Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0mcJBEND5IYcPWu4r-m2YkffNEU.roa
File: 0mcJBEND5IYcPWu4r-m2YkffNEU.roa (raw, json)
Hash identifier: l8gd2sKs9pECdy6+ixfXcly/A9JSkPzbg7F2zgwEqUc=
Subject key identifier: D2:67:09:04:43:43:E4:86:1C:3D:6B:B8:AF:E9:B6:62:47:DF:34:45
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01991D5F3E936B043AF85C1DE3CB0FF916E2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0mcJBEND5IYcPWu4r-m2YkffNEU.roa
Signing time: Sat 06 Sep 2025 04:53:25 +0000
ROA not before: Sat 06 Sep 2025 04:53:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14445
IP address blocks: 151.243.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 17:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:5f:3e:93:6b:04:3a:f8:5c:1d:e3:cb:0f:f9:16:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 6 04:53:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d26709044343e4861c3d6bb8afe9b66247df3445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:87:4e:22:3a:e5:3c:b9:2e:c9:ce:c6:41:
3d:1f:76:b3:62:a6:da:00:62:bc:e7:d8:c5:ff:a9:
3b:20:a7:5b:32:03:6e:0e:c4:17:87:79:0d:5e:c9:
72:ed:df:ff:e1:36:82:21:bc:20:6e:cd:d8:18:b8:
3b:83:81:bc:e2:cd:f1:a0:62:10:5a:2e:7c:de:8f:
b2:67:00:89:f0:64:d0:9d:24:82:6c:bf:83:e9:98:
8f:32:30:da:ad:7a:ac:d2:a7:de:69:df:2f:d5:00:
af:8e:61:39:89:1e:87:e5:c6:61:c4:39:44:40:ca:
97:63:59:71:3b:f3:c2:e6:d3:65:5b:1e:cf:6b:fb:
9d:78:ec:38:db:ec:4f:2a:ad:90:95:3b:3d:1e:97:
bf:ce:f1:1a:4a:38:0b:d7:33:07:a2:69:b4:6d:10:
9b:d4:8a:bc:e7:3f:6b:a2:51:a2:99:41:71:e1:87:
86:8a:71:d1:c8:05:69:0d:f4:78:89:02:cd:28:30:
d0:0a:a2:9f:81:2d:84:ff:57:74:11:bd:6a:54:ab:
13:86:ec:79:ed:be:32:3e:8b:48:c2:4e:79:79:28:
97:35:b4:3e:2a:7f:2a:01:3d:86:df:04:19:6e:2b:
37:86:27:e6:ca:c3:f4:df:10:f3:70:39:2e:28:79:
86:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:67:09:04:43:43:E4:86:1C:3D:6B:B8:AF:E9:B6:62:47:DF:34:45
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0mcJBEND5IYcPWu4r-m2YkffNEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.19.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:63:82:7d:00:9b:39:75:34:c2:06:ee:82:07:f8:c4:b1:44:
e1:5a:ae:35:6a:31:6a:3b:84:85:88:68:57:f6:93:2c:ea:2f:
a4:d4:b1:b3:cc:41:2f:2f:13:08:9a:ba:2b:8f:51:88:32:a2:
49:90:cd:ed:fa:cf:50:fc:13:ca:4a:39:bc:8c:38:54:5f:41:
ec:1d:2d:6e:2c:17:22:95:ca:c0:f3:3b:ba:fa:0d:cc:d3:00:
e8:52:6a:30:14:e6:c2:ef:a3:87:d3:17:29:04:9a:ef:b0:4d:
7b:a0:06:9d:1d:63:41:38:2a:6a:de:11:f7:79:bc:aa:f1:89:
3c:60:97:27:98:a1:9d:b0:ac:27:ad:0e:ac:16:c7:04:09:b7:
a0:79:76:c4:ae:e6:e7:f3:49:9b:b1:aa:c2:40:6e:8d:16:15:
aa:21:cf:ab:11:34:62:5f:4e:87:d9:4e:63:dc:6b:1a:aa:73:
b7:4c:29:cf:c3:ea:24:8b:c3:c1:06:c3:61:cd:e5:88:4f:35:
c1:28:92:0a:78:4c:06:74:29:e7:ce:ef:93:fa:2c:1b:dc:ff:
a9:fc:00:3d:5d:c1:14:5a:99:2a:b3:3b:83:83:7f:6b:70:33:
78:97:9a:ed:34:71:95:89:3f:85:ea:22:14:00:ce:9e:53:a8:
15:60:c4:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZkdXz6TawQ6+Fwd48sP+RbiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwOTA2MDQ1MzI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjY3MDkwNDQzNDNlNDg2MWMzZDZiYjhhZmU5YjY2MjQ3ZGYzNDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRCHTiI65Ty5LsnOxkE9H3azYqba
AGK859jF/6k7IKdbMgNuDsQXh3kNXsly7d//4TaCIbwgbs3YGLg7g4G84s3xoGIQ
Wi583o+yZwCJ8GTQnSSCbL+D6ZiPMjDarXqs0qfead8v1QCvjmE5iR6H5cZhxDlE
QMqXY1lxO/PC5tNlWx7Pa/udeOw42+xPKq2QlTs9Hpe/zvEaSjgL1zMHomm0bRCb
1Iq85z9rolGimUFx4YeGinHRyAVpDfR4iQLNKDDQCqKfgS2E/1d0Eb1qVKsThux5
7b4yPotIwk55eSiXNbQ+Kn8qAT2G3wQZbis3hifmysP03xDzcDkuKHmGpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNJnCQRDQ+SGHD1ruK/ptmJH3zRFMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvMG1jSkJFTkQ1SVljUFd1NHItbTJZa2ZmTkVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/MTMA0G
CSqGSIb3DQEBCwUAA4IBAQCcY4J9AJs5dTTCBu6CB/jEsUThWq41ajFqO4SFiGhX
9pMs6i+k1LGzzEEvLxMImrorj1GIMqJJkM3t+s9Q/BPKSjm8jDhUX0HsHS1uLBci
lcrA8zu6+g3M0wDoUmowFObC76OH0xcpBJrvsE17oAadHWNBOCpq3hH3ebyq8Yk8
YJcnmKGdsKwnrQ6sFscECbegeXbErubn80mbsarCQG6NFhWqIc+rETRiX06H2U5j
3GsaqnO3TCnPw+oki8PBBsNhzeWITzXBKJIKeEwGdCnnzu+T+iwb3P+p/AA9XcEU
WpkqszuDg39rcDN4l5rtNHGViT+F6iIUAM6eU6gVYMQy
-----END CERTIFICATE-----
Generated at Tue Sep 16 01:26:52 2025 by rpki-client