Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/RX7l8BxO-eKobaPUKlWDX3pgmwk.roa
File: RX7l8BxO-eKobaPUKlWDX3pgmwk.roa (raw, json)
Hash identifier: nHUjRFMgvlJlNqFCQ216ZDqgAbi+pIcXAJSF8ZIkcWo=
Subject key identifier: 45:7E:E5:F0:1C:4E:F9:E2:A8:6D:A3:D4:2A:55:83:5F:7A:60:9B:09
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0197BA559DAB888D826DFE4C6BC74F679DE8
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/RX7l8BxO-eKobaPUKlWDX3pgmwk.roa
Signing time: Sun 29 Jun 2025 06:17:42 +0000
ROA not before: Sun 29 Jun 2025 06:17:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15611
IP address blocks: 62.60.132.0/22 maxlen: 24
62.60.136.0/24 maxlen: 24
62.60.137.0/24 maxlen: 24
62.60.139.0/24 maxlen: 24
62.60.140.0/24 maxlen: 24
62.60.142.0/24 maxlen: 24
62.60.145.0/24 maxlen: 24
62.60.168.0/22 maxlen: 24
213.176.4.0/24 maxlen: 24
213.176.5.0/24 maxlen: 24
213.176.96.0/24 maxlen: 24
213.176.122.0/24 maxlen: 24
213.176.123.0/24 maxlen: 24
213.176.124.0/24 maxlen: 24
213.176.125.0/24 maxlen: 24
2001:790::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:55:9d:ab:88:8d:82:6d:fe:4c:6b:c7:4f:67:9d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jun 29 06:17:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=457ee5f01c4ef9e2a86da3d42a55835f7a609b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ec:08:93:13:6b:ab:6e:f3:a0:7e:e9:4b:d6:
d4:26:dc:15:f4:3c:18:b2:8e:b4:85:42:09:18:6b:
37:ee:bd:88:5e:2a:9b:3a:79:4f:1b:69:d7:aa:82:
3d:64:c2:5e:99:86:e0:29:e1:87:a0:66:95:00:c8:
67:2b:ed:be:91:c4:66:92:24:23:28:f9:98:33:4e:
89:3d:9c:f0:87:38:9b:85:75:c0:f5:bc:34:67:8e:
7a:fa:2f:c0:73:b4:69:de:3e:d6:c4:b6:52:17:b0:
07:65:b8:e6:5a:f4:77:2f:bb:63:b4:16:98:6c:53:
8d:ca:f3:73:af:de:80:fe:e9:3a:da:64:21:9a:0e:
7f:cb:7d:46:1c:0c:e8:91:32:64:e4:5d:8f:2f:68:
22:84:86:c4:8b:fc:59:a7:20:80:e4:c4:6b:1e:c3:
5b:25:c1:53:00:85:f9:87:a5:3f:d2:2b:cd:f1:20:
ca:ed:76:6b:7e:be:04:c5:2c:08:cb:ec:86:1d:08:
08:c7:95:d9:8d:2d:e3:cc:83:8c:1b:88:75:17:95:
e9:43:bd:5b:e0:1c:c3:eb:77:bf:aa:68:93:58:7e:
d4:96:1e:2b:a3:a8:61:df:e3:af:d8:fc:dc:58:1a:
d9:40:77:a0:3e:ff:03:58:13:dd:22:c3:0b:8f:65:
ec:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7E:E5:F0:1C:4E:F9:E2:A8:6D:A3:D4:2A:55:83:5F:7A:60:9B:09
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/RX7l8BxO-eKobaPUKlWDX3pgmwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.132.0-62.60.137.255
62.60.139.0-62.60.140.255
62.60.142.0/24
62.60.145.0/24
62.60.168.0/22
213.176.4.0/23
213.176.96.0/24
213.176.122.0-213.176.125.255
IPv6:
2001:790::/32
Signature Algorithm: sha256WithRSAEncryption
a7:47:91:aa:6c:ba:a8:4d:68:ad:53:75:94:f4:c1:8e:8f:92:
29:79:b4:85:35:a9:fc:4b:cc:81:4b:c5:20:c8:be:01:2e:ec:
ae:72:b1:51:12:a9:0c:bb:5e:ec:e3:d1:1e:a8:1a:dd:91:0c:
e6:af:94:be:85:94:38:7a:78:59:34:d0:7e:7a:4c:19:7b:7b:
77:c0:dd:ef:72:78:53:a8:d7:e7:f8:1f:7b:cd:73:a7:84:af:
33:be:af:44:ac:07:4e:90:d6:61:29:4d:90:a0:41:70:0c:89:
9b:0c:a8:f8:cc:c2:9b:cd:51:d7:e0:5a:1d:2b:87:62:81:37:
b1:58:27:7c:fa:88:31:15:c9:65:12:24:7a:7e:b7:94:0a:2c:
4c:e8:4a:17:87:75:19:57:92:05:14:57:87:87:d4:92:1f:d1:
40:fb:bd:9f:93:12:44:fe:74:1a:d0:9f:f6:66:b5:1b:d6:3a:
8a:9f:27:10:55:9a:64:81:60:8f:59:dd:6a:f9:90:f1:41:31:
23:d9:31:27:dd:fa:ae:d8:c9:82:ed:a1:2b:57:3c:99:93:32:
a6:a1:3d:51:43:e6:8b:49:79:3a:17:a4:52:95:71:98:bd:80:
75:9e:93:a1:45:b8:e3:e3:98:26:c5:c8:34:2b:8d:e2:02:c9:
ec:20:4b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 03:45:48 2025 by rpki-client