Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yXWTu30F8RON6FDT-X9Ra_vgf0g.roa
File: yXWTu30F8RON6FDT-X9Ra_vgf0g.roa (raw, json)
Hash identifier: e9YObUWBbKIGh0QT7NfzlxK6xOeoDZu51/I2r7M0o2Q=
Subject key identifier: C9:75:93:BB:7D:05:F1:13:8D:E8:50:D3:F9:7F:51:6B:FB:E0:7F:48
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198267BD5AFB70EFEBF29E053FFEA070028
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yXWTu30F8RON6FDT-X9Ra_vgf0g.roa
Signing time: Sun 20 Jul 2025 06:18:26 +0000
ROA not before: Sun 20 Jul 2025 06:18:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61112
IP address blocks: 151.242.125.0/24 maxlen: 24
151.242.137.0/24 maxlen: 24
151.242.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:7b:d5:af:b7:0e:fe:bf:29:e0:53:ff:ea:07:00:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 20 06:18:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c97593bb7d05f1138de850d3f97f516bfbe07f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b5:e8:c1:f5:da:3b:fb:7f:07:d3:49:2c:22:
40:be:2e:a1:b6:a8:22:4e:5a:a6:4e:8a:45:18:c1:
50:d3:3c:e3:24:8c:f4:67:d3:13:dd:ba:d9:05:11:
2f:98:4a:6e:4c:6d:1e:10:e3:63:a8:e1:b4:34:83:
37:41:7b:05:26:8e:a3:5c:b8:c4:a7:0c:6d:5d:4e:
5e:b8:9e:da:b1:2b:2e:31:cf:52:e7:b5:f0:71:64:
e0:2a:59:71:40:1a:14:aa:07:2e:5a:d6:23:1d:3d:
6f:51:61:cb:25:a7:af:e5:91:0d:b1:22:4b:a6:20:
bb:5f:77:4a:11:0f:a0:54:18:7a:3c:8a:ea:7a:c2:
02:93:da:79:51:0f:e9:bb:07:a3:f7:eb:82:7e:8d:
d8:26:60:71:59:3a:6e:19:34:ca:e6:84:f3:ea:f2:
65:62:5b:c8:d6:7c:f2:c0:e4:a1:e3:62:20:bc:00:
ed:1e:ab:bb:ba:72:0c:69:f3:84:9a:f7:b8:22:91:
21:9a:4c:02:9a:2c:85:3e:04:29:26:65:df:8a:4f:
22:86:94:da:b7:d4:62:aa:d1:b7:53:07:61:bc:7d:
39:bc:af:19:82:2a:30:52:86:59:e8:59:39:b5:ec:
39:e8:4c:d5:17:8f:48:51:6a:57:34:9f:e1:d3:6f:
88:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:75:93:BB:7D:05:F1:13:8D:E8:50:D3:F9:7F:51:6B:FB:E0:7F:48
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yXWTu30F8RON6FDT-X9Ra_vgf0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.125.0/24
151.242.137.0/24
151.242.164.0/23
Signature Algorithm: sha256WithRSAEncryption
44:44:a2:d0:5a:ba:e6:78:e6:f1:c6:dc:ff:55:12:9e:21:2d:
8c:27:11:78:e8:77:6f:f8:4b:9a:42:b8:81:7b:b3:43:06:1b:
ce:f6:ea:5c:d4:bf:4b:a7:f6:f4:72:3b:94:90:c4:f4:37:24:
65:cc:61:65:53:33:9b:94:83:d8:38:4d:c0:02:4e:da:30:61:
d0:20:7d:d7:e9:b1:ad:a8:2b:13:95:89:22:67:d8:c0:27:d2:
e2:3f:39:ea:82:e2:dd:df:a3:5e:ff:5a:73:97:dd:76:40:27:
48:08:77:d4:c4:1f:4b:f2:46:ce:81:45:0d:c4:68:d2:4e:d2:
b9:dd:f5:9d:b5:b2:03:74:d6:9b:55:39:e3:94:8c:ed:88:17:
46:c4:cc:d6:f5:f8:d5:c5:63:87:17:e4:c3:0b:f1:05:d2:1a:
48:97:8d:e4:8c:47:9c:db:26:1c:1b:c8:62:82:4c:09:d2:46:
e9:a2:fd:d7:6b:76:eb:e7:77:fa:19:2d:be:cc:10:44:b7:86:
e1:6d:5b:a0:51:8c:ea:8e:9f:a0:06:a1:17:96:cb:45:b5:a0:
20:54:bd:75:48:ca:5f:e6:f2:15:bc:5c:a8:7e:6c:c7:55:fe:
68:46:ba:5d:da:c1:c2:db:c4:c9:78:61:38:0e:04:a2:d7:2f:
93:b5:d3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:26:27 2025 by rpki-client