Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/AUcTDGFOG81He-CgX2Nb9NjPt98.roa
File: AUcTDGFOG81He-CgX2Nb9NjPt98.roa (raw, json)
Hash identifier: VCQVsxF89yc5l33h6/1499iiv5KQTcfZEYfizAwCUSE=
Subject key identifier: 01:47:13:0C:61:4E:1B:CD:47:7B:E0:A0:5F:63:5B:F4:D8:CF:B7:DF
Certificate issuer: /CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Certificate serial: 0199E6D6C1D4565D7D483677784C484D94D3
Authority key identifier: E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/AUcTDGFOG81He-CgX2Nb9NjPt98.roa
Signing time: Wed 15 Oct 2025 07:47:37 +0000
ROA not before: Wed 15 Oct 2025 07:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197932
IP address blocks: 37.60.200.0/21 maxlen: 24
193.39.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e6:d6:c1:d4:56:5d:7d:48:36:77:78:4c:48:4d:94:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76210e38b16909a7ee8fe3b8d06647f0665292b
Validity
Not Before: Oct 15 07:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0147130c614e1bcd477be0a05f635bf4d8cfb7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1f:86:0e:af:72:33:f2:e7:28:8a:8c:b5:24:
56:79:86:e3:4b:44:a9:5f:87:bd:d9:a6:dc:b4:3c:
84:17:a9:18:ab:ee:2c:94:2a:0d:43:58:4c:45:8e:
d6:9f:6c:60:a1:43:b4:e8:01:15:d4:43:3a:a6:e7:
4f:b2:35:cc:aa:fd:1c:c4:8a:af:aa:ca:d2:1d:0b:
5a:b9:ec:07:39:98:13:aa:df:fa:06:60:97:94:15:
ad:ac:20:9a:79:93:96:01:38:b3:a9:1f:ab:64:22:
fa:6c:e6:99:2c:0c:34:59:e7:dd:a6:ef:f2:db:fd:
92:e1:5d:ec:5e:4a:a1:04:71:62:8e:23:45:4c:fe:
d6:73:e7:1a:ad:d0:1c:d7:e4:31:2c:6f:e7:f6:fc:
0c:75:ef:7d:da:1e:9b:32:71:ca:b1:d0:07:e8:10:
40:c7:d5:48:d0:06:d4:6e:99:6d:9d:70:bf:0d:83:
1e:72:a3:68:3c:23:8c:02:ad:37:8c:c0:0a:62:87:
45:fc:7d:78:07:76:97:a3:c0:6a:63:d7:05:c3:92:
9c:d6:1b:c8:e9:fa:c2:9e:4b:6e:63:7c:ec:47:ea:
d8:83:95:fa:f3:62:22:46:6b:84:e3:6b:fa:57:23:
57:fc:12:70:9b:5c:4a:49:ab:11:c0:c6:0d:6c:46:
59:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:47:13:0C:61:4E:1B:CD:47:7B:E0:A0:5F:63:5B:F4:D8:CF:B7:DF
X509v3 Authority Key Identifier:
keyid:E7:62:10:E3:8B:16:90:9A:7E:E8:FE:3B:8D:06:64:7F:06:65:29:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52IQ44sWkJp-6P47jQZkfwZlKSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/AUcTDGFOG81He-CgX2Nb9NjPt98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6d6b76-b4b7-4f7e-8628-cf794658f5be/1/52IQ44sWkJp-6P47jQZkfwZlKSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.60.200.0/21
193.39.192.0/24
Signature Algorithm: sha256WithRSAEncryption
10:75:54:75:50:19:84:7e:7e:3b:cd:b2:45:8c:29:c0:32:63:
65:57:d2:ae:02:2b:f6:96:8b:25:04:b8:fc:58:20:47:86:2c:
40:e5:e3:db:f7:f9:c3:e4:06:31:aa:92:8c:bf:9c:07:22:48:
73:e4:59:e8:9d:0d:17:52:f1:76:5c:6d:73:c2:46:f3:7f:78:
17:4b:86:f9:50:d2:46:00:77:df:71:cf:14:83:ec:ef:c9:5f:
5b:3f:cd:4d:6a:a2:cc:45:2b:10:53:ec:cd:be:a8:af:02:d9:
a5:b0:da:b7:17:f8:0b:8c:f0:4f:6e:ec:48:79:d0:8a:8d:96:
26:c6:06:48:e0:c7:19:c8:cb:2a:5b:7b:b8:ca:1b:b9:27:8b:
96:5c:da:c0:5b:7a:6d:0f:f6:52:b1:92:ab:2f:70:a0:fc:25:
f4:0d:77:b8:a5:da:b4:a5:6f:4a:ce:fe:e9:e8:11:36:8a:93:
83:eb:e6:a3:d0:d7:90:da:68:aa:7f:fa:be:f4:42:50:5d:4e:
d4:ba:df:8f:09:46:6a:0c:7c:e0:19:22:1d:05:87:01:53:db:
72:b3:ec:88:f6:5a:b8:01:ba:9b:9d:da:2c:bd:4e:59:46:53:
1c:e3:2f:b4:7f:a2:00:d1:ac:94:8e:96:4e:fc:20:29:9c:14:
91:44:c1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:07:21 2025 by rpki-client