Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/_8jdrzBDdjbosGIukZmqWB2nrIw.roa
File: _8jdrzBDdjbosGIukZmqWB2nrIw.roa (raw, json)
Hash identifier: nizdoztERMK/8M9E7CO7FjtPiixYeVrZj9P+4jsa5nc=
Subject key identifier: FF:C8:DD:AF:30:43:76:36:E8:B0:62:2E:91:99:AA:58:1D:A7:AC:8C
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0198E54D4A6C69CD098B2AB7A03F27051E7B
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/_8jdrzBDdjbosGIukZmqWB2nrIw.roa
Signing time: Tue 26 Aug 2025 07:35:04 +0000
ROA not before: Tue 26 Aug 2025 07:35:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15611
IP address blocks: 62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
62.60.168.0/22 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
213.176.96.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
2001:790::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e5:4d:4a:6c:69:cd:09:8b:2a:b7:a0:3f:27:05:1e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 26 07:35:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffc8ddaf30437636e8b0622e9199aa581da7ac8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:30:04:21:50:0b:aa:7e:12:17:20:00:8e:02:
a1:99:f3:a4:1e:3d:57:ea:16:24:fb:05:5e:94:97:
43:5b:51:67:7a:62:32:a8:d0:ea:66:7c:b3:92:97:
95:c4:7d:2b:e3:e4:30:15:25:11:ee:2d:98:cb:40:
c5:83:5e:8e:86:1e:f3:d4:4e:d9:a2:08:68:a1:c9:
1e:50:1f:b2:7e:0c:ba:99:3f:27:25:f9:38:fd:0c:
58:14:38:25:3a:75:bf:a4:0d:d9:9b:72:3e:bd:69:
e9:6b:dd:5c:90:76:0d:cf:1a:58:6f:74:d8:a9:c2:
37:19:d1:4a:f7:72:3f:8d:b1:21:fd:db:ab:a0:f7:
5f:9c:0a:6f:97:fc:c8:77:a3:a2:e8:64:e1:84:af:
0c:94:e9:fb:7d:db:6b:8a:11:93:d9:a0:05:1b:6d:
ec:cc:fd:ac:b4:17:d6:14:0e:a2:3d:02:ee:2c:e5:
c4:76:88:32:32:b7:ef:b4:21:fa:09:61:ba:8f:12:
93:4a:a4:a5:96:4d:a9:8a:47:4e:5e:e4:80:36:90:
78:a9:74:10:74:d9:e0:c9:1f:a7:04:3e:96:79:c0:
77:a7:3c:86:57:ab:ef:ad:0c:fc:78:55:44:1a:e4:
e2:bc:fa:02:52:62:3c:7b:b5:60:e8:b3:6f:d5:17:
34:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C8:DD:AF:30:43:76:36:E8:B0:62:2E:91:99:AA:58:1D:A7:AC:8C
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/_8jdrzBDdjbosGIukZmqWB2nrIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.136.0/23
62.60.139.0-62.60.140.255
62.60.142.0/24
62.60.145.0/24
62.60.168.0/22
213.176.4.0/23
213.176.96.0/24
213.176.122.0-213.176.125.255
IPv6:
2001:790::/32
Signature Algorithm: sha256WithRSAEncryption
8b:4c:29:a5:a5:c4:71:d2:cd:ef:1d:a0:91:30:c6:e9:98:81:
a4:f1:13:b7:91:16:f3:66:2b:29:a7:66:64:2e:ec:5f:04:95:
3b:ac:ec:37:1e:3a:26:88:5b:50:91:d2:76:6c:c8:25:b0:b0:
17:86:b0:39:42:3c:64:9f:f1:e8:a6:ac:14:b9:d7:41:69:8b:
ed:6f:d8:a0:e6:85:b0:aa:c9:2d:e5:7c:27:13:4a:91:b0:e8:
3a:03:b1:3e:3e:49:ea:58:37:27:cd:b4:3e:36:b4:e3:dc:5e:
8e:59:95:a2:c9:9c:fa:62:72:52:7f:ee:6a:cd:37:3d:b1:13:
72:a5:b8:db:4b:11:fb:76:01:ff:3e:45:09:1b:4a:f1:3b:f4:
f5:ff:4f:57:4c:43:ea:8d:40:9b:29:25:26:2e:5e:4d:3e:10:
c4:8d:8c:b0:19:07:93:99:b8:bf:a5:3f:33:70:9f:d5:04:5f:
89:f9:d4:37:99:da:67:17:73:e8:04:1a:41:f5:2a:2c:80:c4:
21:38:bb:ca:9a:91:a7:52:bf:cf:27:af:e8:75:da:0e:cd:32:
80:88:69:1a:bb:5d:49:26:1c:8f:51:9f:9e:5b:4e:d2:57:52:
85:b2:89:f9:4a:0f:0c:b9:7a:26:45:09:1c:c0:ad:2a:fd:09:
eb:91:6e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:39:43 2025 by rpki-client