Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/PTsV4iVPgYSj2EipNi1Ys2GptWw.roa
File: PTsV4iVPgYSj2EipNi1Ys2GptWw.roa (raw, json)
Hash identifier: IYAT4kbG+XXycGFXHr4k532FVvNNA3HaWBCm+dly25A=
Subject key identifier: 3D:3B:15:E2:25:4F:81:84:A3:D8:48:A9:36:2D:58:B3:61:A9:B5:6C
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0199AA2FCAEDCBB83DA546FA54C97ACA1ADE
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/PTsV4iVPgYSj2EipNi1Ys2GptWw.roa
Signing time: Fri 03 Oct 2025 13:08:02 +0000
ROA not before: Fri 03 Oct 2025 13:08:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200523
IP address blocks: 62.68.70.0/24 maxlen: 24
78.128.120.0/23 maxlen: 24
80.72.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:aa:2f:ca:ed:cb:b8:3d:a5:46:fa:54:c9:7a:ca:1a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Oct 3 13:08:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d3b15e2254f8184a3d848a9362d58b361a9b56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:bc:2f:c9:d4:24:f2:ff:37:52:4b:fc:63:
81:05:38:48:ef:3e:43:c9:1d:81:e3:85:47:54:01:
ec:ce:68:93:c4:0b:90:d1:76:74:57:c1:20:fe:bd:
36:20:08:f0:8d:14:98:63:33:2f:54:17:0e:47:0f:
ea:46:a5:9c:bb:f5:69:f5:55:5f:be:56:c8:61:ad:
e9:2c:7c:15:ca:fe:7b:e6:45:1f:32:44:4a:29:02:
c3:a8:de:79:b8:6a:95:2f:ba:04:ff:ae:73:d9:77:
58:77:c3:59:1e:b5:06:63:52:85:c7:a2:87:75:2e:
07:82:c4:04:73:9d:39:89:16:bc:db:9f:58:98:5c:
3e:fb:6a:be:d2:9a:d0:5f:a0:fb:f4:c7:b4:af:26:
67:2a:50:be:c0:2a:bd:67:33:c4:73:dc:1a:38:e6:
22:4f:e4:aa:f5:d8:e0:e2:26:7f:65:9d:23:a0:59:
22:77:46:6a:88:56:72:c1:b0:74:cb:44:d3:01:4f:
51:8d:2e:e4:88:de:1d:c5:72:40:01:ac:5b:65:40:
f4:03:93:0c:21:42:2f:28:18:32:14:27:10:4f:15:
29:6a:fb:99:8e:93:f0:73:2e:30:7f:94:c7:31:72:
6b:18:3d:03:a5:0d:cd:38:73:64:fc:7f:48:69:eb:
09:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3B:15:E2:25:4F:81:84:A3:D8:48:A9:36:2D:58:B3:61:A9:B5:6C
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/PTsV4iVPgYSj2EipNi1Ys2GptWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.70.0/24
78.128.120.0/23
80.72.78.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:46:e7:33:8a:17:f4:42:d8:5f:34:96:0a:a2:a0:77:50:b3:
a5:dc:cb:39:72:dc:94:51:e0:60:8d:7c:90:a6:16:b3:0e:3d:
10:0b:77:d7:9f:70:2e:74:a0:e0:9e:0e:01:95:40:e6:a7:b5:
00:6a:f2:35:f0:29:e6:80:bf:71:c3:c4:ba:69:87:5e:6e:b3:
eb:5e:ef:f2:3d:08:6a:f1:24:a4:7b:33:3a:1f:e4:58:14:aa:
21:fc:ff:81:61:29:60:ef:57:0e:37:fd:3c:79:a9:f0:30:52:
ed:ee:4e:71:c0:ac:59:1e:16:03:ea:ba:97:e2:0e:02:a3:e4:
d4:1d:b0:5e:e3:83:05:28:89:ae:25:b1:40:dd:8d:c0:67:83:
a5:23:d5:fc:ef:7c:94:26:6e:cb:e7:7b:38:96:2f:7f:1d:17:
66:b1:6a:a9:d9:f5:b8:23:bd:ab:6f:3e:f4:c3:8d:a3:a6:95:
7f:85:7d:6d:c2:43:68:9f:4a:fa:b6:aa:60:a6:eb:5c:d1:1a:
8d:4d:28:c9:c3:07:72:c3:6b:cf:81:ea:20:a3:2f:0e:13:8c:
23:28:5f:19:92:70:81:62:70:25:42:23:f1:5a:0f:3c:a7:f4:
8f:1a:be:7a:db:60:aa:89:15:7b:dd:b2:2c:f0:96:22:10:44:
3b:45:7a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:48:57 2025 by rpki-client