Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1_DD03ORDcFymVjkiKWlogidRr8.roa
File: 1_DD03ORDcFymVjkiKWlogidRr8.roa (raw, json)
Hash identifier: X5jObGDTUpWRfETKiCARjTlPSBoVL/XGHVT5jKKJqB8=
Subject key identifier: D7:F0:C3:D3:73:91:0D:C1:72:99:58:E4:88:A5:A5:A2:08:9D:46:BF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198E4CC37C698DFBE8FB820D89A9FD7A208
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1_DD03ORDcFymVjkiKWlogidRr8.roa
Signing time: Tue 26 Aug 2025 05:14:05 +0000
ROA not before: Tue 26 Aug 2025 05:14:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397423
IP address blocks: 151.242.97.0/24 maxlen: 24
151.244.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 13:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e4:cc:37:c6:98:df:be:8f:b8:20:d8:9a:9f:d7:a2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 26 05:14:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7f0c3d373910dc1729958e488a5a5a2089d46bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:45:49:8a:66:34:08:ef:b6:4c:f2:ec:f0:
d5:21:f4:e3:b4:6c:3b:9f:f4:17:ed:1b:98:bd:59:
aa:17:8e:2a:e7:02:75:3c:1d:81:c3:60:d1:87:a0:
12:f0:93:14:1b:14:3e:d4:64:10:2d:d4:c8:3b:de:
85:00:53:f0:17:46:f8:19:0d:b4:40:a3:a5:8c:47:
21:71:23:48:10:1d:bc:bd:0c:8f:79:32:81:29:40:
dd:af:73:ac:a3:b5:36:83:55:42:d5:87:01:37:26:
ce:5e:7e:77:b9:5f:18:60:8d:12:77:62:08:2d:63:
77:3f:a3:e1:44:3d:1b:ca:e6:20:47:36:1b:d1:9e:
ab:b6:a9:d3:4f:fa:65:ef:f6:de:7d:1c:af:f2:6d:
5d:b9:19:fa:4c:3f:9d:28:6c:6a:9a:80:08:5b:bc:
8c:4c:35:b3:c2:5e:cf:06:c5:a6:7e:06:4a:33:02:
c6:d5:05:24:73:a0:3d:24:64:28:c1:82:ee:56:c9:
93:e1:6a:34:08:3a:f0:f8:96:d0:80:a3:61:79:aa:
bc:31:30:44:89:f5:51:fa:92:c6:af:c4:77:80:bf:
8f:cc:e1:31:1e:a8:f1:36:bc:cd:f9:3a:2d:c1:33:
76:ab:d5:ab:47:6b:ab:07:bf:ec:5c:e9:d0:48:8b:
ad:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F0:C3:D3:73:91:0D:C1:72:99:58:E4:88:A5:A5:A2:08:9D:46:BF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1_DD03ORDcFymVjkiKWlogidRr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.97.0/24
151.244.99.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:a4:89:41:48:8f:92:fb:28:4b:b7:ec:8f:d9:26:b9:ae:a8:
ba:ee:8a:68:f7:b5:52:22:eb:6d:c9:5b:1a:4a:b7:e7:47:ba:
49:c3:32:87:d2:0c:34:0b:45:2b:16:df:67:22:8f:26:6d:2b:
0d:1b:e2:ce:aa:73:bf:03:c6:52:73:a9:b9:ac:ca:81:ed:f0:
85:38:89:af:20:e9:d4:43:d0:d3:b3:07:b1:8e:2f:83:ef:9a:
39:b3:6a:fa:9f:34:10:7c:ab:1a:ed:60:da:d7:0c:3d:c6:82:
53:65:c2:35:51:b0:47:4a:89:a5:c6:2a:4d:5b:44:fc:e3:bf:
20:91:21:df:2c:c2:da:ad:8d:84:6d:5f:45:d9:33:63:1b:ce:
09:93:2c:c9:2e:28:fa:48:6f:b0:cc:aa:22:42:8f:b9:c1:7d:
4c:fc:17:bc:e2:e1:99:22:84:b5:99:72:40:79:7a:9a:75:6e:
5b:b6:3c:ff:26:0a:a4:b1:97:3d:10:52:25:9a:3e:28:33:c2:
da:bd:34:78:92:e4:85:76:2a:2a:61:6a:5a:01:25:8a:de:84:
c1:09:d4:9c:05:48:f6:75:fe:3f:4a:16:61:06:cd:9e:be:36:
27:1b:dd:c6:97:57:d0:95:71:57:20:11:f7:dd:53:7f:17:38:
3f:9b:9a:2a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZjkzDfGmN++j7gg2Jqf16IIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwODI2MDUxNDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2YwYzNkMzczOTEwZGMxNzI5OTU4ZTQ4OGE1YTVhMjA4OWQ0NmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw1FSYpmNAjvtkzy7PDVIfTjtGw7
n/QX7RuYvVmqF44q5wJ1PB2Bw2DRh6AS8JMUGxQ+1GQQLdTIO96FAFPwF0b4GQ20
QKOljEchcSNIEB28vQyPeTKBKUDdr3Oso7U2g1VC1YcBNybOXn53uV8YYI0Sd2II
LWN3P6PhRD0byuYgRzYb0Z6rtqnTT/pl7/befRyv8m1duRn6TD+dKGxqmoAIW7yM
TDWzwl7PBsWmfgZKMwLG1QUkc6A9JGQowYLuVsmT4Wo0CDrw+JbQgKNheaq8MTBE
ifVR+pLGr8R3gL+PzOExHqjxNrzN+TotwTN2q9WrR2urB7/sXOnQSIut3wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNfww9NzkQ3BcplY5IilpaIInUa/MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvMV9ERDAzT1JEY0Z5bVZqa2lLV2xvZ2lkUnI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/JhAwQA
l/RjMA0GCSqGSIb3DQEBCwUAA4IBAQAfpIlBSI+S+yhLt+yP2Sa5rqi67opo97VS
IuttyVsaSrfnR7pJwzKH0gw0C0UrFt9nIo8mbSsNG+LOqnO/A8ZSc6m5rMqB7fCF
OImvIOnUQ9DTswexji+D75o5s2r6nzQQfKsa7WDa1ww9xoJTZcI1UbBHSomlxipN
W0T8478gkSHfLMLarY2EbV9F2TNjG84JkyzJLij6SG+wzKoiQo+5wX1M/Be84uGZ
IoS1mXJAeXqadW5btjz/JgqksZc9EFIlmj4oM8LavTR4kuSFdioqYWpaASWK3oTB
CdScBUj2df4/ShZhBs2evjYnG93Gl1fQlXFXIBH33VN/Fzg/m5oq
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:40:28 2025 by rpki-client