/24
62.201.248.0/24
Signature Algorithm: sha256WithRSAEncryption
31:1c:b4:ef:b0:d3:18:17:83:79:78:00:c5:04:c9:31:0e:8f:
ab:3a:60:58:d9:b4:73:a0:08:39:38:e0:c8:ce:b0:51:8d:26:
12:b6:a2:c0:ec:00:29:2e:4e:dd:1d:b7:c6:65:92:81:31:9c:
f1:c0:31:d1:73:68:23:ef:f0:7a:99:2b:f4:8f:cb:7e:57:34:
b1:30:92:e3:4c:ff:3a:ed:a2:f8:d0:91:1e:aa:61:48:77:4d:
07:e7:20:0c:25:6b:3d:45:9a:5b:f7:aa:91:df:e8:e3:be:ec:
d0:89:17:63:aa:51:32:11:87:22:22:ec:a1:77:34:71:45:af:
d6:63:22:8e:a3:cd:63:27:b3:e2:49:a2:4c:70:7a:48:73:56:
da:4d:13:10:c5:f1:ed:16:55:c7:c3:31:f2:84:db:9b:cc:2f:
2d:c0:7a:00:dc:ee:4b:d1:ba:6a:e6:0f:fe:73:e6:aa:fd:1d:
99:f3:5d:ee:4a:39:dd:bb:1b:a8:d8:4d:ec:c6:25:92:ca:d2:
24:c5:d4:71:54:3c:d1:07:30:db:3b:5a:e5:bd:97:a8:36:69:
ee:90:b0:25:81:5f:f1:e0:bb:67:38:f6:d8:4a:23:04:4a:6d:
c2:04:88:04:00:66:82:b1:1f:ed:15:e0:70:c3:b9:d1:ab:ab:
1c:4a:b4:e6
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZfzQYvbb5KZFs4AU9UI32JyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTJmZWRmNTljNjBkMzI1NGUzN2E5YzhlY2RlMTFjOWJh
MTI4MmEwHhcNMjUwNzEwMDczNDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGZlOGJkMTNjMTE5NDcwNGIzZTE1NGE2OGYwYzQyYTc2ZWE0ZmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLE3ttclC6FCbdUCTWCXFBBtNwDy
AvZue4oTBprrCCmZDaM5UYU9G1JQwb9bcdsf10TcdpWTk0pu6d+aQfCpHlhETkrY
p2zrHm+K/ZMumQC8Yup1qHQHNFGP4mLsfmZS1cWJK1XFrqqnZ+mN7PEK4tsUwUP8
RBXCMwBRDXs2oHKnOL0liFy+VsbIVQZq9c+dcBP9bb4XqFlx5Sct7S8GCH1XrVec
U+s0582kci+A4LVSKzvKY07yloDpjxUWNL100ZRhOMcA1Qp99vBS8OenXHNB/MbM
dt48RkZpBY0mSplHOBSR2h++XkBQD/MS35DaHx3IOxHVvTylFfwtA2AUQQIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFK3+i9E8EZRwSz4VSmjwxCp26k/8MB8GA1UdIwQY
MBaAFDaS/t9Zxg0yVON6nI7N4RyboSgqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEt
ZTdiZTVlMzBhZDJkLzEvcmY2TDBUd1JsSEJMUGhWS2FQREVLbmJxVF93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81YzVhZDAtZDJkYS00MGRiLTk1ZDEtZTdiZTVlMzBhZDJk
LzEvTnBMLTMxbkdEVEpVNDNxY2pzM2hISnVoS0NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQAPsnAMAwD
BAA+yccDBAE+ycwwDAMEAD7JzwMEAD7J0AMEAD7J7QMEAD7J+DANBgkqhkiG9w0B
AQsFAAOCAQEAMRy077DTGBeDeXgAxQTJMQ6PqzpgWNm0c6AIOTjgyM6wUY0mErai
wOwAKS5O3R23xmWSgTGc8cAx0XNoI+/wepkr9I/Lflc0sTCS40z/Ou2i+NCRHqph
SHdNB+cgDCVrPUWaW/eqkd/o477s0IkXY6pRMhGHIiLsoXc0cUWv1mMijqPNYyez
4kmiTHB6SHNW2k0TEMXx7RZVx8Mx8oTbm8wvLcB6ANzuS9G6auYP/nPmqv0dmfNd
7ko53bsbqNhN7MYlksrSJMXUcVQ80Qcw2zta5b2XqDZp7pCwJYFf8eC7Zzj22Eoj
BEptwgSIBABmgrEf7RXgcMO50aurHEq05g==
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:58:48 2025 by rpki-client