Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/D3UsTNCrYPJuXCEm6NMX3r-AFI0.roa
File: D3UsTNCrYPJuXCEm6NMX3r-AFI0.roa (raw, json)
Hash identifier: 2ze5kaRRxLzTa87URpgQPYTvudZRFgbIJFMOUidlPjg=
Subject key identifier: 0F:75:2C:4C:D0:AB:60:F2:6E:5C:21:26:E8:D3:17:DE:BF:80:14:8D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197E3AE09B42C7272F0B19EDD8281551437
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/D3UsTNCrYPJuXCEm6NMX3r-AFI0.roa
Signing time: Mon 07 Jul 2025 06:58:43 +0000
ROA not before: Mon 07 Jul 2025 06:58:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59993
IP address blocks: 151.242.118.0/24 maxlen: 24
151.243.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e3:ae:09:b4:2c:72:72:f0:b1:9e:dd:82:81:55:14:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 7 06:58:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f752c4cd0ab60f26e5c2126e8d317debf80148d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:b2:9f:c8:76:a5:af:af:df:29:58:34:11:
49:1d:e5:10:9e:db:2d:0f:07:79:33:b6:54:73:88:
5e:43:f3:33:8a:ce:1a:96:0a:a0:be:53:67:d2:b9:
64:0d:fd:15:49:04:35:a1:1c:10:72:b1:43:fe:e4:
3e:a0:52:77:8c:98:dd:c5:35:bf:b6:28:d7:87:af:
5b:d2:17:54:e1:96:28:bb:b1:4d:69:1c:e6:8f:75:
5a:e0:6c:77:09:11:40:f3:21:a5:91:bd:94:09:3e:
fc:0a:3e:d6:ad:5a:b8:d4:2a:cf:43:db:4a:6f:19:
67:16:21:77:a2:8c:20:77:f5:a1:17:ad:ed:25:5d:
99:0b:ea:9b:e4:9e:28:04:0e:df:30:ad:35:14:79:
85:f7:a2:83:80:61:09:f4:98:33:35:5a:cd:cc:7c:
a8:25:48:f7:97:70:6e:26:74:6b:0a:02:ce:fe:92:
0f:93:33:14:34:2e:2a:28:0a:e8:d2:55:ea:73:51:
4b:29:b6:51:3f:a6:a1:56:e6:5e:ee:e3:7a:36:a7:
b1:3d:1d:fc:aa:f7:ec:5b:2e:85:d5:49:61:d9:ae:
32:69:c6:80:db:2c:ef:28:08:0a:83:f9:50:6c:d7:
c6:29:12:b3:e9:89:0b:37:b4:0b:00:2a:06:5c:d6:
f8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:75:2C:4C:D0:AB:60:F2:6E:5C:21:26:E8:D3:17:DE:BF:80:14:8D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/D3UsTNCrYPJuXCEm6NMX3r-AFI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.118.0/24
151.243.100.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ee:98:10:65:a9:2c:de:41:b0:1d:f8:0d:1e:35:01:86:dc:
22:58:77:58:98:e4:74:8b:06:ef:d5:28:7a:4a:c5:57:5e:f8:
1c:59:64:7e:21:42:bc:68:0f:b2:77:57:df:76:fa:fb:f9:ee:
54:99:cc:da:0e:3b:39:25:83:86:bd:66:76:85:ef:fd:15:46:
6b:9c:53:d5:1d:be:59:4d:3b:3a:cd:88:46:9d:be:3e:0c:05:
5f:46:b5:b0:2c:5a:8f:7c:4b:43:6e:2f:8c:1b:81:31:68:50:
7b:ea:7d:22:25:f2:23:1d:c5:89:14:cf:f8:26:00:ce:32:c4:
e3:c9:cd:a2:0c:27:fd:d5:15:a4:3c:d5:9b:b7:0b:3e:1e:c5:
ba:e7:56:7f:ef:12:dd:49:24:14:df:d7:45:cb:47:e4:02:a5:
e7:53:5b:03:e5:42:e6:be:ff:70:98:2f:e6:04:13:3b:4c:fc:
5e:73:d4:36:66:96:07:8a:2f:60:22:3c:e7:54:a8:ea:10:4c:
12:1d:95:47:ed:af:67:c9:33:fb:1c:a7:ee:8c:1d:3c:12:5a:
a7:fe:f0:00:ab:e3:3a:eb:d4:25:99:df:b7:7c:84:90:39:11:
17:d0:b6:53:85:5b:c2:6b:09:92:32:fe:f6:84:85:da:06:10:
55:fa:12:70
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZfjrgm0LHJy8LGe3YKBVRQ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNzA3MDY1ODQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjc1MmM0Y2QwYWI2MGYyNmU1YzIxMjZlOGQzMTdkZWJmODAxNDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrGyn8h2pa+v3ylYNBFJHeUQntst
Dwd5M7ZUc4heQ/Mzis4algqgvlNn0rlkDf0VSQQ1oRwQcrFD/uQ+oFJ3jJjdxTW/
tijXh69b0hdU4ZYou7FNaRzmj3Va4Gx3CRFA8yGlkb2UCT78Cj7WrVq41CrPQ9tK
bxlnFiF3oowgd/WhF63tJV2ZC+qb5J4oBA7fMK01FHmF96KDgGEJ9JgzNVrNzHyo
JUj3l3BuJnRrCgLO/pIPkzMUNC4qKAro0lXqc1FLKbZRP6ahVuZe7uN6NqexPR38
qvfsWy6F1Ulh2a4yacaA2yzvKAgKg/lQbNfGKRKz6YkLN7QLACoGXNb4HwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA91LEzQq2DyblwhJujTF96/gBSNMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvRDNVc1ROQ3JZUEp1WENFbTZOTVgzci1BRkkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/J2AwQA
l/NkMA0GCSqGSIb3DQEBCwUAA4IBAQAD7pgQZaks3kGwHfgNHjUBhtwiWHdYmOR0
iwbv1Sh6SsVXXvgcWWR+IUK8aA+yd1ffdvr7+e5UmczaDjs5JYOGvWZ2he/9FUZr
nFPVHb5ZTTs6zYhGnb4+DAVfRrWwLFqPfEtDbi+MG4ExaFB76n0iJfIjHcWJFM/4
JgDOMsTjyc2iDCf91RWkPNWbtws+HsW651Z/7xLdSSQU39dFy0fkAqXnU1sD5ULm
vv9wmC/mBBM7TPxec9Q2ZpYHii9gIjznVKjqEEwSHZVH7a9nyTP7HKfujB08Elqn
/vAAq+M669Qlmd+3fISQOREX0LZThVvCawmSMv72hIXaBhBV+hJw
-----END CERTIFICATE-----
Generated at Mon Jul 21 12:32:13 2025 by rpki-client