Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dZCeHfYCT1ywL5xV0v6n1rsX5B0.roa
File: dZCeHfYCT1ywL5xV0v6n1rsX5B0.roa (raw, json)
Hash identifier: 55mEeRfKQV7N8GA3fNiQJ9exzQlB4zenMGZ2txE1OPA=
Subject key identifier: 75:90:9E:1D:F6:02:4F:5C:B0:2F:9C:55:D2:FE:A7:D6:BB:17:E4:1D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197DF7875C9CE3B8009BC0051C4CABC374E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dZCeHfYCT1ywL5xV0v6n1rsX5B0.roa
Signing time: Sun 06 Jul 2025 11:21:43 +0000
ROA not before: Sun 06 Jul 2025 11:21:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137235
IP address blocks: 151.243.15.0/24 maxlen: 24
151.243.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:df:78:75:c9:ce:3b:80:09:bc:00:51:c4:ca:bc:37:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 6 11:21:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75909e1df6024f5cb02f9c55d2fea7d6bb17e41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3f:7b:f5:e6:dc:4f:9f:8f:2e:00:0a:12:c1:
97:80:81:0b:09:17:7d:7a:72:a8:56:77:c4:15:aa:
ec:c1:fc:ce:e6:97:7e:74:9d:f8:c7:71:3a:d9:97:
b3:43:8f:13:28:7f:b5:5d:9f:5b:08:bc:f7:79:2f:
6f:16:f4:46:a5:d2:c1:ac:c5:2f:7c:15:23:8c:fb:
17:a1:74:cc:b0:9f:1f:b6:8e:59:cc:38:f5:cb:44:
84:7b:9e:57:1c:21:c3:43:be:a6:c3:29:ba:dd:e3:
83:63:4f:e1:fa:db:35:d9:74:07:dd:11:0a:f5:92:
94:9f:45:49:a7:dc:c7:76:51:b2:53:63:75:e3:1e:
80:27:e7:c8:04:ec:8b:25:57:f3:75:a3:03:b4:de:
8a:43:4c:b0:0a:7c:fa:01:7a:5c:71:e0:72:48:45:
27:5f:3c:73:8b:8a:c1:53:a5:16:99:c4:cc:97:3c:
98:ef:cd:5d:a6:74:8b:1c:ab:17:77:d0:a6:1d:11:
ee:f8:1f:9d:eb:9f:3d:51:46:e1:a5:12:06:8b:3a:
45:16:c1:1f:cd:da:d2:44:67:13:20:a6:0f:a8:44:
4c:db:76:5e:aa:0e:d5:76:10:f1:e3:70:3d:6a:91:
50:e5:29:8b:0e:57:dc:50:f9:36:84:f8:42:42:6f:
9e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:90:9E:1D:F6:02:4F:5C:B0:2F:9C:55:D2:FE:A7:D6:BB:17:E4:1D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dZCeHfYCT1ywL5xV0v6n1rsX5B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.15.0/24
151.243.255.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:96:16:a9:53:51:8d:0b:e7:b4:e6:45:bc:14:b8:8e:c6:da:
9d:7e:39:ee:14:1b:97:a0:23:42:1c:3f:ee:c4:00:d0:a6:8f:
24:94:a7:2d:ef:4b:ad:11:82:9a:d5:d3:dc:14:c7:73:10:74:
d2:02:ef:51:77:24:d7:dc:6c:4a:49:79:74:3b:0c:03:55:0a:
28:03:32:9a:e0:f7:5c:cc:d5:4c:d8:24:18:5a:ac:fe:ad:45:
fb:29:f7:a0:28:23:f5:9d:4f:ed:c2:76:82:69:a5:79:32:9b:
08:cd:5d:6f:fa:c4:bf:a0:de:01:de:e2:49:22:1c:bb:65:79:
1c:5d:b6:f1:f2:55:d6:b0:21:6e:c7:79:d0:df:85:75:e7:62:
ff:6c:70:37:30:d1:e3:bb:2c:b7:d9:3c:e9:c7:bd:23:4c:3e:
51:41:39:84:61:1b:ae:d9:7f:16:eb:16:97:15:d6:36:0c:d9:
6f:83:19:a5:b3:c8:0f:93:58:93:f3:97:f5:48:04:16:9f:76:
53:1c:fc:4d:c8:e5:d7:18:ba:8d:6f:a0:a4:e1:5f:c3:46:9a:
26:49:ee:83:11:39:bb:f4:20:dd:aa:c8:47:de:3e:7e:19:e7:
dd:3f:ad:a2:00:f2:62:f8:7f:6d:40:2b:8e:a5:80:f5:b8:67:
f0:0f:79:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:47:33 2025 by rpki-client