Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Ul9Z_XitHE_f2i0xj3ipR--RSyc.roa
File: Ul9Z_XitHE_f2i0xj3ipR--RSyc.roa (raw, json)
Hash identifier: EqCB2RN81ch0LO6Yj2jxn4mdeI83iwC9T8MVDCmVRzA=
Subject key identifier: 52:5F:59:FD:78:AD:1C:4F:DF:DA:2D:31:8F:78:A9:47:EF:91:4B:27
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01998201D85D76CF51679257C6A50D467D9B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Ul9Z_XitHE_f2i0xj3ipR--RSyc.roa
Signing time: Thu 25 Sep 2025 17:53:03 +0000
ROA not before: Thu 25 Sep 2025 17:53:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 402008
IP address blocks: 151.242.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:82:01:d8:5d:76:cf:51:67:92:57:c6:a5:0d:46:7d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 25 17:53:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=525f59fd78ad1c4fdfda2d318f78a947ef914b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:90:39:ce:1d:e1:d1:db:9b:f6:5c:0a:70:12:
d7:77:c4:88:fe:1c:05:ff:99:eb:c6:8d:7d:e9:90:
47:7d:89:4f:6e:da:6c:42:43:a2:eb:69:b2:88:81:
38:a4:9c:81:62:36:43:f2:b0:f9:06:a4:df:90:e1:
d4:c5:19:9a:7b:23:fa:da:20:85:ee:a9:15:b3:3e:
45:41:41:f7:13:be:0d:59:44:cf:c3:33:79:93:5b:
ad:e4:da:f9:c5:da:39:b2:29:cd:a1:26:7f:75:29:
9a:b1:e1:8c:67:55:cb:67:52:04:00:43:71:55:c4:
3f:10:3f:11:e8:6e:01:20:58:5a:7d:fe:f5:90:43:
5b:3e:82:e5:7a:61:82:83:44:04:c3:35:53:e3:27:
1a:ed:46:b3:16:c9:d2:cc:b1:94:2b:00:0a:c8:e0:
c4:f9:fe:22:58:9e:dd:6e:34:12:a3:f8:c1:c9:ac:
8e:b8:29:d4:4c:25:eb:1d:d0:18:c9:ab:a5:45:bc:
dc:95:1c:b2:6e:5b:0c:69:f2:6b:cb:1d:f6:b7:1b:
81:d2:a3:1c:78:c8:c1:7f:3c:37:24:35:b1:f8:16:
a6:b0:2d:4f:d9:36:5d:85:92:31:4c:28:43:10:f8:
6e:81:a9:76:f3:3b:de:93:43:3b:f5:03:ce:e8:cd:
5e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5F:59:FD:78:AD:1C:4F:DF:DA:2D:31:8F:78:A9:47:EF:91:4B:27
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Ul9Z_XitHE_f2i0xj3ipR--RSyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.96.0/24
Signature Algorithm: sha256WithRSAEncryption
66:90:4a:56:f7:ea:78:5d:36:03:9f:b2:c4:e9:2f:a1:3f:c2:
89:21:94:ed:6b:c5:cb:97:bf:a6:4d:bf:10:60:a7:91:9b:9d:
42:b0:fa:da:96:e3:7d:ad:a9:69:18:46:30:0d:40:3e:dc:a8:
79:2d:ad:8b:98:bb:a2:24:3d:1f:ba:9d:42:45:44:45:3b:c8:
7f:cc:24:bb:c5:9c:23:58:0d:32:9c:5d:5f:fe:d5:20:1e:67:
d4:16:45:00:80:51:b0:4f:f0:74:fd:60:42:8a:99:3a:a3:a7:
c6:76:37:12:c3:3a:6d:b6:84:e9:39:b6:d4:7f:3c:6c:ac:4b:
4c:40:35:45:15:2e:0e:d1:24:26:1e:f3:da:d7:e9:3e:eb:0d:
01:b9:ec:7d:d0:f9:ac:e5:c3:82:44:73:93:53:fe:47:1f:08:
bf:32:30:37:f7:ea:30:9a:cf:26:33:c6:de:af:93:d2:d6:73:
09:72:e4:2f:6d:5b:e9:c7:27:75:9b:11:f4:7d:15:bb:96:82:
21:cc:30:b9:07:e7:60:ae:fe:6a:54:03:9d:94:7b:2e:90:49:
43:0b:08:43:72:ec:bd:d4:9a:e7:1a:ad:2f:32:8d:0c:f7:42:
01:5e:3d:09:ac:c0:ff:04:7e:00:94:23:b0:8d:4d:57:77:c3:
c6:51:85:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 15:10:28 2025 by rpki-client