Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uORnfN8i_NQKyRnbZN96YV8CiAY.roa
File: uORnfN8i_NQKyRnbZN96YV8CiAY.roa (raw, json)
Hash identifier: BlSrafgIwICeVSlf+w/tlTG/GXe6BFrjfMvGbOcY6l4=
Subject key identifier: B8:E4:67:7C:DF:22:FC:D4:0A:C9:19:DB:64:DF:7A:61:5F:02:88:06
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01982C12CBD3C18A166B9EF59F5D2267268C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uORnfN8i_NQKyRnbZN96YV8CiAY.roa
Signing time: Mon 21 Jul 2025 08:21:26 +0000
ROA not before: Mon 21 Jul 2025 08:21:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 151.245.109.0/24 maxlen: 24
151.245.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 07:38:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2c:12:cb:d3:c1:8a:16:6b:9e:f5:9f:5d:22:67:26:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 21 08:21:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8e4677cdf22fcd40ac919db64df7a615f028806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:cf:6f:5c:58:94:25:16:42:68:e6:db:1c:
b6:94:d4:2c:1c:67:ca:66:52:fc:2e:68:0e:c0:5b:
ca:95:c9:ba:84:82:fc:c6:fe:60:37:ef:67:fc:50:
8a:2f:51:c8:35:94:0b:d7:03:29:61:f2:b1:6f:15:
0a:d0:df:84:b9:61:60:f7:3e:df:0b:45:49:50:53:
50:a2:b7:a5:0b:6a:a7:9a:10:1d:91:8b:39:3e:1c:
1c:29:b3:51:d5:8b:27:7f:18:3a:a9:d2:7a:9a:9f:
a1:9e:f4:ec:36:88:22:3e:97:b0:54:1f:b8:3e:3e:
2b:ec:83:d0:48:3e:06:52:37:8a:b0:ea:af:e0:01:
d5:31:ef:f8:e8:d8:f9:2f:78:f8:d3:f8:5c:4e:20:
8c:fe:b5:f0:a6:7e:5e:75:92:66:24:a2:dc:a6:d1:
9a:56:00:e8:1a:ee:6f:a3:14:72:d8:f2:f8:1d:2d:
8f:a9:1c:78:56:41:10:36:f7:d6:58:8b:42:4c:04:
23:34:f6:f1:c7:4a:a5:50:18:f3:ad:1f:99:37:2d:
4e:f7:ac:d6:ec:d2:fc:e6:b8:54:d3:e6:78:ed:1c:
5f:f2:82:01:b2:3d:69:1e:50:14:ed:fc:52:46:99:
43:45:d1:d3:7c:6b:59:85:37:a2:68:44:84:03:23:
87:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E4:67:7C:DF:22:FC:D4:0A:C9:19:DB:64:DF:7A:61:5F:02:88:06
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uORnfN8i_NQKyRnbZN96YV8CiAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.109.0/24
151.245.111.0/24
Signature Algorithm: sha256WithRSAEncryption
49:42:a9:52:8e:31:64:48:b8:58:35:68:1c:48:a1:ab:62:62:
7b:ac:1c:f5:11:da:d0:38:49:26:22:be:f0:78:70:3b:34:be:
64:9f:d1:0b:f1:c3:5a:22:f3:ba:f3:15:68:ad:74:cf:cc:a9:
ea:9c:62:62:15:8f:25:b2:6c:70:6a:e6:9c:c0:40:aa:be:8d:
83:f4:d9:ee:db:6d:e2:11:fc:ee:f1:41:02:6e:95:4f:71:97:
78:2e:a7:5b:a7:c5:8c:d2:19:2a:52:49:15:88:17:76:e2:bb:
92:a7:20:49:21:e3:7e:35:5a:a5:dd:4b:0a:9e:1a:f8:b7:ea:
e7:ee:1b:84:27:96:ae:16:37:d4:fc:9c:17:e8:76:c9:d5:1c:
31:d2:55:1b:8d:1f:33:25:d5:56:34:c4:2a:bf:e2:74:73:6d:
89:be:d2:65:4a:65:5e:ea:84:d4:3a:4e:e0:76:c4:80:f5:4c:
45:07:3e:15:9b:dd:74:fe:64:98:3e:99:d5:ce:50:b2:c1:3a:
44:91:1f:f1:8f:f1:b0:21:f1:72:0a:70:29:21:9e:d1:ba:4a:
7b:5a:ee:dd:1f:ab:82:7b:41:3b:38:6a:5f:4c:d6:5c:14:53:
68:4a:f9:f5:3c:59:f5:07:97:8c:d5:1c:ec:62:f6:71:30:93:
6e:7f:55:7f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZgsEsvTwYoWa571n10iZyaMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNzIxMDgyMTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGU0Njc3Y2RmMjJmY2Q0MGFjOTE5ZGI2NGRmN2E2MTVmMDI4ODA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu17Pb1xYlCUWQmjm2xy2lNQsHGfK
ZlL8LmgOwFvKlcm6hIL8xv5gN+9n/FCKL1HINZQL1wMpYfKxbxUK0N+EuWFg9z7f
C0VJUFNQorelC2qnmhAdkYs5PhwcKbNR1Ysnfxg6qdJ6mp+hnvTsNogiPpewVB+4
Pj4r7IPQSD4GUjeKsOqv4AHVMe/46Nj5L3j40/hcTiCM/rXwpn5edZJmJKLcptGa
VgDoGu5voxRy2PL4HS2PqRx4VkEQNvfWWItCTAQjNPbxx0qlUBjzrR+ZNy1O96zW
7NL85rhU0+Z47Rxf8oIBsj1pHlAU7fxSRplDRdHTfGtZhTeiaESEAyOHhQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLjkZ3zfIvzUCskZ22TfemFfAogGMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvdU9SbmZOOGlfTlFLeVJuYlpOOTZZVjhDaUFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/VtAwQA
l/VvMA0GCSqGSIb3DQEBCwUAA4IBAQBJQqlSjjFkSLhYNWgcSKGrYmJ7rBz1EdrQ
OEkmIr7weHA7NL5kn9EL8cNaIvO68xVorXTPzKnqnGJiFY8lsmxwauacwECqvo2D
9Nnu223iEfzu8UECbpVPcZd4Lqdbp8WM0hkqUkkViBd24ruSpyBJIeN+NVql3UsK
nhr4t+rn7huEJ5auFjfU/JwX6HbJ1Rwx0lUbjR8zJdVWNMQqv+J0c22JvtJlSmVe
6oTUOk7gdsSA9UxFBz4Vm910/mSYPpnVzlCywTpEkR/xj/GwIfFyCnApIZ7Rukp7
Wu7dH6uCe0E7OGpfTNZcFFNoSvn1PFn1B5eM1RzsYvZxMJNuf1V/
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:54:45 2025 by rpki-client