
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/Ccywd-EFb-47zGXwVvm1HK3gD5g.roa
File: Ccywd-EFb-47zGXwVvm1HK3gD5g.roa (raw, json)
Hash identifier: tofGggOpzVU4QpBRLmwlmpDY705qfzw44/NrLhvXC/s=
Subject key identifier: 09:CC:B0:77:E1:05:6F:EE:3B:CC:65:F0:56:F9:B5:1C:AD:E0:0F:98
Certificate issuer: /CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Certificate serial: 019939C6367D6DCA19AAC15FEDED9F163803
Authority key identifier: 62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/Ccywd-EFb-47zGXwVvm1HK3gD5g.roa
Signing time: Thu 11 Sep 2025 17:15:15 +0000
ROA not before: Thu 11 Sep 2025 17:15:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59965
IP address blocks: 193.200.249.0/24 maxlen: 24
2a0c:15c0:3::/64 maxlen: 64
2a0c:15c0:b3::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.mft
rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:c6:36:7d:6d:ca:19:aa:c1:5f:ed:ed:9f:16:38:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623526ad9fbec574fa4ec3d9badb5433fdaaca7b
Validity
Not Before: Sep 11 17:15:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09ccb077e1056fee3bcc65f056f9b51cade00f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:ac:cb:6a:15:66:a9:9a:e3:ec:e7:28:96:
da:01:29:47:a2:37:f6:25:9d:ac:e5:3d:d0:7b:45:
0d:de:fa:34:29:0d:2a:c9:7f:fb:7e:ac:8e:a1:f3:
a0:96:c4:5e:7b:0a:6a:e6:b7:fe:87:75:90:b8:6b:
39:17:f2:1b:53:d1:15:84:37:46:4f:b1:29:97:41:
3e:42:6f:7c:3f:4d:8a:7d:fc:b8:03:44:4a:c9:4c:
89:e7:a1:f4:f8:8b:f8:af:c1:ca:e9:39:27:d2:ce:
4e:b2:8d:93:ec:b1:4d:ae:82:f8:ea:d9:ab:42:44:
e3:0d:f4:99:56:13:7b:c8:d6:de:00:dc:fa:4f:a0:
e7:0f:fc:33:6e:de:bc:5a:ed:e8:02:f7:25:05:71:
14:74:44:75:48:47:57:80:a9:72:e8:41:73:c9:aa:
a3:3e:0e:d9:b4:4b:66:3d:2e:e7:eb:56:c2:20:a1:
67:87:b0:56:67:60:1e:c4:6e:ee:da:43:cf:1b:a3:
5e:50:b6:97:ba:1d:16:32:de:20:92:45:e2:9b:07:
9a:5c:00:9c:f1:1a:c5:3a:25:5c:ff:d2:02:d6:81:
1f:01:5c:59:0c:41:62:46:cd:c2:f2:05:8c:fe:1d:
fe:ba:a0:ac:12:3f:4e:84:8b:fe:51:b0:13:b3:b4:
57:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CC:B0:77:E1:05:6F:EE:3B:CC:65:F0:56:F9:B5:1C:AD:E0:0F:98
X509v3 Authority Key Identifier:
keyid:62:35:26:AD:9F:BE:C5:74:FA:4E:C3:D9:BA:DB:54:33:FD:AA:CA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YjUmrZ--xXT6TsPZuttUM_2qyns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/Ccywd-EFb-47zGXwVvm1HK3gD5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d8fc9-b21b-4db5-95cf-81c8ce750124/1/YjUmrZ--xXT6TsPZuttUM_2qyns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.249.0/24
IPv6:
2a0c:15c0:3::/64
2a0c:15c0:b3::/48
Signature Algorithm: sha256WithRSAEncryption
41:3d:2b:fe:e9:32:34:42:51:4b:db:de:10:72:03:6f:36:06:
4f:fd:4e:ac:9c:ec:38:b0:aa:ff:4a:ee:9b:35:20:62:dc:c3:
72:2f:e3:0f:d2:b3:aa:88:31:16:34:08:a1:36:3e:f9:fa:82:
05:68:f2:58:d3:0d:03:dc:36:17:8d:1a:1e:6a:3e:e0:81:82:
c6:22:70:65:69:d2:56:c9:46:34:86:13:3e:7a:5d:dc:06:df:
23:4c:be:d4:f9:f1:ff:6e:eb:6a:54:c6:b1:24:3b:8c:f0:e3:
66:a4:11:61:df:3a:95:97:96:21:15:95:09:6d:6c:bf:fc:ab:
a0:42:44:3c:d1:02:6a:29:7c:e0:43:ad:a6:de:88:67:48:78:
f6:b0:a1:2b:89:1a:54:1d:0a:05:1c:6c:d0:15:29:e8:ec:bf:
75:94:b7:40:61:bd:77:41:30:0a:0a:fb:a3:f9:eb:df:e8:5d:
80:c1:db:7e:67:8d:fd:96:0f:f6:d3:25:2b:86:fe:00:e4:43:
f6:79:73:2a:a9:b5:ba:f7:c8:f6:8d:55:1b:5b:48:8f:da:4a:
1d:c3:d7:a9:79:80:44:0e:a6:b9:62:9f:5d:1d:a5:9c:a5:1f:
dd:96:b9:95:6a:44:98:36:c4:16:6e:48:78:58:af:18:d2:3f:
4e:17:e0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:44:36 2025 by rpki-client