Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/aC3wds6LFuJDfIfa4GR-5HU6-Kc.roa
File: aC3wds6LFuJDfIfa4GR-5HU6-Kc.roa (raw, json)
Hash identifier: UWhDVBKLqro2+xqE0CJZri2s5RftTlScFvl2UagVGMY=
Subject key identifier: 68:2D:F0:76:CE:8B:16:E2:43:7C:87:DA:E0:64:7E:E4:75:3A:F8:A7
Certificate issuer: /CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
Certificate serial: 0199581639EBBC61A022B8C53EFF337842F7
Authority key identifier: 56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/aC3wds6LFuJDfIfa4GR-5HU6-Kc.roa
Signing time: Wed 17 Sep 2025 14:31:15 +0000
ROA not before: Wed 17 Sep 2025 14:31:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209564
IP address blocks: 212.108.184.0/21 maxlen: 24
2a02:358:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:58:16:39:eb:bc:61:a0:22:b8:c5:3e:ff:33:78:42:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
Validity
Not Before: Sep 17 14:31:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=682df076ce8b16e2437c87dae0647ee4753af8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a3:90:38:8f:9e:0b:60:ca:5d:28:42:61:93:
a7:f9:93:ad:00:f4:3f:45:e0:76:9c:bc:bd:f5:e1:
a4:bd:0c:8e:f5:96:31:47:85:e5:86:9f:b7:68:49:
f8:01:33:2e:8f:94:21:1a:70:9a:bd:c3:2d:bb:59:
1e:91:be:d6:a5:81:5b:d8:8a:1b:8a:ca:a9:1e:50:
b5:a8:fe:67:b6:bc:ab:1c:13:e9:4b:e3:d2:3d:a4:
10:d1:37:c3:ce:29:37:a7:8a:8c:ab:a2:9a:67:0c:
fc:80:f1:19:b5:76:6e:54:70:a4:52:3b:02:3f:09:
ce:4f:7e:57:04:c6:ba:42:ca:d3:52:44:4f:ec:49:
28:7c:6e:d1:fa:f6:4f:4d:4a:06:6c:7e:91:cf:a2:
43:ed:24:8e:09:82:bd:bf:18:07:d5:bf:b8:da:7b:
56:e8:a7:6a:78:53:df:69:7a:fa:7c:5d:60:1f:2b:
6b:cb:f6:4f:ac:8b:c8:1b:c9:87:2c:ca:22:70:d2:
30:5b:2e:46:e0:e3:bf:eb:40:26:8d:e1:24:4f:09:
ad:a0:0c:23:dc:9e:53:59:87:0a:4f:d6:81:3f:62:
f6:32:26:98:b1:20:18:b8:24:dd:33:8c:7f:fe:24:
7a:0a:ac:10:7c:56:ef:4d:5d:c8:dc:73:25:82:0c:
b2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2D:F0:76:CE:8B:16:E2:43:7C:87:DA:E0:64:7E:E4:75:3A:F8:A7
X509v3 Authority Key Identifier:
keyid:56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/aC3wds6LFuJDfIfa4GR-5HU6-Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.108.184.0/21
IPv6:
2a02:358:1000::/36
Signature Algorithm: sha256WithRSAEncryption
87:f6:b2:cc:df:b5:16:ad:32:11:91:78:7d:7a:ef:bd:31:d1:
f1:24:cf:86:37:4c:f7:25:6a:71:8a:6c:74:39:83:fd:5f:55:
03:af:1a:e5:b2:8f:20:24:de:fe:16:3b:83:95:17:46:bc:17:
4d:f6:46:e0:f4:dc:4a:73:6c:63:83:ae:1a:c9:af:7d:52:0e:
c4:6b:e1:66:75:2f:dc:34:a2:ae:96:80:a2:23:a6:f7:f6:b6:
f6:02:f0:26:e7:7c:77:90:41:67:28:0c:9e:eb:31:b0:df:fe:
a4:6d:0c:09:cf:5d:bb:02:bf:16:13:81:45:b7:3e:dd:fe:85:
ff:07:0b:3c:87:02:dd:be:a4:67:d9:68:b1:90:ce:f6:f8:ad:
ad:71:7b:f1:fd:cb:95:2a:1a:14:68:d1:42:1d:40:21:44:67:
e3:9b:7c:e2:54:a8:93:cd:db:f5:9a:db:93:a3:c4:b6:54:8d:
fa:c9:f8:97:45:43:82:30:75:5b:0d:ee:0e:ce:11:99:a3:21:
76:cc:c8:75:5b:ea:96:f1:81:5b:69:d6:f1:80:75:ac:8f:55:
64:b5:b4:97:d0:9e:a4:3a:90:7d:5c:38:47:7f:ff:d8:5a:60:
4c:e2:54:3a:ab:c6:31:4e:33:a9:19:27:dc:01:f3:99:46:57:
39:8f:b4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:43 2025 by rpki-client