Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/pc8KquVkf7Bjvabr2oO_2AB4Js4.roa
File: pc8KquVkf7Bjvabr2oO_2AB4Js4.roa (raw, json)
Hash identifier: bRnqKdovtszgM8jGx0ckj/Q6NzvUm1MzmoZsUpk8Ya0=
Subject key identifier: A5:CF:0A:AA:E5:64:7F:B0:63:BD:A6:EB:DA:83:BF:D8:00:78:26:CE
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 0199BD8FD130B6096FFEEF43798BE2126AF4
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/pc8KquVkf7Bjvabr2oO_2AB4Js4.roa
Signing time: Tue 07 Oct 2025 07:25:42 +0000
ROA not before: Tue 07 Oct 2025 07:25:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212242
IP address blocks: 62.3.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:bd:8f:d1:30:b6:09:6f:fe:ef:43:79:8b:e2:12:6a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Oct 7 07:25:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5cf0aaae5647fb063bda6ebda83bfd8007826ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:db:77:5a:07:4e:f8:a3:0a:a8:f9:b2:34:c8:
ba:22:44:b1:cf:52:8e:23:35:db:b7:1d:6f:cb:ae:
a1:ba:1c:48:2e:6d:84:f5:47:7b:67:45:40:b1:72:
ac:26:e2:2f:3c:ef:87:1d:32:5b:d5:54:c4:ae:b2:
a5:fd:72:ba:3e:c8:d2:7a:5c:5c:48:00:c5:23:88:
42:66:c3:4d:2c:0f:a7:b4:3d:d8:66:9b:6a:56:b3:
94:cb:43:69:5f:ea:39:38:bf:05:9e:91:b8:cc:a9:
3d:06:b0:90:a3:17:91:cf:5f:f3:51:1a:47:8b:22:
bc:b4:ea:91:cd:2c:f3:d7:7c:8d:2e:8f:1c:28:df:
58:a9:af:e2:e7:7c:74:47:69:b8:50:2d:2b:ad:71:
cf:b5:3e:c5:4b:07:02:91:11:76:fe:2f:ae:8e:a4:
5a:bc:b4:66:b3:ef:f4:e9:98:25:5f:75:23:aa:73:
51:59:fd:0f:77:0b:f2:c5:69:96:58:85:a1:c0:c4:
bd:83:e6:61:1a:64:db:e9:a7:bb:11:99:b1:5f:a6:
55:15:aa:d5:a4:41:2c:0f:6c:29:1b:f6:4d:5b:9c:
50:95:a7:30:76:a5:ab:fd:f4:5a:bc:c6:26:ef:cc:
c9:ae:c2:aa:bd:36:4d:d2:59:92:cf:8a:86:f3:be:
b6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CF:0A:AA:E5:64:7F:B0:63:BD:A6:EB:DA:83:BF:D8:00:78:26:CE
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/pc8KquVkf7Bjvabr2oO_2AB4Js4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.62.0/24
Signature Algorithm: sha256WithRSAEncryption
01:2f:b4:24:ba:8f:39:ba:b4:ce:d4:01:7d:0f:6c:5b:7f:66:
8b:21:f3:fc:36:5f:c3:5f:33:29:cd:11:a2:22:1b:68:ad:c1:
f9:eb:1b:5f:99:c5:3e:52:7a:1d:bd:44:61:8c:ee:4d:f8:c0:
0f:b6:c4:0d:98:7e:65:9b:43:27:1f:79:bf:48:35:e7:bd:91:
24:d8:37:1a:b4:7a:5a:75:ef:c7:ff:c7:1b:ff:f1:0b:6d:74:
62:c1:b1:95:c3:0b:6a:c4:0d:9b:9f:55:c5:b5:53:dd:9e:d3:
2e:0b:86:73:19:79:9d:17:e6:f4:d5:2d:e7:15:f1:a4:38:15:
10:03:31:18:db:70:7a:81:11:c4:35:5a:57:e5:1b:4a:b9:d3:
1e:9f:ef:d4:2d:a5:c1:7a:22:e0:dd:c1:4a:c0:ae:9b:c0:c7:
f0:57:a9:43:2f:97:f4:4f:5d:a1:e1:9c:70:51:c5:34:b6:34:
1d:95:aa:46:82:50:a2:8b:f6:3e:79:ce:a5:17:4b:a0:1b:15:
fd:29:d1:61:94:85:58:7c:46:2a:a8:bd:52:c5:81:6b:07:7d:
58:09:b7:f1:ab:5d:f5:8a:fc:ea:b4:cb:8b:b7:14:1a:09:3d:
62:19:50:9b:54:50:f6:cb:21:9d:10:fb:43:a8:6c:eb:29:cc:
48:a5:b2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:13 2025 by rpki-client