Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/KAJsgRRCXT2AOjIc1RGApVvjUBI.roa
File: KAJsgRRCXT2AOjIc1RGApVvjUBI.roa (raw, json)
Hash identifier: EyUDYmsNH3ExJ9MYGWA5eL+TYUNqzvdF73tTTAESWwg=
Subject key identifier: 28:02:6C:81:14:42:5D:3D:80:3A:32:1C:D5:11:80:A5:5B:E3:50:12
Certificate issuer: /CN=860858bc2dcbb376d791a9be9af1520238535d9f
Certificate serial: 019A4F1B575196E8043B9F9D7B52E782A8AF
Authority key identifier: 86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/KAJsgRRCXT2AOjIc1RGApVvjUBI.roa
Signing time: Tue 04 Nov 2025 13:43:03 +0000
ROA not before: Tue 04 Nov 2025 13:43:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15584
IP address blocks: 62.101.0.0/21 maxlen: 21
62.101.0.0/23 maxlen: 23
62.101.0.0/24 maxlen: 24
62.101.1.0/24 maxlen: 24
62.101.2.0/23 maxlen: 23
62.101.2.0/24 maxlen: 24
62.101.3.0/24 maxlen: 24
62.101.4.0/22 maxlen: 22
62.101.4.0/23 maxlen: 23
62.101.4.0/24 maxlen: 24
62.101.5.0/24 maxlen: 24
62.101.6.0/24 maxlen: 24
62.101.7.0/24 maxlen: 24
62.101.8.0/21 maxlen: 21
62.101.8.0/23 maxlen: 23
62.101.8.0/24 maxlen: 24
62.101.9.0/24 maxlen: 24
62.101.10.0/23 maxlen: 23
62.101.10.0/24 maxlen: 24
62.101.11.0/24 maxlen: 24
62.101.12.0/22 maxlen: 22
62.101.12.0/24 maxlen: 24
62.101.13.0/24 maxlen: 24
62.101.14.0/24 maxlen: 24
62.101.15.0/24 maxlen: 24
62.101.30.0/23 maxlen: 23
62.101.30.0/24 maxlen: 24
62.101.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:1b:57:51:96:e8:04:3b:9f:9d:7b:52:e7:82:a8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860858bc2dcbb376d791a9be9af1520238535d9f
Validity
Not Before: Nov 4 13:43:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28026c8114425d3d803a321cd51180a55be35012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d1:e6:c5:50:d4:7f:c9:77:34:39:69:6e:19:
dd:78:27:2e:0f:21:d3:07:fe:7a:65:20:58:fb:ca:
60:15:13:19:a1:d1:ed:1d:41:5f:33:29:9a:a2:4e:
19:41:c0:e2:e4:87:7c:65:9e:e7:4a:b1:85:4a:cf:
90:72:14:0b:ae:46:82:99:77:a5:2a:53:c9:3a:0a:
45:1c:d1:8a:29:99:bb:a4:80:37:24:7f:c5:72:7d:
f2:69:3e:ca:4a:59:2c:c3:be:a2:8c:6d:0f:24:73:
90:12:41:d5:7d:76:ae:1d:ba:b2:33:03:38:89:71:
7c:b8:ac:aa:21:1f:59:ce:03:80:60:8f:64:c8:53:
62:93:54:7c:3d:68:b0:65:e9:66:2d:46:42:6a:67:
d4:f8:27:06:95:e2:91:c8:2d:7d:26:bc:f6:8e:5f:
af:cf:95:e3:dd:35:fd:14:9e:2a:e7:ad:07:2c:84:
8b:4c:28:19:2a:f1:22:62:88:6a:fe:e9:1a:85:89:
c1:88:fb:6b:07:d4:7e:bf:01:b9:e4:5b:95:ad:c9:
ce:ad:9e:12:96:8f:f6:ef:e1:f2:b5:0d:82:01:e1:
d7:41:a6:5b:3c:3b:e6:d5:a2:76:04:04:bc:cc:4d:
9e:35:72:7d:d2:c8:72:49:d0:4c:99:01:fa:41:0d:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:02:6C:81:14:42:5D:3D:80:3A:32:1C:D5:11:80:A5:5B:E3:50:12
X509v3 Authority Key Identifier:
keyid:86:08:58:BC:2D:CB:B3:76:D7:91:A9:BE:9A:F1:52:02:38:53:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hghYvC3Ls3bXkam-mvFSAjhTXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/KAJsgRRCXT2AOjIc1RGApVvjUBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/8613a0-d9ec-4c8a-b334-990bb1ccd20c/1/hghYvC3Ls3bXkam-mvFSAjhTXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.101.0.0/20
62.101.30.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:47:a2:8a:d5:7b:25:31:48:89:57:12:e9:a7:56:fc:46:cd:
ce:35:df:0d:8a:b0:63:c0:74:b2:3b:aa:41:1e:99:76:f7:8e:
f3:b5:f2:86:61:49:df:65:da:5f:0d:76:2a:9b:34:cb:24:7e:
fe:d7:54:32:78:bd:af:c3:cc:ce:bf:a3:5c:2b:c6:35:14:54:
9e:a6:e3:71:3d:35:cd:8f:c5:d2:51:57:4f:a5:f7:7c:7a:8d:
a5:c2:21:02:37:24:67:72:4b:3a:69:8c:d4:b6:65:b5:37:4f:
99:90:c5:49:35:21:2d:de:0e:bf:bd:f8:34:37:42:a4:e4:e6:
fc:b2:31:fd:94:4f:f5:b1:09:f3:32:7d:95:c8:6e:29:29:26:
92:0f:f2:a2:0f:2d:8d:73:27:97:97:aa:71:bf:35:50:0a:7d:
95:ac:df:9f:52:68:4d:6a:b5:5e:af:98:8f:73:ad:30:b4:96:
2d:69:26:76:c2:80:0b:b9:3d:74:8c:04:8e:f2:d1:a3:38:ee:
50:f0:c3:c3:05:2b:13:61:a4:77:79:2c:38:ef:8b:d1:11:76:
c0:54:73:60:29:7e:ab:91:db:f3:03:ac:bd:be:a8:5c:25:c9:
1d:07:61:a4:f6:3e:f8:d5:30:b0:c1:2c:ce:8d:c5:a5:b9:58:
61:f7:42:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:20 2025 by rpki-client