Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/bpudnBe4MRPMXUGN1kkE9BWmWXk.roa
File: bpudnBe4MRPMXUGN1kkE9BWmWXk.roa (raw, json)
Hash identifier: e7Zr1oaLphI8Z92ngEeaEhFJ7Q6Dc3Pf3ruPNFbQjyg=
Subject key identifier: 6E:9B:9D:9C:17:B8:31:13:CC:5D:41:8D:D6:49:04:F4:15:A6:59:79
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 0199CCCA0FC1F47467666BA5F012E0186B7D
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/bpudnBe4MRPMXUGN1kkE9BWmWXk.roa
Signing time: Fri 10 Oct 2025 06:23:38 +0000
ROA not before: Fri 10 Oct 2025 06:23:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210814
IP address blocks: 62.60.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cc:ca:0f:c1:f4:74:67:66:6b:a5:f0:12:e0:18:6b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Oct 10 06:23:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e9b9d9c17b83113cc5d418dd64904f415a65979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:de:60:f8:2b:85:b6:e2:67:6a:ce:9f:9e:54:
31:60:a6:c8:bd:d4:2c:b6:f3:62:29:c6:56:23:8f:
66:58:1b:d5:b4:59:75:a9:10:84:fa:64:df:bd:e0:
5b:48:58:53:db:c0:b4:e3:0e:a2:83:61:1f:8b:fe:
76:0c:cc:f2:7b:85:dc:52:41:06:59:fe:8c:ba:8e:
58:7b:62:06:35:a1:1c:13:1d:c7:b8:24:15:3d:25:
62:a7:d2:30:1c:c4:c7:7f:4d:d4:81:0b:82:93:41:
b0:4b:5f:9d:57:52:21:53:23:c6:d2:6d:02:0b:1e:
c1:05:2e:98:c0:69:ae:67:10:90:9f:0f:6f:b1:b8:
df:48:3c:6a:96:b3:40:85:6b:7d:30:57:34:d8:d8:
f3:e9:8f:68:c8:c7:d5:c3:ec:9a:db:1a:7b:85:bd:
a7:bf:f1:a6:ca:4a:da:8f:67:0b:05:92:5a:42:8e:
f6:0a:5b:10:84:e9:23:f0:a2:ab:02:e2:39:35:af:
62:35:06:b7:31:f0:3d:7b:09:c9:c7:29:70:6b:37:
a1:e5:4e:2d:97:f8:70:bd:bd:01:91:f1:37:4d:a0:
22:71:8a:4b:e2:02:71:66:b2:e2:6e:c7:48:63:d0:
12:51:4e:10:1d:6f:dc:3c:54:95:a4:27:c3:05:66:
41:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9B:9D:9C:17:B8:31:13:CC:5D:41:8D:D6:49:04:F4:15:A6:59:79
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/bpudnBe4MRPMXUGN1kkE9BWmWXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.60.190.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:41:62:73:66:eb:a6:3e:77:27:6b:c8:23:79:34:49:22:1c:
60:87:e7:77:d0:74:0f:62:0c:be:6f:eb:bd:5c:8a:12:30:74:
98:ae:79:e1:20:fd:b8:74:f1:ff:5f:4d:eb:14:ac:0c:51:9d:
5a:ea:01:9c:19:94:ef:6e:67:ab:ac:52:bc:56:c4:0c:0d:6f:
d6:b6:3d:ad:15:dd:4a:80:46:09:f8:28:2f:a1:4c:a4:35:aa:
ad:27:1a:51:ac:e7:85:77:d6:68:84:38:ab:2e:f8:82:fb:76:
c8:7c:6c:f2:79:36:b2:51:d4:5c:30:7e:cf:23:be:ff:be:f2:
69:c7:51:bf:06:95:70:eb:88:dc:e2:49:8e:a1:94:8d:83:12:
4f:42:11:d1:ef:ae:d3:74:9c:3b:d3:a2:8e:81:3a:1a:b3:23:
ad:2b:1c:1f:6c:f3:2a:2a:5a:d8:da:0a:07:24:4b:74:36:48:
42:17:b3:f6:c8:ec:33:e7:a6:27:e9:6d:4f:e3:07:19:68:0a:
2c:7b:7d:a0:97:63:ed:e3:61:38:6f:96:49:7f:de:c7:6b:e0:
bd:e6:bf:ac:2e:b4:10:d6:a3:2b:bd:8c:d7:43:04:c5:ba:ae:
c9:3d:d0:4d:b3:2b:c1:5c:34:00:f6:67:05:4d:63:68:cf:4a:
ea:03:ad:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:09:22 2025 by rpki-client