Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aUKOJrnyNsDVraosl-1-341781M.roa
File: aUKOJrnyNsDVraosl-1-341781M.roa (raw, json)
Hash identifier: omnP8BEQZ4v0uR+9FGHR3kGU8+xYRsRiJd27fBInyzs=
Subject key identifier: 69:42:8E:26:B9:F2:36:C0:D5:AD:AA:2C:97:ED:7E:DF:8D:7B:F3:53
Certificate issuer: /CN=68bd39d793125c684dff272f88622bac432180f0
Certificate serial: 0199A43D44AF6292948F3DE074B1549E87A9
Authority key identifier: 68:BD:39:D7:93:12:5C:68:4D:FF:27:2F:88:62:2B:AC:43:21:80:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aUKOJrnyNsDVraosl-1-341781M.roa
Signing time: Thu 02 Oct 2025 09:25:02 +0000
ROA not before: Thu 02 Oct 2025 09:25:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197650
IP address blocks: 62.102.152.0/21 maxlen: 21
185.30.112.0/24 maxlen: 24
185.30.113.0/24 maxlen: 24
185.30.114.0/24 maxlen: 24
185.30.115.0/24 maxlen: 24
2a03:4540::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a4:3d:44:af:62:92:94:8f:3d:e0:74:b1:54:9e:87:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bd39d793125c684dff272f88622bac432180f0
Validity
Not Before: Oct 2 09:25:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69428e26b9f236c0d5adaa2c97ed7edf8d7bf353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:36:11:ad:22:f6:7c:06:c1:31:73:ec:67:
06:26:93:c8:af:9b:24:bc:79:6d:63:a3:2f:81:b2:
48:75:ac:07:b7:8a:40:cc:42:5e:08:3d:2a:81:9d:
76:b6:ea:78:b6:be:b8:22:6d:06:40:20:3e:f6:f3:
0f:96:0f:68:3b:d4:1e:e8:d9:ba:9a:88:d6:9a:55:
de:39:65:82:19:d8:6d:f2:ee:4e:8a:43:48:db:a5:
ee:18:c9:e0:72:62:50:ad:e1:79:8f:c1:a2:06:07:
c0:3b:24:b5:dd:6b:f3:ce:44:c5:64:ce:ab:18:90:
2c:14:b9:35:b1:0d:6d:71:4c:82:8c:60:9b:96:8b:
8c:88:18:be:09:2c:7b:74:ac:05:ca:e3:6b:27:56:
28:cf:9c:17:03:17:47:4f:ed:58:5e:9c:ae:8c:0c:
3b:31:40:11:80:41:5d:b7:ca:83:ae:86:00:8c:e9:
bd:5d:41:be:52:60:bb:39:20:a6:5c:30:ae:25:4d:
f8:af:ba:e9:3f:4a:7d:3d:99:1b:9d:95:f9:30:59:
aa:88:89:98:38:df:02:7e:ad:f0:c2:da:d8:b5:cb:
7a:2a:c7:77:2c:40:ed:53:31:89:be:4c:30:f6:45:
aa:92:1f:b2:f1:06:7b:e2:44:2b:7a:4e:22:77:8e:
b7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:42:8E:26:B9:F2:36:C0:D5:AD:AA:2C:97:ED:7E:DF:8D:7B:F3:53
X509v3 Authority Key Identifier:
keyid:68:BD:39:D7:93:12:5C:68:4D:FF:27:2F:88:62:2B:AC:43:21:80:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0515MSXGhN_ycviGIrrEMhgPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aUKOJrnyNsDVraosl-1-341781M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/424b94-e702-4b22-ae2e-0890520b8846/1/aL0515MSXGhN_ycviGIrrEMhgPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.102.152.0/21
185.30.112.0/22
IPv6:
2a03:4540::/32
Signature Algorithm: sha256WithRSAEncryption
0c:14:3b:36:d3:81:d6:0f:af:fb:c5:3c:da:eb:ba:d1:17:cd:
35:8a:98:12:08:70:b9:c9:f5:4d:b5:d7:af:e4:95:fc:da:f7:
d6:1c:63:70:e0:f5:61:5c:12:8d:e9:8c:0a:f5:b6:4b:cc:13:
7c:93:e2:20:b0:58:b0:2b:f5:06:66:42:2b:88:27:1f:fb:7c:
62:ef:13:cc:cf:08:e1:4e:02:f3:db:76:57:5d:3d:9e:c6:04:
4e:d7:c7:0a:aa:a4:06:02:78:05:a6:32:ed:0c:43:8f:5c:4b:
e5:f8:48:e1:9d:d2:38:1b:73:4b:57:05:dd:a8:93:e6:65:87:
6c:ae:02:d3:86:31:7b:b5:01:d6:bf:a2:65:3d:27:e4:a0:1c:
ae:25:6b:1b:da:df:b5:4a:fe:11:d8:36:98:d1:2a:f5:43:21:
f2:34:b5:66:29:49:6a:5d:df:d1:b4:ad:00:7a:83:dc:93:97:
47:e4:e3:11:16:da:96:3a:db:ab:0a:9d:22:73:d3:f2:f6:34:
1d:79:b1:9a:37:dc:75:29:58:f7:7a:eb:f3:f0:7b:54:75:47:
50:47:43:71:e1:dd:05:2d:a7:af:00:3e:72:80:5b:0a:92:4c:
49:bb:8e:a0:39:c6:73:04:d5:66:a5:67:99:d2:a0:db:a5:c7:
36:43:75:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:15:14 2025 by rpki-client