Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7HrnclMWyIXozlxRqt6XzgRh1WU.roa
File: 7HrnclMWyIXozlxRqt6XzgRh1WU.roa (raw, json)
Hash identifier: zjeqZ1I/7Yzx16BG14ayd5EhiPkRvvHL37uxi1p4P58=
Subject key identifier: EC:7A:E7:72:53:16:C8:85:E8:CE:5C:51:AA:DE:97:CE:04:61:D5:65
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197D95DA6D9DEE0FDCBAEF3C046E5B5AA26
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7HrnclMWyIXozlxRqt6XzgRh1WU.roa
Signing time: Sat 05 Jul 2025 06:54:42 +0000
ROA not before: Sat 05 Jul 2025 06:54:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 151.243.64.0/20 maxlen: 24
151.243.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d9:5d:a6:d9:de:e0:fd:cb:ae:f3:c0:46:e5:b5:aa:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 5 06:54:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec7ae7725316c885e8ce5c51aade97ce0461d565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4b:f5:fe:4c:ae:8f:46:e1:16:e3:71:0c:a6:
10:14:2b:83:c9:21:f3:31:5e:e7:3e:e0:cf:43:8d:
f5:01:83:a6:6c:3c:82:32:54:dc:27:30:31:1b:f9:
c6:50:b4:be:60:16:b9:52:15:4b:59:26:c2:d6:08:
ad:77:20:c2:f3:1a:bb:f6:61:48:17:82:d1:31:0f:
ce:ba:c3:bb:88:11:57:9d:59:fb:4b:4b:3e:38:af:
65:be:54:aa:08:a5:bb:79:d6:1b:34:4f:a2:04:42:
de:e6:e0:a4:80:60:ad:92:25:4d:28:94:ee:23:29:
59:e9:cb:9a:78:37:96:cd:cf:56:4d:c6:d6:82:24:
21:1d:d1:a9:56:95:eb:32:35:45:4c:c2:96:4d:99:
f6:b1:5e:10:59:d0:30:03:14:cd:57:a5:d1:b6:04:
15:fb:23:8d:e9:46:14:3a:01:5c:d4:71:01:fd:6b:
64:cb:80:6b:5c:42:97:81:7e:27:0b:ed:60:c9:52:
da:44:0c:6f:80:40:2b:71:de:df:aa:c1:0b:3d:80:
e1:60:ed:d4:f6:b7:e8:ca:72:68:7e:63:70:c8:a6:
c9:94:f8:c3:01:b2:8a:eb:70:5b:d2:b3:27:66:9d:
39:44:cf:34:5e:fb:2b:e0:df:54:16:2d:90:22:c0:
1d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7A:E7:72:53:16:C8:85:E8:CE:5C:51:AA:DE:97:CE:04:61:D5:65
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7HrnclMWyIXozlxRqt6XzgRh1WU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.64.0/20
151.243.97.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:47:d4:ae:57:89:18:4a:b8:1c:f5:fb:97:c4:dd:8e:ed:36:
f1:e7:6d:82:f0:07:95:bd:eb:0e:d1:39:2d:1e:72:dc:01:01:
97:0c:48:73:01:61:0f:b2:ae:b1:08:16:0f:1a:12:67:36:d4:
3a:bb:ba:65:c0:95:10:cf:a0:64:91:da:e0:aa:1d:87:f8:0f:
62:fc:3f:0f:41:49:f9:53:16:0d:c5:bf:c7:70:c5:c5:03:6b:
2b:fb:ad:7f:10:6d:12:1d:5b:23:89:bf:3c:ac:c7:64:a9:63:
25:ea:c1:20:a2:b8:5f:72:4c:b6:4d:81:72:cd:ba:69:6d:11:
6b:d6:9f:93:49:ae:96:29:c4:c5:66:cd:e3:d7:92:e4:c0:72:
8f:73:76:27:e6:82:b8:63:0a:e8:04:9d:c1:17:fc:89:64:7e:
c4:4e:62:8e:28:f4:a4:3a:ee:a7:58:ac:d4:e7:fe:3e:2a:d2:
db:70:07:fb:a0:bd:c5:8a:65:e6:37:b5:1c:60:14:5a:4a:ce:
24:bb:2c:bb:01:d4:56:94:c9:b4:6e:b2:e4:c1:0e:27:1f:0e:
4d:8e:1d:82:18:5a:73:9e:c6:41:d6:77:59:fc:c0:ef:59:a0:
5d:02:2c:06:f0:f2:1a:15:56:93:09:c6:56:4f:1a:56:4a:04:
94:f0:b8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:23:20 2025 by rpki-client