Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/c9v2s32MadGt9Rs9B7wyF-btNpU.roa
File: c9v2s32MadGt9Rs9B7wyF-btNpU.roa (raw, json)
Hash identifier: 9SRzQ3jf35UTFm4MUwgZY9tBkIZ6WIK99Wc+8gSxPgc=
Subject key identifier: 73:DB:F6:B3:7D:8C:69:D1:AD:F5:1B:3D:07:BC:32:17:E6:ED:36:95
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0198FA64A446C332B5DDE8939BAB092CF586
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/c9v2s32MadGt9Rs9B7wyF-btNpU.roa
Signing time: Sat 30 Aug 2025 09:52:36 +0000
ROA not before: Sat 30 Aug 2025 09:52:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213990
IP address blocks: 62.60.134.0/24 maxlen: 24
62.60.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:fa:64:a4:46:c3:32:b5:dd:e8:93:9b:ab:09:2c:f5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Aug 30 09:52:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73dbf6b37d8c69d1adf51b3d07bc3217e6ed3695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cb:ec:0e:9e:29:29:39:20:d5:72:91:04:12:
9e:02:92:f6:1f:bc:85:87:92:64:5a:82:3c:50:f1:
8c:1d:ec:57:c0:85:56:6a:e0:82:64:34:7a:fd:ff:
48:05:29:61:be:46:80:75:60:4b:e1:ff:54:64:dd:
d3:e1:14:3d:6c:84:e8:16:e6:58:cf:6d:7e:58:f0:
ff:0d:0c:7b:f1:51:63:28:eb:20:e6:dd:5a:39:f4:
86:15:db:bf:c0:45:9d:c3:d8:85:a8:2e:25:a5:a6:
e9:6a:87:a5:82:3c:41:e7:10:29:6a:3e:5e:4b:35:
9f:a9:f5:80:c4:5b:90:c6:05:13:0b:a1:c6:0d:68:
bc:93:4c:99:1d:d1:c3:47:91:01:07:e2:ab:20:4e:
31:11:43:75:d2:da:95:6e:0a:d1:53:15:b8:39:75:
dd:96:c5:3a:60:6c:ee:dc:e0:50:2a:84:ad:cb:89:
4f:8a:2d:80:59:50:0b:a6:1f:79:82:f5:9a:a0:8a:
fb:a2:3f:fd:bf:72:dc:64:60:1a:2c:8c:c5:26:6d:
f5:75:51:ac:cf:d0:23:47:7b:bf:f7:92:91:16:41:
1b:2d:56:0f:a8:54:a2:55:4f:c0:4e:67:0f:ec:05:
3a:95:79:e1:08:97:13:83:fe:ab:36:13:c5:fe:ed:
6c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DB:F6:B3:7D:8C:69:D1:AD:F5:1B:3D:07:BC:32:17:E6:ED:36:95
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/c9v2s32MadGt9Rs9B7wyF-btNpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.134.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:0c:04:92:c3:70:e2:89:77:32:08:7f:54:d2:d0:9f:a4:80:
44:e5:dd:bc:cc:a0:3e:17:45:98:ad:cb:90:67:c9:a2:bc:71:
c8:9d:eb:16:05:64:45:70:4d:41:82:12:35:d9:32:14:9e:2f:
9e:d3:e0:b3:80:20:d5:5a:f3:97:5d:fe:d1:8c:e2:1c:dd:ff:
31:34:8a:5c:d7:40:73:2c:e3:19:7e:39:ce:88:8b:5a:c6:7f:
53:bf:12:64:b7:88:35:6d:c6:33:70:dd:76:0d:a2:41:d1:9c:
86:44:57:ce:1f:da:cf:a9:1a:b9:1b:dd:24:8c:7c:35:7d:8b:
ca:68:e3:1c:9f:33:fb:a4:57:88:df:25:92:28:f0:f4:4f:c4:
d8:7e:ab:56:dd:bc:4a:dc:a3:72:39:61:bb:26:8b:a3:38:6c:
0a:c6:c9:64:06:1b:58:54:22:4c:b6:5e:fe:53:e2:fe:df:c3:
27:ff:73:02:04:ec:48:87:1a:8b:7e:6c:7c:8f:b2:b6:a4:34:
df:e9:63:1d:be:fd:a3:66:7f:15:ef:12:7c:81:9e:70:f0:3e:
e2:0f:b8:94:1e:8a:5a:30:c0:7d:ed:a8:a7:8b:6c:3d:d3:88:
a1:71:a8:cc:d3:7a:83:c3:69:03:d9:f5:f1:d0:be:70:37:76:
8d:d8:8a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 12:49:09 2025 by rpki-client