Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_lX6b1Z5rs2A_zGIv4rowE9yRzM.roa
File: _lX6b1Z5rs2A_zGIv4rowE9yRzM.roa (raw, json)
Hash identifier: zLHAKdjn7J3QQUrAjshbG9NwzWGRCi4d6+ZQ9uquuKI=
Subject key identifier: FE:55:FA:6F:56:79:AE:CD:80:FF:31:88:BF:8A:E8:C0:4F:72:47:33
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01993992F6F7A7D775BF17B7EBA7AC0ECC73
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_lX6b1Z5rs2A_zGIv4rowE9yRzM.roa
Signing time: Thu 11 Sep 2025 16:19:16 +0000
ROA not before: Thu 11 Sep 2025 16:19:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215728
IP address blocks: 151.245.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:92:f6:f7:a7:d7:75:bf:17:b7:eb:a7:ac:0e:cc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 11 16:19:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe55fa6f5679aecd80ff3188bf8ae8c04f724733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:39:50:ec:9d:e2:e3:ac:5a:9e:20:79:23:3b:
3a:2b:14:36:fa:ef:de:cd:9c:3e:da:31:6d:12:a7:
b7:21:db:92:04:9f:cb:59:c4:64:f1:cf:f2:80:48:
a5:9d:32:25:48:7c:f0:9e:18:68:66:eb:0f:89:fb:
62:93:51:29:9a:be:db:65:9b:34:ae:14:23:41:2c:
a1:fd:38:57:91:a4:01:f3:fa:10:57:6e:c0:cb:68:
cc:d3:ad:19:57:62:a8:9b:62:b3:56:74:9b:99:2b:
20:53:07:d2:f3:68:6e:ed:8f:38:ec:48:60:96:c9:
16:79:60:da:7f:28:b9:eb:cc:c8:9f:84:98:4c:a9:
3c:28:5f:e3:5d:07:51:b1:9a:7f:4b:2c:8a:cb:92:
77:87:d0:cc:d1:d3:d9:91:42:cf:7f:23:22:d6:84:
bf:d6:6b:66:b5:94:98:67:f7:88:a2:ff:a9:08:5f:
c6:6a:23:55:33:63:97:21:80:ef:f6:1e:d8:5a:ff:
88:e8:dc:86:f0:b9:b5:aa:31:a5:fb:f7:df:bb:92:
ae:f9:82:5a:bd:86:55:50:b0:04:40:f8:73:23:c7:
4e:12:d5:f3:2c:4b:19:d0:7c:9e:c3:a9:70:78:30:
f4:21:5d:01:fd:b2:c8:49:12:bf:db:96:c7:d1:32:
56:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:55:FA:6F:56:79:AE:CD:80:FF:31:88:BF:8A:E8:C0:4F:72:47:33
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_lX6b1Z5rs2A_zGIv4rowE9yRzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.72.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:7f:c8:2b:e1:51:d6:86:e5:06:86:69:8a:1d:69:ba:97:c3:
1b:54:bf:31:cc:aa:cb:ce:36:d4:63:a0:1a:52:6d:cd:a2:df:
83:5e:27:90:7c:21:07:fc:02:ad:67:44:7d:49:72:29:21:c1:
80:7a:a1:6b:4c:a9:09:bc:fe:30:dd:7a:eb:05:9a:05:9e:7c:
ba:9c:da:3d:f9:d1:d1:10:15:a2:60:0a:03:71:35:0d:6b:b4:
25:3c:a1:13:3d:03:ac:37:58:fe:c5:32:cf:aa:68:e7:c1:4d:
e1:60:b4:94:4d:6f:69:62:da:7d:86:b7:48:24:0d:19:b5:79:
0b:54:f1:20:b6:3b:73:d9:75:b4:a0:db:df:9b:33:c3:54:57:
70:d9:78:e4:dd:b5:1a:bc:f4:82:df:af:d6:47:73:5c:87:58:
94:12:ce:a2:de:61:64:ce:5c:80:ab:94:7b:13:43:bf:27:50:
ef:3a:d5:c7:74:44:0e:16:ae:af:d9:f3:ad:8c:96:6c:f0:eb:
a8:5c:eb:21:0b:bb:02:02:ba:ee:db:15:df:f9:08:6a:93:5f:
48:08:06:2e:89:61:18:40:54:27:ed:2a:80:1e:82:5f:e8:56:
ff:cd:04:ac:5b:30:1f:b7:62:32:6f:e6:04:74:e1:b9:d8:e0:
ed:6d:93:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:38:49 2025 by rpki-client