Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2aA4--AQ0FHuXwlBiTHmjWa4eE0.roa
File: 2aA4--AQ0FHuXwlBiTHmjWa4eE0.roa (raw, json)
Hash identifier: 0Ju2yl43/2LEl+d4XWFUrxiw09LVaOsFwn2nTVV6Rks=
Subject key identifier: D9:A0:38:FB:E0:10:D0:51:EE:5F:09:41:89:31:E6:8D:66:B8:78:4D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01988D3C045392E35BA783C8BA7632108E3C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2aA4--AQ0FHuXwlBiTHmjWa4eE0.roa
Signing time: Sat 09 Aug 2025 05:09:37 +0000
ROA not before: Sat 09 Aug 2025 05:09:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 151.244.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:3c:04:53:92:e3:5b:a7:83:c8:ba:76:32:10:8e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 9 05:09:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9a038fbe010d051ee5f09418931e68d66b8784d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:16:52:bc:5c:9b:c1:75:01:5c:72:f9:5f:a3:
aa:07:d0:00:f4:5b:f5:df:b0:de:1a:fe:66:f9:fb:
5a:97:cf:e1:4f:6c:33:7e:cd:45:4d:bf:72:c7:e9:
35:ef:c2:05:d4:77:b1:aa:07:27:b6:63:51:7a:0a:
4c:e6:f1:7d:af:1a:33:9d:f3:c5:a7:cd:80:be:09:
9f:62:5d:2d:1a:d9:c7:c0:ea:80:76:0e:04:36:e3:
6b:75:fb:72:99:1e:82:09:40:5e:e2:5e:95:64:9e:
4f:37:51:06:66:2d:06:0e:2c:95:73:18:cc:0f:51:
0a:7a:79:8c:65:13:94:a4:9f:25:09:a4:9f:b6:20:
01:d4:b4:7a:95:25:e3:93:69:6d:67:19:45:66:a5:
ce:a2:31:ed:7d:15:12:59:27:0f:de:7a:b9:0d:07:
91:1b:47:9f:b0:a6:d5:c4:bb:35:3b:d9:14:94:3d:
a5:63:9e:fb:76:10:13:c9:95:9b:78:f5:fe:c1:df:
8f:86:c1:04:67:9f:1e:0e:71:a8:dd:05:48:4a:ca:
90:f4:18:23:25:2c:46:70:80:33:0e:e0:9c:25:64:
f6:d5:ac:5a:7f:4a:cd:25:29:42:e4:21:f7:b9:56:
da:b5:d0:d2:06:3a:05:38:51:d1:a0:fc:98:e3:7c:
b0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A0:38:FB:E0:10:D0:51:EE:5F:09:41:89:31:E6:8D:66:B8:78:4D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2aA4--AQ0FHuXwlBiTHmjWa4eE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.232.0/24
Signature Algorithm: sha256WithRSAEncryption
79:76:6b:3f:01:46:9c:a0:e5:d9:3e:77:5b:f6:8f:34:e0:a2:
14:37:75:6e:ad:cf:ca:1f:42:eb:21:ae:57:ab:dd:01:6f:ae:
a2:1f:93:d3:82:dd:af:c9:97:7d:e3:10:fa:b0:0a:fd:94:b6:
e3:21:30:30:31:87:8d:ca:41:04:4f:f3:6b:7f:e6:02:82:e2:
c7:30:19:28:93:99:21:bd:99:29:35:51:3a:c8:ca:c3:94:64:
af:71:fc:8c:ae:d7:4d:2d:af:55:ec:99:f1:3a:f4:30:66:8c:
61:c0:aa:28:7b:b6:ab:fe:51:e2:a1:18:c8:1f:8c:03:fe:c9:
81:4f:91:26:bc:39:41:95:3e:3d:a8:ce:7e:10:8b:4c:00:94:
6a:a9:34:b4:47:25:56:35:f6:8f:d0:20:31:f0:e4:ec:6e:1a:
54:41:a8:f5:b1:93:05:3e:78:3f:29:32:42:dd:ac:82:63:f5:
e8:bf:bc:a4:73:4b:e7:14:2e:b5:94:25:14:56:bd:c8:55:9e:
ee:4e:bc:8d:0b:68:cb:7a:ce:54:a3:d0:e3:30:6d:9b:78:4b:
13:ba:35:da:81:a8:d9:ed:0b:1f:ad:01:a3:63:9f:41:46:da:
a5:7d:fe:df:ef:57:07:d9:7b:28:fe:98:36:bc:b2:a6:7e:de:
c2:ec:cc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 13:57:35 2025 by rpki-client