Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/04CTX5Mnhq4yGrNCdntpt5kerC8.roa
File: 04CTX5Mnhq4yGrNCdntpt5kerC8.roa (raw, json)
Hash identifier: q5XMJAKkAMtwZ10TwAaue/A2USpw3JDcWiJSiUkdo8c=
Subject key identifier: D3:80:93:5F:93:27:86:AE:32:1A:B3:42:76:7B:69:B7:99:1E:AC:2F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198EB41A76D6B6E02089ACD12A0D14B3646
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/04CTX5Mnhq4yGrNCdntpt5kerC8.roa
Signing time: Wed 27 Aug 2025 11:20:05 +0000
ROA not before: Wed 27 Aug 2025 11:20:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207805
IP address blocks: 151.242.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 13:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:eb:41:a7:6d:6b:6e:02:08:9a:cd:12:a0:d1:4b:36:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 27 11:20:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d380935f932786ae321ab342767b69b7991eac2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:95:46:0b:89:f6:a5:85:aa:6a:23:54:50:47:
2b:65:eb:60:0b:7e:7e:f2:bf:ee:0b:e8:a7:37:c2:
99:6e:85:b5:0a:7d:8d:f2:b5:18:93:ca:4c:9d:6c:
a9:60:10:5e:cd:d8:4f:7b:4a:8f:4b:54:9d:db:44:
2b:17:13:bb:23:e5:1c:52:78:bb:20:c1:e7:2e:07:
3d:88:f0:55:a4:82:11:3c:e1:ff:b8:79:15:23:0f:
da:56:a1:99:48:2d:95:11:c0:e4:41:1e:ad:a5:5b:
77:9d:c4:4e:26:13:92:a6:f9:65:bc:a0:89:d6:e1:
e3:69:fc:ba:3a:59:28:94:bc:d8:90:68:ac:9d:d0:
6a:9f:6e:15:ff:bb:ec:8e:b7:fd:e1:bf:13:53:0e:
59:e7:5b:a0:ec:84:2b:77:94:19:a6:37:20:29:9c:
03:ac:2d:2f:19:4c:35:23:c9:c2:96:40:e2:ea:20:
eb:6f:d5:7c:b7:8a:a0:30:22:bc:81:8c:da:80:1a:
46:9b:af:17:10:ae:10:2c:d5:37:12:d9:3f:d6:a1:
13:4f:3c:bf:d5:91:3b:b7:e8:ab:9b:cf:b4:4a:92:
92:bb:cd:56:5f:74:30:66:4f:73:7b:35:b9:bd:6b:
6a:ff:67:12:ee:a2:0e:c0:23:e6:09:2f:06:42:9a:
bc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:80:93:5F:93:27:86:AE:32:1A:B3:42:76:7B:69:B7:99:1E:AC:2F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/04CTX5Mnhq4yGrNCdntpt5kerC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.52.0/24
Signature Algorithm: sha256WithRSAEncryption
16:18:44:6e:6b:a4:c1:98:54:58:33:ac:7b:a9:1d:8d:02:c7:
72:87:ac:9b:8a:ac:e0:b0:af:b6:f3:51:69:09:42:fa:1a:64:
d5:40:26:2c:1d:dc:bb:6c:d6:c3:c7:00:f0:ff:a3:46:06:0d:
63:4d:cb:bd:29:e8:09:b5:54:c7:03:69:b6:96:65:04:27:77:
75:85:9b:5f:ee:11:91:1b:53:93:3d:0e:4a:05:2c:55:ba:1a:
e2:66:12:dd:c1:14:57:1c:e8:5b:22:2e:5c:54:b5:28:bc:4d:
07:a6:dc:39:ff:60:36:34:5b:36:2f:8f:3f:93:86:ea:d0:a7:
e3:b9:93:02:44:4e:6b:a6:a2:8b:c0:5a:e4:df:40:4c:e8:79:
df:c7:70:37:3d:c7:ee:23:72:df:9e:75:69:df:24:fb:06:f1:
20:98:6d:97:e1:f4:1b:0e:b5:1e:e5:14:36:3d:20:e7:37:be:
31:10:ef:3d:7e:e3:b0:5d:0e:24:50:de:73:90:45:76:cb:2e:
ea:7f:24:b8:4d:3d:47:f6:f2:ae:a4:bf:48:2c:db:2f:cc:60:
b9:62:ff:f8:82:7a:66:65:ee:99:c7:6e:cc:30:a3:49:c4:40:
01:c1:5e:db:15:74:fb:94:a6:fd:54:be:1e:4f:2e:8b:74:c2:
c2:6b:24:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:34:45 2025 by rpki-client