Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/CocW_becpXuTLPdK7xLk1z-RTdM.roa
File: CocW_becpXuTLPdK7xLk1z-RTdM.roa (raw, json)
Hash identifier: Iy9XdDJG9XT5wNy5Q9DT86GoD1N0X3Jopf38cEDCgDQ=
Subject key identifier: 0A:87:16:FD:B7:9C:A5:7B:93:2C:F7:4A:EF:12:E4:D7:3F:91:4D:D3
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019A79633C2984DBE25FFCED2C8B56528DEF
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/CocW_becpXuTLPdK7xLk1z-RTdM.roa
Signing time: Wed 12 Nov 2025 18:45:37 +0000
ROA not before: Wed 12 Nov 2025 18:45:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62300
IP address blocks: 37.221.81.0/24 maxlen: 24
62.192.136.0/22 maxlen: 22
62.233.47.0/24 maxlen: 24
194.32.241.0/24 maxlen: 24
194.61.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Nov 2025 15:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:79:63:3c:29:84:db:e2:5f:fc:ed:2c:8b:56:52:8d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Nov 12 18:45:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a8716fdb79ca57b932cf74aef12e4d73f914dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:34:c4:38:e5:9a:28:b5:9d:f2:11:2d:fb:ef:
6b:f2:8f:a5:b2:2d:94:e3:85:12:cd:28:74:07:bf:
f1:cb:13:34:f3:86:57:00:f4:cb:18:85:43:ec:5c:
3e:91:3e:2f:3a:ad:a7:97:d9:5b:77:a7:b3:10:37:
c1:66:2c:52:1f:c5:b6:b2:f7:9f:e9:ae:bb:f0:1d:
28:37:f2:6e:0a:a1:e7:f9:ce:9d:20:75:a1:a5:6c:
71:21:5a:a0:66:cc:4e:31:15:ba:9c:10:a9:44:bf:
d5:05:ee:69:0e:93:1e:b5:bd:a6:46:4e:8c:84:df:
55:12:ef:77:f0:a8:5f:96:c4:40:34:de:92:de:07:
11:69:ea:6e:95:4c:65:f2:35:c8:32:55:dc:3f:be:
e0:d5:c0:40:be:57:a5:0f:66:8b:d7:3c:1c:d3:74:
9b:b7:4f:d6:f3:90:6e:12:8c:77:a5:a5:fc:f5:14:
0f:28:4d:17:f6:d1:89:b7:fd:f2:9f:17:21:b6:90:
5c:10:df:53:3d:f1:d3:6a:f5:3a:cc:7b:72:79:3f:
41:d5:13:0d:0c:eb:b8:0a:c9:4a:5b:d9:e6:f4:f5:
c9:de:9c:3a:80:ec:76:8c:04:1d:49:3e:cf:2c:a0:
63:d0:7b:65:d4:8e:34:38:7b:32:3f:a4:14:6f:06:
80:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:87:16:FD:B7:9C:A5:7B:93:2C:F7:4A:EF:12:E4:D7:3F:91:4D:D3
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/CocW_becpXuTLPdK7xLk1z-RTdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.81.0/24
62.192.136.0/22
62.233.47.0/24
194.32.241.0/24
194.61.8.0/24
Signature Algorithm: sha256WithRSAEncryption
92:51:6d:81:da:1d:9a:2b:2c:5f:d0:4a:75:36:26:1d:74:a9:
c2:24:42:0f:42:f3:5f:60:79:bc:c7:be:c1:1a:3a:d1:de:d7:
46:3d:ff:3e:7b:57:82:41:c7:07:5f:db:5c:55:48:03:d0:84:
7a:5d:b7:5a:a4:16:33:67:da:ea:aa:df:d0:20:fb:34:88:42:
58:24:6f:07:c2:03:c6:24:5a:41:84:e8:98:cc:04:5f:b1:ee:
ff:ea:53:6d:7f:76:48:38:18:e4:64:d3:f5:d0:15:c8:af:8c:
36:cc:eb:e8:42:78:bb:1d:c3:4c:d8:43:3c:b8:96:63:64:3a:
be:83:54:51:cc:0b:de:26:f2:fa:4f:cb:c9:78:94:b1:91:7d:
91:02:e5:17:71:6a:4f:18:8f:12:5a:00:bd:58:e9:b9:6d:24:
58:ec:07:94:98:9a:5f:97:55:00:fb:d8:ba:b7:e4:0d:e6:f0:
57:e9:da:02:d5:8d:9f:12:49:b1:a6:78:c9:c8:90:9b:30:ae:
a5:8f:29:7b:2e:4c:f9:1e:a1:bb:c3:1a:e4:2f:56:b7:fb:70:
b6:eb:a3:7f:79:f1:0c:05:57:15:1a:06:d8:14:38:1a:36:57:
a7:a0:d8:6f:7e:c2:dc:80:c2:26:1b:4c:55:2a:f9:f9:97:d7:
03:19:6e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 15 23:41:02 2025 by rpki-client