Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zuh83XklpCtGlm_WR1IIuWQ4-84.roa
File: zuh83XklpCtGlm_WR1IIuWQ4-84.roa (raw, json)
Hash identifier: goMjnaSftNVZ41KsBQeuIt3ueAbGHtQ7L4yk7EI+ucw=
Subject key identifier: CE:E8:7C:DD:79:25:A4:2B:46:96:6F:D6:47:52:08:B9:64:38:FB:CE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198267BD5263B6ADA4DB740014A65AA12D3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zuh83XklpCtGlm_WR1IIuWQ4-84.roa
Signing time: Sun 20 Jul 2025 06:18:26 +0000
ROA not before: Sun 20 Jul 2025 06:18:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 37.202.206.0/24 maxlen: 24
151.242.49.0/24 maxlen: 24
151.243.64.0/20 maxlen: 24
151.243.97.0/24 maxlen: 24
151.243.106.0/24 maxlen: 24
151.244.181.0/24 maxlen: 24
151.244.221.0/24 maxlen: 24
151.244.223.0/24 maxlen: 24
151.244.229.0/24 maxlen: 24
151.244.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:7b:d5:26:3b:6a:da:4d:b7:40:01:4a:65:aa:12:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 20 06:18:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cee87cdd7925a42b46966fd6475208b96438fbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:84:cc:8f:fe:d3:3c:03:ac:de:52:76:4a:
22:96:81:78:75:1d:f2:13:5c:4d:a0:ec:0e:1a:d5:
b3:58:55:ff:eb:06:5a:72:3d:3d:3a:4d:96:c5:60:
54:84:d7:f7:a2:f7:14:58:ca:09:6b:b1:63:60:55:
d3:f8:74:0f:5d:43:ef:37:77:f5:25:50:e8:aa:fc:
be:5f:7f:0f:63:d4:2b:93:10:a2:b2:5f:ca:a2:a8:
b4:dc:00:92:fb:ec:b6:52:06:2a:a4:37:7f:cc:34:
d9:75:6d:b9:75:c9:42:a9:d5:8e:ea:0a:98:51:a7:
53:81:d8:e6:a7:15:b8:40:dd:f4:68:1a:fc:50:b0:
41:d8:46:91:b0:1b:93:86:f8:61:b5:38:ba:bb:eb:
f4:7c:19:8d:38:f1:c0:21:99:45:c2:46:b1:d3:19:
e3:fb:bc:54:1a:50:c0:b0:9f:0f:38:ae:80:1c:11:
be:65:c5:34:ce:d6:aa:a6:4a:35:71:e6:69:8e:8d:
68:ab:f8:e3:9e:6c:64:95:69:69:f6:ce:3c:cb:98:
55:f9:cb:e4:d5:2f:1d:5f:5a:e0:77:d1:f0:cb:39:
ff:13:56:12:87:2c:b0:fb:c6:d0:9a:a5:e2:9f:a5:
ac:0d:cd:79:9e:fd:95:52:25:e4:84:20:75:d8:6d:
1a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E8:7C:DD:79:25:A4:2B:46:96:6F:D6:47:52:08:B9:64:38:FB:CE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zuh83XklpCtGlm_WR1IIuWQ4-84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.206.0/24
151.242.49.0/24
151.243.64.0/20
151.243.97.0/24
151.243.106.0/24
151.244.181.0/24
151.244.221.0/24
151.244.223.0/24
151.244.229.0-151.244.230.255
Signature Algorithm: sha256WithRSAEncryption
76:92:13:3f:09:41:a5:ac:fa:d8:64:d5:dd:6f:40:e1:35:fc:
05:ae:bf:45:0e:a9:79:41:97:f3:8b:e0:36:bc:60:d2:c3:8e:
21:12:38:9a:b7:6d:c5:ae:7f:5f:ed:9c:9c:6c:63:9c:0e:70:
60:72:24:53:d0:88:ec:e5:5c:80:c0:2e:bf:33:88:72:d2:4d:
e9:7b:50:71:ce:15:40:36:1c:87:2d:a3:c7:d5:5d:75:9e:6b:
7b:da:b7:f3:8d:d3:18:f6:d2:02:e0:3d:7d:98:6b:64:e3:93:
fc:43:0c:62:3d:10:53:75:28:db:f5:e9:a5:0d:13:5d:f5:f2:
cb:11:50:df:d9:b5:58:42:bb:90:ee:4a:d3:d4:93:7e:d4:37:
04:d5:5e:26:fc:65:89:63:a2:72:01:3e:a5:21:9e:b5:5c:e4:
7a:5b:f2:c7:82:e3:1a:8c:d7:5b:66:13:69:4e:c5:24:d4:2a:
02:18:02:37:c7:35:01:71:55:8e:a0:54:8e:7b:5d:8e:4c:cd:
d3:ba:af:75:f2:4a:f5:58:da:3a:1a:9f:91:56:ca:83:6c:9f:
35:b0:f9:03:99:45:a1:61:03:bc:6d:b0:a1:e2:3a:b0:49:7e:
4e:40:1c:ec:bc:3d:59:58:a3:0b:28:8c:7f:43:d4:3f:bd:15:
72:fb:f3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 15:05:24 2025 by rpki-client