Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/sjfgbj_1SBcR6CaxATNHQ8rovMw.roa
File: sjfgbj_1SBcR6CaxATNHQ8rovMw.roa (raw, json)
Hash identifier: qOIvjJPAdYNY8sLCE1EoZf+/bFtlmjlT1dgvpstpmT0=
Subject key identifier: B2:37:E0:6E:3F:F5:48:17:11:E8:26:B1:01:33:47:43:CA:E8:BC:CC
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0199517FD310D8212A64C5F935C3FCDD1B61
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/sjfgbj_1SBcR6CaxATNHQ8rovMw.roa
Signing time: Tue 16 Sep 2025 07:49:15 +0000
ROA not before: Tue 16 Sep 2025 07:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215540
IP address blocks: 62.60.232.0/23 maxlen: 24
62.60.234.0/24 maxlen: 24
213.176.16.0/24 maxlen: 24
213.176.17.0/24 maxlen: 24
213.176.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:7f:d3:10:d8:21:2a:64:c5:f9:35:c3:fc:dd:1b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Sep 16 07:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b237e06e3ff5481711e826b101334743cae8bccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:ed:83:6d:f0:8b:2a:dc:b3:53:9f:09:32:
d9:52:ef:26:f1:7e:84:30:23:84:93:11:d0:10:38:
7d:34:55:66:39:1b:d1:16:9b:b6:13:65:ce:da:ec:
27:69:bb:5f:3e:8f:c4:bb:09:b5:3a:c3:48:5d:67:
93:0b:ab:e8:40:53:92:8f:ac:43:87:92:e8:84:b3:
d3:b9:cd:dd:79:fd:ee:3c:7d:05:a7:4d:07:31:06:
4c:7c:fc:c7:34:0e:40:de:d1:b1:13:88:b0:f8:fb:
44:b0:0d:e1:1a:1c:dc:be:60:a5:90:28:a8:d6:cf:
99:10:d9:f9:2f:0b:7b:0e:90:3f:9f:44:8c:20:28:
c5:08:5c:79:42:87:8d:a0:d3:cf:3b:5d:ad:e6:78:
29:2b:20:4d:06:d3:09:69:ef:bd:0c:04:78:0c:d0:
0c:21:5f:f1:18:0e:b1:75:ab:74:75:10:9e:0a:97:
da:60:c5:c9:fd:9e:70:43:28:24:57:69:ac:9c:d2:
7e:b9:60:ff:7a:93:0a:6a:84:51:81:4d:aa:25:cd:
62:d0:85:89:32:ad:f4:3f:6b:1e:56:04:05:df:20:
d1:50:80:11:33:15:ae:a8:72:49:48:45:90:2a:d6:
1f:d3:3e:1a:37:99:68:e4:eb:4b:dd:91:f1:73:b8:
fe:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:37:E0:6E:3F:F5:48:17:11:E8:26:B1:01:33:47:43:CA:E8:BC:CC
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/sjfgbj_1SBcR6CaxATNHQ8rovMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.232.0-62.60.234.255
213.176.16.0-213.176.18.255
Signature Algorithm: sha256WithRSAEncryption
ce:7b:11:6c:b5:24:27:dd:ce:c5:f3:50:34:6d:02:2d:68:a2:
95:1d:ab:ca:0a:b8:b2:83:c9:b7:d5:95:f6:1a:b8:27:f5:92:
1d:f4:92:89:5e:9d:04:d9:94:f9:c9:43:ff:58:5e:36:97:30:
0e:f0:f1:e7:49:85:f3:3f:e2:ea:48:cc:61:ad:55:f2:aa:f4:
9d:57:f1:e0:07:e3:44:09:ad:78:71:9a:53:05:d8:6e:b4:25:
39:4a:4c:3e:2d:e4:f3:83:44:c6:2c:c0:17:31:66:f6:89:90:
e0:53:73:dc:a1:5e:50:3f:45:94:63:35:58:e4:ff:29:24:60:
1f:20:e5:18:26:b1:ca:e3:1e:49:a0:ae:90:69:c3:06:f3:6b:
0e:f5:9e:cd:89:81:16:e9:c5:68:38:e3:58:9a:62:f9:31:b2:
c0:09:ff:73:6b:20:bb:42:aa:6c:6e:d2:d8:19:3e:ee:b0:df:
d4:f3:10:3e:e2:7a:22:fa:8e:21:a9:d1:62:7e:45:78:5e:50:
16:54:88:37:bc:71:9d:63:34:b3:73:55:6c:48:92:b4:a1:e1:
da:8d:7f:74:84:ce:d8:de:c3:89:64:69:0f:57:9e:c7:5e:2f:
86:7f:c8:d5:e6:4c:17:dc:9d:a3:f9:7a:98:2a:60:05:21:5e:
62:34:78:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 16:55:03 2025 by rpki-client