Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/J2m2ISQHz5hJjKyZkS2pJF0KRqI.roa
File: J2m2ISQHz5hJjKyZkS2pJF0KRqI.roa (raw, json)
Hash identifier: 6G3IQ5SdI2eYbxPznkHPeUYzIj1Gq0tlz/lJz4R+v2c=
Subject key identifier: 27:69:B6:21:24:07:CF:98:49:8C:AC:99:91:2D:A9:24:5D:0A:46:A2
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 01993D811C87CD4EA23FA712815FD80C2880
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/J2m2ISQHz5hJjKyZkS2pJF0KRqI.roa
Signing time: Fri 12 Sep 2025 10:38:15 +0000
ROA not before: Fri 12 Sep 2025 10:38:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205025
IP address blocks: 62.101.160.0/24 maxlen: 24
62.101.161.0/24 maxlen: 24
62.101.162.0/24 maxlen: 24
62.101.163.0/24 maxlen: 24
62.101.164.0/24 maxlen: 24
62.101.165.0/24 maxlen: 24
62.101.166.0/24 maxlen: 24
62.101.167.0/24 maxlen: 24
82.198.32.0/24 maxlen: 24
82.198.33.0/24 maxlen: 24
82.198.34.0/24 maxlen: 24
82.198.35.0/24 maxlen: 24
185.53.102.0/24 maxlen: 24
185.53.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3d:81:1c:87:cd:4e:a2:3f:a7:12:81:5f:d8:0c:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Sep 12 10:38:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2769b6212407cf98498cac99912da9245d0a46a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:73:5e:3e:82:15:d0:34:5b:75:7e:e6:8b:2d:
15:07:f7:3e:6a:78:9a:bf:44:ac:85:04:d6:9f:41:
1c:22:b8:30:08:76:37:eb:b6:91:33:7c:ba:b6:08:
42:51:9a:98:7d:92:28:e4:07:65:5c:8c:5a:bb:fc:
1d:96:4d:89:05:c8:2c:b2:b9:09:cb:03:22:03:48:
b4:49:43:26:c5:1a:e3:55:42:c7:47:6e:f4:81:25:
9e:8f:b3:5e:fa:22:52:b7:0b:43:87:c2:c3:6c:20:
0c:79:52:50:7f:c6:9a:cd:d6:95:71:a7:2a:d1:1f:
5b:f3:b1:a7:66:1d:75:bb:19:fe:e3:c2:75:41:de:
9e:6e:97:9e:48:a7:b7:fb:f7:39:07:35:7a:96:92:
ae:33:9c:16:98:67:3e:0f:82:72:63:10:85:c8:5b:
58:80:a8:0f:2f:29:83:45:27:7d:26:a8:9f:aa:a9:
12:aa:f9:8e:0c:f7:f4:e4:ce:60:6f:c0:6b:6b:c9:
f7:d1:2f:6b:c4:77:06:32:c3:01:7f:66:13:2b:bf:
a0:6a:12:83:0a:93:fa:57:b8:a6:78:c8:1e:2e:dc:
b3:0a:99:d8:d1:2d:69:7a:3c:85:7a:cd:52:4a:ac:
d0:8c:7e:17:74:2d:2d:73:4d:c6:e8:1a:55:b9:78:
d6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:69:B6:21:24:07:CF:98:49:8C:AC:99:91:2D:A9:24:5D:0A:46:A2
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/J2m2ISQHz5hJjKyZkS2pJF0KRqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.101.160.0/21
82.198.32.0/22
185.53.102.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:89:d2:61:2e:55:01:2a:60:f5:35:5d:09:68:e4:c2:7c:60:
78:97:8e:19:83:40:99:63:ec:a0:7f:89:c3:8a:e8:4e:21:98:
fa:f4:d5:08:8a:7c:f9:e5:d1:f3:7b:7c:e1:a2:01:62:c2:f1:
38:6c:57:5c:9d:3d:ed:3a:51:42:7a:b7:de:2a:7d:98:d7:03:
d6:88:3a:ff:ca:64:50:e5:1e:8e:86:25:63:13:13:40:46:70:
bb:dd:98:35:ed:44:23:5d:6e:1c:5a:a5:df:8e:ed:ff:7e:9b:
4d:f9:dd:79:cc:58:64:33:29:bc:45:12:17:c3:65:9c:30:a5:
91:e6:69:0f:d9:de:e1:3a:95:f1:e6:82:42:1c:f4:f2:38:9f:
80:3f:90:49:3c:e7:6e:78:a7:e9:b7:d0:37:7b:b2:2d:11:e0:
67:ba:a5:b8:40:42:40:ef:eb:0d:05:e4:13:65:ed:a2:7f:51:
17:80:e7:92:f3:e1:61:d8:a6:33:30:44:63:53:da:63:e0:90:
dc:06:f5:89:fd:e4:21:dc:30:24:32:12:90:f3:cb:29:39:be:
0e:fb:fa:43:3f:e2:cc:b0:f2:35:d0:d4:0c:66:17:46:95:08:
53:5e:09:a0:4b:b1:29:27:6b:15:e7:f2:e9:fa:96:84:dd:62:
d7:69:80:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:49 2025 by rpki-client