Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qQkiiLCNsPEgG3VfxiRontEX5b8.roa
File: qQkiiLCNsPEgG3VfxiRontEX5b8.roa (raw, json)
Hash identifier: ZUeV6lHekn022fnc61gK1ei+BQTNYtxCoMuj5Q6G3j0=
Subject key identifier: A9:09:22:88:B0:8D:B0:F1:20:1B:75:5F:C6:24:68:9E:D1:17:E5:BF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019831191D402622DD87960E7DFAD2235FDF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qQkiiLCNsPEgG3VfxiRontEX5b8.roa
Signing time: Tue 22 Jul 2025 07:46:26 +0000
ROA not before: Tue 22 Jul 2025 07:46:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198584
IP address blocks: 151.246.127.0/24 maxlen: 24
151.246.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 16:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:31:19:1d:40:26:22:dd:87:96:0e:7d:fa:d2:23:5f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 22 07:46:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9092288b08db0f1201b755fc624689ed117e5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:c7:7b:8f:53:8b:53:f6:b8:c5:bd:bd:34:
8a:0f:9e:13:b0:5f:0f:f3:82:2f:ed:2c:60:c0:32:
9e:ad:b1:6d:43:d3:2f:76:8b:b5:5c:48:d9:73:8e:
4d:6e:6e:e7:05:12:15:dc:b0:c6:a0:c2:db:7f:e5:
fa:4e:38:66:05:ba:8f:85:9a:f2:25:f8:e7:c3:09:
e9:eb:68:69:28:62:db:15:b3:5b:52:dc:ae:0f:df:
a9:e7:ee:f6:05:9e:40:de:3e:3b:83:3d:59:a8:c1:
5f:1d:fc:be:62:b8:8b:ec:15:52:09:77:fc:7f:3b:
86:7e:10:74:62:6d:36:9a:24:be:3f:a0:a0:f7:96:
17:b4:1a:c1:88:fc:d2:a8:5c:cd:ce:de:40:8a:6a:
d4:7c:c8:e3:75:db:fe:3e:9f:e4:a0:e0:30:3e:de:
80:9e:b3:8c:cc:0f:2b:22:7c:f3:4e:e2:35:2e:2a:
4f:ce:14:ed:57:75:5a:72:08:21:69:c8:85:29:bc:
35:ef:1a:0b:03:82:de:e5:01:8f:98:15:29:d5:26:
44:a0:8b:71:a8:81:09:8a:08:65:f1:e5:31:bc:06:
75:ea:8c:26:d2:b0:32:28:1c:ba:e9:0b:f0:d8:f7:
76:dc:76:cf:50:39:e3:df:46:ab:45:f2:27:67:a3:
53:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:09:22:88:B0:8D:B0:F1:20:1B:75:5F:C6:24:68:9E:D1:17:E5:BF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qQkiiLCNsPEgG3VfxiRontEX5b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.127.0/24
151.246.191.0/24
Signature Algorithm: sha256WithRSAEncryption
af:55:ad:07:18:80:66:7e:44:af:e2:8e:63:b5:d4:42:d9:44:
72:a9:b2:0e:4d:3b:6c:3f:13:c9:80:25:5e:f4:bb:d3:0f:cf:
8e:eb:5a:37:c9:4c:10:44:46:c3:18:68:b7:9a:d3:e4:a9:be:
49:a9:be:0e:71:53:89:41:49:da:2d:c7:19:50:01:a2:cc:72:
80:29:f0:e7:81:9e:40:8f:f9:dd:6b:33:95:72:da:4b:20:d0:
ab:18:96:a7:8e:22:ca:ed:a4:a0:77:28:db:dd:74:e5:ec:0a:
ad:fb:30:ca:4d:51:b6:07:6a:c2:82:94:18:9e:e7:3b:45:74:
c5:0b:13:8d:95:f2:db:a9:2d:3f:40:3e:89:50:7b:79:2e:09:
3a:d6:77:e4:2c:27:4b:95:c5:3e:0e:65:a3:e3:7d:41:7d:fb:
b8:dc:03:bf:3c:3c:a2:b2:33:fb:ff:40:78:07:6c:5f:8a:d9:
87:03:0d:4a:a6:c6:6f:fb:7e:c7:f8:3e:b1:94:31:dd:e2:84:
a0:98:81:91:7d:c9:13:46:95:bd:90:dc:83:c1:1e:c2:6b:11:
10:a0:28:8f:3c:f4:11:8e:e6:7d:39:0f:10:4c:b2:27:90:ce:
53:4e:aa:d7:af:e4:d2:11:c5:62:9a:83:73:a4:2d:c3:2f:81:
74:7d:6a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:33:17 2025 by rpki-client