Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/aMYTDoy-atROFcdvcAZ3DJlPN5M.roa
File: aMYTDoy-atROFcdvcAZ3DJlPN5M.roa (raw, json)
Hash identifier: xs/811bK0GOCRDo/JHIlphnjgoQcSZGktyUSLqywPok=
Subject key identifier: 68:C6:13:0E:8C:BE:6A:D4:4E:15:C7:6F:70:06:77:0C:99:4F:37:93
Certificate issuer: /CN=1d8e8df5c031107118da61f29ab4f419d29d5a8a
Certificate serial: 0199197DE207ABB7D8A485165C185C6E2B90
Authority key identifier: 1D:8E:8D:F5:C0:31:10:71:18:DA:61:F2:9A:B4:F4:19:D2:9D:5A:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/aMYTDoy-atROFcdvcAZ3DJlPN5M.roa
Signing time: Fri 05 Sep 2025 10:48:24 +0000
ROA not before: Fri 05 Sep 2025 10:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5386
IP address blocks: 62.61.0.0/20 maxlen: 20
62.61.0.0/21 maxlen: 21
62.61.8.0/21 maxlen: 21
195.170.224.0/19 maxlen: 19
195.170.224.0/20 maxlen: 20
195.170.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:19:7d:e2:07:ab:b7:d8:a4:85:16:5c:18:5c:6e:2b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8e8df5c031107118da61f29ab4f419d29d5a8a
Validity
Not Before: Sep 5 10:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68c6130e8cbe6ad44e15c76f7006770c994f3793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a8:95:26:fc:46:82:99:63:4b:1a:b7:8f:55:
2b:24:20:92:44:cb:47:16:c7:55:3a:ff:02:4d:46:
9a:11:00:a2:73:81:8a:80:ce:5b:62:d2:f1:ea:35:
52:26:75:0e:d5:45:64:6f:48:d2:5b:ed:b9:ed:25:
8f:3c:86:ed:42:9f:b5:68:77:cb:9e:3a:d3:92:b6:
20:2b:53:25:6b:9f:e0:9a:a3:7b:25:90:f9:d0:6b:
4b:63:ea:42:de:39:5d:2f:db:46:e8:ff:4a:e8:41:
f9:c8:14:c0:e9:c6:1e:3a:03:a0:2f:cc:50:18:8c:
cb:13:66:78:e8:a3:a5:15:1a:73:fc:46:65:1c:d0:
92:5e:b2:8c:76:73:e5:c9:fc:f3:3b:64:bf:22:c1:
8b:c0:42:cf:67:19:b3:69:ca:a2:05:bd:b3:f0:97:
40:2a:89:8a:a0:4f:d1:a0:1c:8f:a0:ef:64:69:ef:
cc:41:9d:0a:6a:48:06:76:95:5c:c8:eb:b6:49:90:
f6:d6:1d:a1:b0:1a:d3:18:d3:b3:36:7d:c1:66:da:
91:68:d6:ef:9a:4e:fe:71:92:dd:6e:87:5e:27:46:
61:5c:22:7e:c0:32:52:28:88:13:3d:a4:3a:a6:87:
e9:16:04:c4:ab:80:72:b4:c7:3a:33:3d:b2:d2:21:
56:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C6:13:0E:8C:BE:6A:D4:4E:15:C7:6F:70:06:77:0C:99:4F:37:93
X509v3 Authority Key Identifier:
keyid:1D:8E:8D:F5:C0:31:10:71:18:DA:61:F2:9A:B4:F4:19:D2:9D:5A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6N9cAxEHEY2mHymrT0GdKdWoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/aMYTDoy-atROFcdvcAZ3DJlPN5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/55ac67-9c76-4893-89a5-b1d38b13fda9/1/HY6N9cAxEHEY2mHymrT0GdKdWoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.61.0.0/20
195.170.224.0/19
Signature Algorithm: sha256WithRSAEncryption
35:30:4a:4d:14:95:74:77:17:48:b8:e0:40:e1:ec:c2:69:93:
42:18:6b:3f:53:f0:ea:7d:97:1c:58:3a:18:73:b3:2a:2d:60:
69:30:f3:04:5e:ed:55:4f:66:8a:0a:76:81:3d:fd:60:7d:37:
20:86:52:ac:dc:93:0c:5a:2c:bc:f3:1f:c4:bd:4f:95:55:87:
9d:72:bf:c3:3e:e5:7a:48:65:7e:de:33:a2:60:12:48:98:de:
95:41:b0:d8:ab:ba:c2:5d:93:cc:87:ef:b1:12:bc:d9:af:20:
8d:c8:44:65:93:bd:d1:01:fe:d6:e4:11:85:37:26:5f:c6:a7:
1b:3d:0b:4c:9f:67:82:70:23:4e:7c:b0:01:1e:e8:54:65:01:
db:25:51:6f:76:9c:d4:91:74:2f:d6:cb:2a:d4:dc:b4:ba:1b:
a4:ca:26:aa:20:46:f1:4b:4e:e9:13:e8:12:67:6f:be:a5:6e:
c5:25:49:38:e5:e8:c8:8a:b6:27:6e:a3:0f:7e:a3:ad:35:fe:
22:d9:8c:fd:ba:38:17:39:74:73:6f:d7:2b:34:47:cc:98:e7:
4d:fb:19:88:5e:0b:c5:e0:a3:17:8a:2b:03:61:d5:87:5c:b1:
3e:2e:2a:67:44:4c:1e:6e:4c:a7:16:c0:0d:db:0f:5b:31:4e:
ea:d3:35:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 05:40:55 2025 by rpki-client