Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/u3f4YlCe2cF_d22Iu4I8-eXWqqE.roa
File: u3f4YlCe2cF_d22Iu4I8-eXWqqE.roa (raw, json)
Hash identifier: e5bRM6q2I++Yv+i0fo2GLsVIpwQHyfRc0O+JV2bJobY=
Subject key identifier: BB:77:F8:62:50:9E:D9:C1:7F:77:6D:88:BB:82:3C:F9:E5:D6:AA:A1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01980857843B040D1D0BA43154C066E2872E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/u3f4YlCe2cF_d22Iu4I8-eXWqqE.roa
Signing time: Mon 14 Jul 2025 09:50:09 +0000
ROA not before: Mon 14 Jul 2025 09:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135402
IP address blocks: 151.242.86.0/24 maxlen: 24
151.242.132.0/24 maxlen: 24
151.243.4.0/24 maxlen: 24
151.243.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:08:57:84:3b:04:0d:1d:0b:a4:31:54:c0:66:e2:87:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 14 09:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb77f862509ed9c17f776d88bb823cf9e5d6aaa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:97:ba:97:6f:8f:b4:c2:8c:98:ca:9c:71:d5:
69:d4:5c:3c:82:4b:67:5b:59:cc:b1:94:71:3f:7b:
39:e3:67:96:38:67:3e:b3:0a:b2:91:fa:b3:b0:86:
8c:83:fe:98:e2:02:ae:96:63:a9:2a:bb:91:f6:c8:
40:10:7d:f4:1f:1f:b9:14:99:ff:13:b8:37:f3:6c:
70:dd:a0:ff:85:e6:c0:ad:b0:0d:87:43:8b:7f:1e:
3b:66:fb:c4:45:bc:a8:ff:32:8f:20:8f:6c:0b:18:
48:9b:3a:54:3f:c6:92:31:23:8a:bc:59:a4:d5:9c:
cf:48:74:66:83:f9:c3:35:65:ec:17:fd:8e:83:05:
57:b0:73:a3:c8:3b:21:fb:50:63:d5:07:30:02:92:
27:8b:78:7e:28:f2:e1:40:bd:44:f2:aa:14:db:fa:
a6:5d:bd:7d:28:b4:81:3e:4f:8c:1a:95:c4:3a:fe:
5e:29:a2:f9:05:64:45:8a:ed:ef:62:4c:f5:72:c1:
3c:53:c4:f6:19:38:bd:74:19:60:f5:b8:c4:44:24:
24:15:27:62:60:de:ca:6d:71:be:c6:88:7d:45:a7:
ce:d4:20:04:43:e4:ee:97:81:26:eb:61:ee:7d:a3:
9b:4e:ef:5a:4b:9a:eb:05:35:4b:f5:32:e0:8a:df:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:77:F8:62:50:9E:D9:C1:7F:77:6D:88:BB:82:3C:F9:E5:D6:AA:A1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/u3f4YlCe2cF_d22Iu4I8-eXWqqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.86.0/24
151.242.132.0/24
151.243.4.0/24
151.243.221.0/24
Signature Algorithm: sha256WithRSAEncryption
99:41:43:49:85:ef:03:2e:62:39:e8:96:82:a0:1f:c2:21:8f:
47:58:f1:77:6f:35:45:cb:ff:08:9e:73:f4:27:d3:b5:12:e4:
66:af:5f:00:b8:63:89:13:e4:69:2a:dc:df:92:e0:2e:a8:14:
72:fa:6f:7a:e3:3d:3d:e5:37:93:dc:46:f0:47:b4:66:59:e4:
2d:86:18:df:69:d0:db:d5:3c:43:c4:65:31:4a:c8:d5:8c:d7:
d0:f2:14:00:3f:ce:ae:5f:e9:86:4d:e8:a2:14:98:2d:08:2d:
86:26:41:7a:35:85:36:46:5a:c1:1e:02:1b:b2:a1:1a:8f:4a:
61:e4:3d:33:8c:ba:3e:49:9d:a1:41:2b:45:aa:3d:7c:2a:33:
03:53:0f:52:dd:61:48:90:05:84:5b:64:c1:90:58:94:64:ca:
27:4e:5a:1f:ef:0e:cd:58:78:ea:64:16:6c:5f:b0:78:54:48:
ac:26:c4:c1:9f:47:7d:8d:4a:ba:fe:c9:60:0a:aa:f4:3e:02:
1e:c1:87:26:3a:f9:15:5c:f8:ea:e0:3e:9f:be:f7:31:a0:f6:
02:11:ba:04:17:d7:02:51:2b:2b:0e:f0:45:82:ab:ec:45:59:
14:7b:2e:14:ab:20:e9:f1:39:c3:c5:98:b5:c7:75:0b:72:b8:
e2:f5:a4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:46:46 2025 by rpki-client