Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/ri-zVL1OpUAxwvXX4JQ4t1YUuHM.roa
File: ri-zVL1OpUAxwvXX4JQ4t1YUuHM.roa (raw, json)
Hash identifier: Ck77Ae9V6KDMYJzNdjCSazt5tuNU78Yt+UmBsf4uG94=
Subject key identifier: AE:2F:B3:54:BD:4E:A5:40:31:C2:F5:D7:E0:94:38:B7:56:14:B8:73
Certificate issuer: /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Certificate serial: 0199CB31BBC77536401D0B0A02517FC84D88
Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/ri-zVL1OpUAxwvXX4JQ4t1YUuHM.roa
Signing time: Thu 09 Oct 2025 22:57:38 +0000
ROA not before: Thu 09 Oct 2025 22:57:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216167
IP address blocks: 62.223.10.0/24 maxlen: 24
62.223.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cb:31:bb:c7:75:36:40:1d:0b:0a:02:51:7f:c8:4d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4
Validity
Not Before: Oct 9 22:57:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae2fb354bd4ea54031c2f5d7e09438b75614b873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:13:c4:96:4e:95:a3:5b:fc:0c:4c:e2:7b:ef:
c1:95:cf:bb:d0:4c:25:48:f5:07:a8:aa:38:49:3b:
de:24:29:ce:27:80:43:10:6b:4a:43:dc:4b:7c:d5:
86:9d:c6:62:d2:af:1f:83:a1:d4:8a:69:64:04:07:
9a:5b:68:53:2d:95:54:c4:55:46:ed:07:46:ea:ec:
6a:a8:96:c7:4e:f6:71:b9:fc:62:bf:29:da:f9:b1:
a1:6a:6f:64:6f:b9:af:6f:fe:88:f6:74:74:47:d2:
bc:9e:f1:c6:f2:aa:0a:4b:58:ef:d8:40:81:c0:ca:
85:b0:f5:47:c4:d5:62:bf:de:02:f7:d3:f4:92:60:
17:af:1a:7d:f2:64:4a:51:0d:5a:aa:0b:f9:7e:f5:
15:ba:f8:8b:99:f9:3a:ac:f6:80:c6:37:36:ec:df:
8f:ec:2b:ec:1c:ec:db:6b:15:e9:f9:b8:b9:d2:95:
4f:b6:63:93:85:3b:50:b1:49:0f:ae:fe:74:96:0d:
1f:70:11:ea:88:d3:96:6a:95:90:89:ca:c5:d7:c3:
da:5e:b1:50:55:26:55:e1:05:80:67:b9:69:6b:f7:
03:11:2e:50:3f:f6:d5:29:5f:af:ca:32:8c:1f:bb:
a9:08:6e:92:78:22:e8:d9:32:e8:d3:2a:7a:e7:3a:
19:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:2F:B3:54:BD:4E:A5:40:31:C2:F5:D7:E0:94:38:B7:56:14:B8:73
X509v3 Authority Key Identifier:
keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/ri-zVL1OpUAxwvXX4JQ4t1YUuHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.223.10.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:4d:0f:ea:06:e2:10:fe:54:9b:fa:50:59:5b:e3:bf:14:12:
e9:78:b3:a3:f1:38:fb:dc:04:31:7d:ba:e1:3d:14:c2:5e:62:
fd:35:30:f8:14:0e:73:ae:ff:c0:c5:db:56:3d:07:35:52:66:
73:de:62:e5:64:32:4c:6e:91:5c:d8:49:1d:74:b3:81:6c:51:
58:ae:77:b6:10:89:87:01:1c:fe:af:13:56:43:8f:ed:67:34:
4b:27:99:a1:cd:ba:31:95:e0:b2:54:47:eb:33:27:5d:4d:eb:
35:4a:70:6f:96:20:b8:4a:b6:37:e1:92:6c:9b:08:bb:50:5d:
3b:da:fb:39:dd:01:39:84:2b:47:a1:6a:35:d0:00:da:a5:b6:
89:6b:b5:4a:ee:2f:00:30:08:ca:92:5c:df:23:4e:71:c3:b5:
e3:d9:ac:fe:12:bf:0d:48:fc:4c:fe:8b:db:d5:e4:9a:df:a9:
3c:84:53:d2:fc:e5:d8:fa:12:c5:bb:29:6f:7c:5f:54:9e:e1:
67:64:f9:c3:6f:1a:54:e9:93:92:5a:58:f0:d0:c0:84:db:c5:
ef:45:f0:62:93:8e:42:82:b5:2a:17:11:5d:68:71:b6:18:29:
d5:d1:31:32:d6:61:be:15:89:12:8a:ff:71:43:bb:63:64:b3:
3f:bf:a4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:40:57 2025 by rpki-client