Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XPIido7kWBz4IpqB-dQbKxJa6ps.roa
File: XPIido7kWBz4IpqB-dQbKxJa6ps.roa (raw, json)
Hash identifier: sFhQbcz4jQ7zRpK/VWK+CCexTQwdhGNJBEjC6XDiUjk=
Subject key identifier: 5C:F2:22:76:8E:E4:58:1C:F8:22:9A:81:F9:D4:1B:2B:12:5A:EA:9B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019821BB183199CFC21A9ACE99D33F3241AB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XPIido7kWBz4IpqB-dQbKxJa6ps.roa
Signing time: Sat 19 Jul 2025 08:09:26 +0000
ROA not before: Sat 19 Jul 2025 08:09:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198584
IP address blocks: 151.246.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:21:bb:18:31:99:cf:c2:1a:9a:ce:99:d3:3f:32:41:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 19 08:09:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cf222768ee4581cf8229a81f9d41b2b125aea9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:d9:d1:be:c3:eb:b7:87:2e:9e:f5:10:e0:
4d:a8:34:2d:80:ad:8a:6d:0b:92:c3:da:3e:20:67:
e6:d8:29:cc:da:58:30:44:ce:fe:99:99:57:af:a6:
d5:a4:b9:a5:5b:36:ae:f0:21:26:40:fa:61:c7:2a:
34:94:c0:a9:1c:61:bd:7e:c3:dd:fc:a1:f7:16:5b:
50:39:d3:13:b7:6d:14:09:bc:db:84:f2:34:54:9c:
46:fe:2c:54:79:cd:ab:d8:c7:9d:ad:3c:63:99:fc:
d5:c1:82:32:1b:10:b7:bb:8d:54:10:ec:b4:03:bb:
45:83:59:c8:d1:e0:05:08:d5:66:ad:4d:5e:29:a3:
2a:6f:de:9b:91:4b:fd:80:8d:75:69:23:1a:7c:41:
60:51:e6:40:9b:63:7a:1c:0e:a3:3f:ba:76:02:f5:
6c:a1:18:31:e9:44:9f:0e:f6:d6:e8:c2:33:ec:c9:
3b:64:71:e5:bc:c2:b5:e0:14:7b:a2:a8:e9:82:a5:
7a:5c:ac:cf:66:df:dd:cf:6f:f8:54:42:d1:77:3c:
52:b6:4d:0f:5e:c0:8d:02:bd:52:80:0e:f8:43:5a:
cc:96:25:f4:41:e2:d4:e8:22:23:77:09:75:2f:7b:
1f:2a:b4:52:bf:76:30:a2:b5:b3:a9:56:9d:b6:7b:
7d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F2:22:76:8E:E4:58:1C:F8:22:9A:81:F9:D4:1B:2B:12:5A:EA:9B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XPIido7kWBz4IpqB-dQbKxJa6ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.127.0/24
Signature Algorithm: sha256WithRSAEncryption
62:c4:4b:c2:a2:af:5d:58:85:17:13:22:6d:2c:1f:3d:8f:51:
f7:3d:e6:3d:ea:d6:0f:6e:ce:03:c6:57:35:ae:e4:7b:6b:90:
2b:e8:7c:53:d3:ad:d2:c2:bc:cd:d1:58:24:1f:a0:d5:33:4d:
aa:dc:01:bd:68:b5:1d:e1:cb:36:dc:c0:41:0b:cc:b3:8b:b3:
e9:e6:aa:91:c3:f9:07:8e:59:d6:75:fc:97:58:3b:6d:4d:ba:
20:8c:c7:9e:45:90:60:7b:2a:22:bd:d2:a2:19:7c:d8:ed:e9:
30:c2:55:db:46:8e:b5:e4:b0:c3:f5:6b:4e:9b:05:a5:68:19:
f9:63:70:b8:a5:d0:e6:03:07:3e:9b:cf:d9:90:f2:bf:0f:4b:
d2:e8:b2:39:71:9f:82:64:75:97:84:52:6a:a9:9b:e5:58:a0:
1c:3b:01:9a:01:aa:c7:bb:cd:71:70:5a:9b:93:f1:df:ee:df:
d8:fb:47:c6:07:67:dc:c0:78:cb:e1:37:a0:df:13:23:2c:eb:
6b:fe:cd:6b:27:fc:b9:54:1c:0a:03:3f:dd:6b:08:fa:35:5e:
59:3f:46:02:4d:f1:ac:02:a2:79:28:6f:bc:29:77:91:64:11:
d9:0a:c2:53:47:62:84:dc:ab:bf:d2:2d:63:05:55:ff:ea:87:
92:9c:de:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:22:53 2025 by rpki-client