Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Ks_L22k3-rXcIAO8KxJp-pJRF9M.roa
File: Ks_L22k3-rXcIAO8KxJp-pJRF9M.roa (raw, json)
Hash identifier: BfSFJfF2Vv6tesXhEeAO07dLBphIo1oac3Lm8rFhs9w=
Subject key identifier: 2A:CF:CB:DB:69:37:FA:B5:DC:20:03:BC:2B:12:69:FA:92:51:17:D3
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019903C354BAC9F4A83102B0D0A7DC38303B
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Ks_L22k3-rXcIAO8KxJp-pJRF9M.roa
Signing time: Mon 01 Sep 2025 05:32:36 +0000
ROA not before: Mon 01 Sep 2025 05:32:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216061
IP address blocks: 62.60.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:03:c3:54:ba:c9:f4:a8:31:02:b0:d0:a7:dc:38:30:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Sep 1 05:32:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2acfcbdb6937fab5dc2003bc2b1269fa925117d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d0:c4:85:fb:f9:c5:52:cd:be:2f:08:ad:f6:
9c:31:a3:c3:86:55:2a:06:fc:2e:95:1a:95:8d:ae:
4c:11:54:e4:e3:19:ef:3f:29:ea:59:f5:cd:44:c3:
2e:2f:91:19:47:28:e0:78:bf:bd:50:07:f3:5a:eb:
32:12:15:de:2f:e5:9f:98:b5:25:6e:51:ef:b3:b6:
8d:38:a9:99:c6:75:c9:0c:90:3e:6b:9f:f6:7c:f2:
13:15:69:c3:17:ab:8d:7e:a6:a5:10:cc:b8:70:80:
13:d8:e7:7c:2c:48:c6:bd:60:37:af:d0:f0:a7:11:
3c:16:2d:85:51:40:4c:25:c9:c2:63:87:ed:ae:d8:
80:67:e8:56:de:c6:cd:b2:49:9e:97:ee:56:6f:5c:
dd:ab:ac:33:9a:27:37:4d:27:0c:1d:e0:37:b4:ed:
05:4e:b5:79:4c:b5:a4:80:8c:ff:c5:c9:90:45:0e:
83:f5:68:21:e7:76:a4:ad:f9:9f:09:b4:cb:1a:f1:
61:3b:5f:0a:ee:ef:ca:d1:74:00:67:e3:7c:f2:6a:
71:4c:42:49:09:66:73:eb:c5:9d:bb:7d:5d:db:b0:
42:e8:da:d7:d7:d8:f1:79:ef:ba:91:30:08:04:70:
6f:18:13:2f:72:8a:eb:e7:3e:b3:bf:7d:d8:1d:29:
f3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CF:CB:DB:69:37:FA:B5:DC:20:03:BC:2B:12:69:FA:92:51:17:D3
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/Ks_L22k3-rXcIAO8KxJp-pJRF9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.190.0/23
Signature Algorithm: sha256WithRSAEncryption
41:a1:04:b7:03:8f:86:da:e6:43:57:d9:4e:68:f2:0f:af:60:
0e:6d:54:ab:4f:0e:01:56:9a:0c:a0:8b:44:21:68:8c:3a:6f:
e5:ec:93:29:1c:0b:c4:af:4b:db:58:d5:06:26:bc:93:3b:88:
2e:df:b6:3c:4e:43:50:1b:00:3c:4b:cf:5b:71:b2:ca:f7:20:
01:10:1c:33:a8:dc:9c:12:41:b0:3d:6e:75:44:ce:d1:74:a3:
47:04:a3:ae:37:3b:eb:86:5e:c9:c7:89:e5:b1:79:af:61:d6:
df:3f:ae:90:65:20:43:c9:41:de:13:57:04:00:4e:3f:51:ab:
5a:62:bf:6f:72:25:02:82:1c:07:d8:6e:c5:3e:bb:d1:93:0a:
25:2f:c2:94:f1:40:cd:17:cb:1b:8d:94:fa:25:83:e7:ce:73:
37:60:9b:9b:2c:1c:d0:4f:cd:9a:c4:69:e2:d9:ac:e5:fe:7b:
84:88:32:84:ed:b2:fc:d3:ae:60:87:8e:78:69:d4:ed:2e:4b:
ba:ee:67:12:67:16:b6:4a:33:00:15:5f:68:fd:e6:e6:9d:13:
62:71:99:f8:58:ab:1e:ca:e1:e1:48:d2:a5:3f:94:5d:82:ca:
6b:ae:96:59:10:04:31:49:88:2d:85:65:50:26:e5:5b:9f:6a:
0d:20:67:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:39:53 2025 by rpki-client