Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/UueWcU4Q00o_IZEjIn0tQkIZHVg.roa
File: UueWcU4Q00o_IZEjIn0tQkIZHVg.roa (raw, json)
Hash identifier: K04uztC+U5jxVpEpYWqdgCa99Lrsgi/1SgksZlSEIKc=
Subject key identifier: 52:E7:96:71:4E:10:D3:4A:3F:21:91:23:22:7D:2D:42:42:19:1D:58
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 0199BF2AD118E3EA76262B174952B85E9CBC
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/UueWcU4Q00o_IZEjIn0tQkIZHVg.roa
Signing time: Tue 07 Oct 2025 14:54:38 +0000
ROA not before: Tue 07 Oct 2025 14:54:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 62.72.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Oct 2025 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:bf:2a:d1:18:e3:ea:76:26:2b:17:49:52:b8:5e:9c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Oct 7 14:54:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52e796714e10d34a3f219123227d2d4242191d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3d:a5:4b:b9:09:f6:43:48:6f:72:7a:41:3a:
69:87:cb:bf:90:18:fe:71:fa:b5:06:d0:7c:4b:08:
f9:66:c5:31:5d:93:f0:d3:0e:e3:90:01:53:5e:3e:
07:46:24:74:a3:42:32:ef:7d:5f:d3:dd:94:f2:be:
6a:66:fc:28:37:55:0f:a6:e0:59:06:04:46:ed:4b:
6f:9d:23:32:57:e2:1c:0f:c9:70:e5:30:9f:44:06:
3d:04:d5:21:b2:ea:18:17:5f:5c:cc:fe:e5:19:20:
4b:b8:a6:e3:b0:b9:08:c1:8e:87:e0:08:12:32:3b:
d1:48:b7:cf:e6:d7:76:2d:c2:ee:a5:61:87:ba:f5:
da:4c:c4:13:66:94:56:77:0c:73:df:43:cb:a8:9b:
6b:ad:54:a2:74:94:90:8c:c6:4a:a3:c4:a3:c8:13:
d4:66:48:bc:6b:53:ac:75:73:35:ba:04:ea:35:a6:
a9:8e:75:38:42:78:b0:00:f3:f3:91:0b:95:2a:61:
1f:95:12:ca:03:75:2c:8e:f8:70:64:aa:c4:0c:31:
1d:e5:29:1f:7e:de:be:c2:a7:d5:e2:6e:2e:7d:b0:
fb:10:3c:fb:0a:c8:d7:01:cc:a5:df:49:75:3c:aa:
18:77:4c:81:0e:09:63:01:47:67:e0:c7:f1:4d:1f:
3a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E7:96:71:4E:10:D3:4A:3F:21:91:23:22:7D:2D:42:42:19:1D:58
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/UueWcU4Q00o_IZEjIn0tQkIZHVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.170.0/24
Signature Algorithm: sha256WithRSAEncryption
77:35:f4:83:40:31:44:18:78:c3:30:c2:e7:05:fc:97:80:2b:
bf:99:dc:4b:b7:c6:38:15:25:bf:ab:e3:f0:b9:79:23:7b:af:
41:99:50:0d:d0:49:b1:79:00:24:53:3f:8b:bc:88:e0:84:6f:
4c:79:7c:fc:7c:61:96:86:75:95:e9:9c:78:23:d6:13:bc:0b:
7a:a9:ef:57:84:2a:a2:bb:23:f5:26:54:b1:92:29:28:03:5c:
f7:ce:bd:47:10:bd:f0:31:4b:e9:01:75:1f:16:72:3c:c0:5f:
b3:9b:10:45:b0:23:98:21:ce:e0:3f:66:af:cf:e1:0b:02:fd:
58:46:b3:53:eb:3b:0d:f0:5f:89:39:dd:c0:b3:53:f9:4d:d6:
fb:86:c7:92:30:0e:86:a5:b9:98:ac:22:58:02:ea:58:0d:4f:
7f:e3:6e:84:b8:4a:3b:9c:0f:da:bc:33:4a:8a:6b:23:dd:5c:
6c:2c:4f:35:73:3a:59:da:24:07:a2:84:b9:45:ec:99:cb:35:
53:19:6d:1b:da:c4:3e:9b:fe:4f:a8:45:6f:c1:e8:54:cb:8a:
70:ea:e9:aa:8e:48:b4:37:61:09:0e:7b:22:5f:4a:5f:f2:9d:
59:44:4b:12:9e:ed:e0:42:67:93:28:0e:63:90:79:ad:9f:90:
3b:f9:4a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:08:01 2025 by rpki-client