Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/xvP6wfN1chd5lcSu0kSVzIHiAYc.roa
File: xvP6wfN1chd5lcSu0kSVzIHiAYc.roa (raw, json)
Hash identifier: U1i9qRkMcaN/Y9oNXvskXI16N9SXKYnzmsetq5cXBYI=
Subject key identifier: C6:F3:FA:C1:F3:75:72:17:79:95:C4:AE:D2:44:95:CC:81:E2:01:87
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 0199B33ECB8DF84529AACDC8F77EB15466B0
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/xvP6wfN1chd5lcSu0kSVzIHiAYc.roa
Signing time: Sun 05 Oct 2025 07:21:00 +0000
ROA not before: Sun 05 Oct 2025 07:21:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30456
IP address blocks: 62.68.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b3:3e:cb:8d:f8:45:29:aa:cd:c8:f7:7e:b1:54:66:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Oct 5 07:21:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6f3fac1f37572177995c4aed24495cc81e20187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:71:df:eb:22:20:e7:a4:e9:36:35:ec:9a:ef:
c7:bb:92:17:60:8f:bc:6a:cf:7f:3d:8d:00:e7:54:
ec:16:aa:e4:31:60:60:57:da:a6:2b:d9:52:9f:42:
ce:60:c0:98:2d:04:3f:99:98:62:0b:6c:e6:8e:ef:
0b:26:33:1a:83:77:0f:7f:72:93:71:98:68:c0:f6:
d9:97:cc:99:82:71:3e:64:5c:11:8c:2c:8b:d2:0c:
aa:f6:de:12:1d:a1:e2:32:15:a2:89:60:13:92:0b:
cd:50:14:2f:4e:06:b9:31:30:ac:6a:be:12:f2:e8:
03:ff:08:e3:26:b3:83:f4:1b:68:2f:da:e4:fe:ac:
89:cf:e6:e5:25:a5:47:3e:9d:19:35:5b:d5:90:da:
7e:fe:72:c4:8b:c9:64:1c:0c:e5:aa:6b:90:70:55:
9e:aa:42:f2:03:dd:d1:f0:f5:b3:1a:e3:f8:d7:af:
32:10:c1:4c:c1:f9:6c:cd:e6:90:c8:1e:fe:c1:d5:
4c:95:fd:6a:73:03:6b:1e:da:a2:40:2b:aa:af:67:
20:78:83:c1:9f:82:6e:42:cb:04:d6:c7:9b:27:f2:
39:a5:32:f2:7b:c2:8f:4e:91:42:1c:dc:97:12:47:
94:c1:b5:15:93:f2:5e:8c:08:17:9c:dc:e4:10:e2:
48:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F3:FA:C1:F3:75:72:17:79:95:C4:AE:D2:44:95:CC:81:E2:01:87
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/xvP6wfN1chd5lcSu0kSVzIHiAYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.68.0/24
Signature Algorithm: sha256WithRSAEncryption
28:77:69:dc:92:c2:2f:fd:23:d7:00:dc:fa:97:59:e2:24:4d:
b5:30:02:5a:37:9f:bf:32:42:ee:ff:93:d5:90:39:50:d2:6e:
48:84:84:80:a0:17:d2:ea:e2:3b:e4:fa:6a:75:16:1d:38:da:
9e:89:43:1b:65:f7:9f:37:07:60:c5:11:af:98:57:57:2c:0f:
fb:f6:4b:3c:06:01:38:8b:8d:fa:13:21:90:5c:6a:f7:90:4e:
5a:e5:2d:51:37:5d:c6:67:73:ae:62:b4:af:b5:52:c3:ad:1b:
0f:64:fb:f9:86:ff:79:00:bc:b6:55:96:0b:d5:a3:be:0b:64:
a8:b6:65:df:5a:55:d3:5e:52:16:f0:c9:60:20:b9:7a:ef:52:
e9:5f:98:80:12:77:2f:71:72:d4:9b:f8:86:62:b3:3c:e9:59:
a5:11:4d:e5:00:0d:2d:05:e7:1c:4c:dc:26:64:9c:e8:32:1d:
ab:0d:41:56:b3:fe:dd:ed:b1:57:59:61:b0:12:89:7e:54:58:
28:ed:1f:a4:d3:2b:6a:ec:78:dd:83:39:f6:af:ce:fa:6b:77:
11:ee:ad:8d:45:43:ea:da:43:53:57:39:01:c5:ec:20:fb:a4:
1f:f7:82:a6:55:cd:c2:ce:ac:d3:9b:0c:62:8d:3b:ff:b5:fe:
f3:5a:63:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZmzPsuN+EUpqs3I936xVGawMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz
MTk4M2MwHhcNMjUxMDA1MDcyMTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmYzZmFjMWYzNzU3MjE3Nzk5NWM0YWVkMjQ0OTVjYzgxZTIwMTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23Hf6yIg56TpNjXsmu/Hu5IXYI+8
as9/PY0A51TsFqrkMWBgV9qmK9lSn0LOYMCYLQQ/mZhiC2zmju8LJjMag3cPf3KT
cZhowPbZl8yZgnE+ZFwRjCyL0gyq9t4SHaHiMhWiiWATkgvNUBQvTga5MTCsar4S
8ugD/wjjJrOD9BtoL9rk/qyJz+blJaVHPp0ZNVvVkNp+/nLEi8lkHAzlqmuQcFWe
qkLyA93R8PWzGuP4168yEMFMwflszeaQyB7+wdVMlf1qcwNrHtqiQCuqr2cgeIPB
n4JuQssE1sebJ/I5pTLye8KPTpFCHNyXEkeUwbUVk/JejAgXnNzkEOJIPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMbz+sHzdXIXeZXErtJElcyB4gGHMB8GA1UdIwQY
MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt
NTlhZTA5ZWRiZWI5LzEveHZQNndmTjFjaGQ1bGNTdTBrU1Z6SUhpQVljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5
LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkREMA0G
CSqGSIb3DQEBCwUAA4IBAQAod2ncksIv/SPXANz6l1niJE21MAJaN5+/MkLu/5PV
kDlQ0m5IhISAoBfS6uI75PpqdRYdONqeiUMbZfefNwdgxRGvmFdXLA/79ks8BgE4
i436EyGQXGr3kE5a5S1RN13GZ3OuYrSvtVLDrRsPZPv5hv95ALy2VZYL1aO+C2So
tmXfWlXTXlIW8MlgILl671LpX5iAEncvcXLUm/iGYrM86VmlEU3lAA0tBeccTNwm
ZJzoMh2rDUFWs/7d7bFXWWGwEol+VFgo7R+k0ytq7Hjdgzn2r876a3cR7q2NRUPq
2kNTVzkBxewg+6Qf94KmVc3CzqzTmwxijTv/tf7zWmPC
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:03 2025 by rpki-client