Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wukD0QfBhRwwvSuoelpwaOpKAy0.roa
File: wukD0QfBhRwwvSuoelpwaOpKAy0.roa (raw, json)
Hash identifier: 2bI6nHUAwLW7tzSqPuqlCV7fgBpSjoO2EIdRKUFWd2s=
Subject key identifier: C2:E9:03:D1:07:C1:85:1C:30:BD:2B:A8:7A:5A:70:68:EA:4A:03:2D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197FA8E26056BE1E07F78DC26CBE3BAD727
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wukD0QfBhRwwvSuoelpwaOpKAy0.roa
Signing time: Fri 11 Jul 2025 17:35:09 +0000
ROA not before: Fri 11 Jul 2025 17:35:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42960
IP address blocks: 151.242.26.0/24 maxlen: 24
151.242.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fa:8e:26:05:6b:e1:e0:7f:78:dc:26:cb:e3:ba:d7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 11 17:35:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2e903d107c1851c30bd2ba87a5a7068ea4a032d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:53:38:32:aa:d6:b5:66:74:b1:46:63:1b:a7:
c4:b2:3b:31:9d:84:f5:7c:35:29:d7:a4:3f:ed:02:
95:53:9f:e9:0a:c3:81:ad:04:24:90:cf:ca:f1:ac:
da:1f:e4:e8:23:a6:5f:86:cf:2f:09:fd:5e:08:3e:
59:ef:87:87:4f:89:ff:69:d2:ef:c0:15:09:63:d3:
73:ed:50:ea:86:03:dd:c4:45:a1:18:70:49:75:7a:
d1:7d:c3:4c:56:c6:63:2f:e7:be:82:aa:ae:80:5c:
b0:d6:d6:7d:de:e9:93:64:6b:f6:f7:b8:3d:b7:94:
fe:47:f9:70:8c:01:4a:34:c8:9f:70:7d:6d:51:5f:
38:c8:57:10:84:2c:c0:ec:7e:af:83:7a:cb:0e:ac:
f5:d2:0c:b9:9f:1a:6b:99:c0:0e:34:29:54:c2:96:
7b:87:4a:1c:f2:a6:1c:3c:bd:f9:fc:4d:eb:eb:4b:
1f:ab:ec:d6:22:1b:a5:a8:20:66:30:4c:2f:63:b3:
46:12:7b:7a:2b:af:48:54:9e:ea:e7:6c:e6:c5:18:
d3:1a:37:74:72:67:43:2d:f5:8c:4d:4a:4d:85:d8:
e6:37:3d:d9:72:9f:f9:f8:19:94:a8:92:cf:39:f2:
2d:a8:c7:9e:0d:5c:67:2e:2e:8e:ad:76:3c:7e:44:
87:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E9:03:D1:07:C1:85:1C:30:BD:2B:A8:7A:5A:70:68:EA:4A:03:2D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wukD0QfBhRwwvSuoelpwaOpKAy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.26.0/24
151.242.73.0/24
Signature Algorithm: sha256WithRSAEncryption
97:5f:8e:3c:e9:2f:f7:4b:ef:d8:b1:02:d5:47:6f:39:e9:af:
2f:90:91:2b:93:3c:4c:75:4e:79:20:c7:e4:93:9c:ca:5b:27:
0d:93:4a:a9:cd:c1:81:b3:5c:cc:a9:1b:37:29:2a:ef:87:00:
36:d1:d7:78:94:f5:c3:a8:f9:7c:80:02:6d:94:df:4d:d7:a2:
63:c0:73:ff:27:02:1a:9d:fc:b4:97:03:cc:7e:2f:2c:9c:5b:
2d:27:7b:ba:bd:db:d0:52:38:d9:7f:86:e1:48:07:6f:97:a1:
11:7b:02:b9:0d:e2:cd:7b:29:f8:c9:e8:75:a2:b6:dd:41:e7:
ec:9d:19:4e:6b:36:c9:04:e4:40:8d:a5:fd:39:80:cf:32:a9:
29:a7:02:1d:e8:19:77:6b:5e:02:a3:71:ec:01:18:c2:23:c3:
5c:9a:ff:0a:23:76:76:e2:a3:71:d7:91:41:3f:10:06:af:30:
b9:db:ad:cb:70:2f:e6:a8:80:98:84:b5:a5:55:f4:0c:cc:3d:
db:c7:5b:6c:02:af:9a:ec:0f:32:12:bb:92:8e:0b:4b:4f:8f:
3f:bc:79:2b:6b:44:9a:cb:39:a8:99:85:b8:6c:d3:5f:ac:33:
14:dd:1b:7c:08:20:8b:00:60:40:79:38:61:ce:5b:c1:6a:aa:
38:3a:c8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:40:13 2025 by rpki-client