Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UMF9SMTgxWKNt2EiOn1GF5lh_r0.roa
File: UMF9SMTgxWKNt2EiOn1GF5lh_r0.roa (raw, json)
Hash identifier: X+XA1Lx2RnMLkaoonE1EnSa73BF56Xn35SuOI2AMe3E=
Subject key identifier: 50:C1:7D:48:C4:E0:C5:62:8D:B7:61:22:3A:7D:46:17:99:61:FE:BD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197FDF9665679E39B50BEAC1AEAE04502A8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UMF9SMTgxWKNt2EiOn1GF5lh_r0.roa
Signing time: Sat 12 Jul 2025 09:31:09 +0000
ROA not before: Sat 12 Jul 2025 09:31:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61003
IP address blocks: 151.240.146.0/24 maxlen: 24
151.240.165.0/24 maxlen: 24
151.242.88.0/24 maxlen: 24
151.242.112.0/24 maxlen: 24
151.242.173.0/24 maxlen: 24
151.243.19.0/24 maxlen: 24
151.243.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fd:f9:66:56:79:e3:9b:50:be:ac:1a:ea:e0:45:02:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 12 09:31:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50c17d48c4e0c5628db761223a7d46179961febd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e6:f8:81:7e:40:13:4e:47:d8:4d:43:b5:cc:
60:17:d9:b0:e8:bf:2c:47:84:0a:56:2a:12:e6:67:
a0:bb:ee:38:44:69:7f:08:e5:9e:c5:f9:a0:2d:41:
5f:6b:92:bd:84:b5:47:52:b4:25:46:7a:af:a2:98:
62:46:ad:82:bb:2b:f3:31:de:a7:84:2f:93:48:89:
71:62:0c:1b:2a:97:78:f7:8f:c1:61:e7:81:54:ee:
f0:1b:fa:2e:c7:99:f7:44:5b:54:44:ba:79:d8:9d:
f4:7f:7e:e3:62:fe:87:a8:bc:61:1b:ad:fc:a3:5c:
cf:81:0d:8e:70:e8:55:d8:c6:5c:50:ca:09:a5:3c:
0f:c3:f0:1a:12:ba:27:01:b6:55:2f:e5:85:83:26:
65:b9:5d:b6:25:63:8c:c4:54:41:65:12:a6:e0:2a:
58:d2:11:03:62:fd:fd:c0:d7:cd:30:42:f8:c1:a6:
63:3f:60:2a:d2:16:0e:a6:c0:fd:59:55:17:64:b3:
74:02:02:04:f2:5b:62:d0:38:8e:84:c3:f8:11:3b:
56:3f:f8:ac:6c:2b:dd:f3:0f:46:1a:b8:08:f4:82:
c2:59:4c:07:93:b5:95:01:87:1d:33:5c:c1:56:02:
13:e1:6d:41:2d:9d:f9:f7:03:6c:fd:55:35:8d:2d:
15:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C1:7D:48:C4:E0:C5:62:8D:B7:61:22:3A:7D:46:17:99:61:FE:BD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UMF9SMTgxWKNt2EiOn1GF5lh_r0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.146.0/24
151.240.165.0/24
151.242.88.0/24
151.242.112.0/24
151.242.173.0/24
151.243.19.0/24
151.243.156.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:bd:32:27:ab:93:bf:53:ec:db:e5:d7:ff:9c:42:65:d9:e2:
e4:c3:a6:22:29:5d:83:70:f2:9d:19:47:2a:f0:d2:9c:43:5a:
51:65:f6:00:df:14:ac:bf:df:96:28:81:0e:d0:25:b6:cf:5a:
04:3b:e6:53:d2:01:04:53:d2:4b:21:65:8a:02:4d:76:76:0a:
96:32:5a:27:0a:96:3f:94:fd:7a:8c:a2:6a:35:12:67:11:2b:
ce:0e:44:49:df:da:e1:2d:cf:8c:43:c2:7e:13:80:16:c1:b5:
94:9a:5a:c6:b0:92:2a:a4:e4:b1:9e:33:1a:49:57:f1:de:8e:
52:57:c4:ff:e6:01:5b:6f:b0:0c:9e:38:a0:f4:6a:82:7f:d4:
30:89:35:64:19:4a:e2:d5:95:0d:df:77:8b:10:f8:6f:1c:05:
eb:86:8e:21:9f:27:81:04:f4:0e:ed:fa:c3:5f:2f:31:eb:f1:
c2:fc:06:f6:f4:03:5b:d0:3d:6e:23:49:5a:a5:ce:ee:1c:8d:
e1:7d:c2:7f:cc:eb:67:f8:08:f1:59:88:89:d8:f4:e0:a9:38:
31:c5:74:c2:06:c1:7f:38:d9:f1:7c:00:41:9e:30:57:fe:c5:
ae:3d:4a:9a:76:36:6f:a3:09:59:05:5a:9d:fd:61:d6:b9:ef:
98:84:95:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:40:58 2025 by rpki-client