Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/87y7U4BEVgNJvXoL2i3N9hPaYJI.roa
File: 87y7U4BEVgNJvXoL2i3N9hPaYJI.roa (raw, json)
Hash identifier: KDuA3P6kwV4mGJoA8c4nOsUKcGHDWbLzqsPHkYsvv3o=
Subject key identifier: F3:BC:BB:53:80:44:56:03:49:BD:7A:0B:DA:2D:CD:F6:13:DA:60:92
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199523D608D5A08BA5A43692E3AECEDE08B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/87y7U4BEVgNJvXoL2i3N9hPaYJI.roa
Signing time: Tue 16 Sep 2025 11:16:18 +0000
ROA not before: Tue 16 Sep 2025 11:16:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214150
IP address blocks: 151.245.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:3d:60:8d:5a:08:ba:5a:43:69:2e:3a:ec:ed:e0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 16 11:16:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3bcbb538044560349bd7a0bda2dcdf613da6092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0f:5e:06:7c:78:95:15:76:57:39:fe:c6:54:
2a:2a:12:0e:11:4f:db:da:b1:72:fe:3b:07:d5:20:
b3:b9:8a:93:c4:47:6d:e1:fc:f6:21:86:a0:79:a4:
da:7c:36:ad:91:75:4c:03:ef:4c:70:16:91:94:46:
69:ea:41:a4:53:73:26:ff:00:e4:56:14:a0:f0:c8:
7d:ac:92:a5:29:c1:0e:48:6d:d1:ae:4f:be:69:d4:
c1:b3:ab:e6:a0:2d:ec:09:c3:be:8d:24:67:10:1c:
06:78:ed:45:b6:2d:c4:a9:a2:10:b4:e0:0d:af:3b:
2c:87:28:be:73:5c:12:c1:3d:b8:d0:bf:26:0a:12:
b0:30:a5:63:38:67:1a:50:2a:48:a8:42:f8:51:af:
fd:b0:98:75:44:87:a7:00:c2:1e:df:47:b5:4d:6e:
05:97:e1:03:64:0f:b1:e4:55:90:2d:c3:1a:22:d4:
73:31:73:b4:86:aa:cf:95:ee:1c:28:be:d6:d2:fc:
57:d6:78:b1:2f:07:f5:88:0c:e2:9c:a1:b0:7d:26:
51:4d:5a:d4:47:52:d8:a8:ab:ab:a3:48:c2:b0:7d:
b0:24:4a:db:30:e5:8b:10:b5:8c:f8:75:76:50:ea:
87:aa:4e:f5:5c:da:2f:e8:99:dc:98:8f:3b:34:a5:
58:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BC:BB:53:80:44:56:03:49:BD:7A:0B:DA:2D:CD:F6:13:DA:60:92
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/87y7U4BEVgNJvXoL2i3N9hPaYJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.38.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:83:a9:44:bf:e3:95:6c:04:ad:fe:2e:ef:02:c3:a2:9c:d6:
e4:30:61:0c:57:c1:ab:c3:10:01:fb:c5:27:7b:b1:1f:46:01:
09:ee:45:2e:c8:38:eb:72:2b:ac:65:61:f2:82:e9:9a:2e:30:
ea:c7:40:20:a1:97:b3:3e:cc:ef:90:dc:29:d4:1f:c6:2b:2a:
12:98:79:1e:00:d3:d5:2f:13:c2:12:a0:c7:f9:cd:d9:16:f2:
3a:47:5d:6c:dc:c1:4c:56:ba:43:0d:1d:fe:c8:95:ad:81:72:
01:8f:05:b8:92:14:16:69:aa:c0:64:ea:e8:89:71:2c:52:ae:
76:ea:b3:e7:f6:bb:20:82:8e:07:94:77:60:3b:3c:e7:24:54:
38:e3:07:c2:fd:5f:37:27:c1:57:ed:77:f8:bb:08:2d:31:8a:
4c:95:4a:01:37:29:bd:7a:cb:aa:6c:85:e4:1e:b6:41:fd:a3:
24:22:a5:de:63:93:27:29:35:88:e6:78:9e:d0:16:b6:b7:1e:
3a:15:d5:7c:44:18:21:d2:c9:21:b4:ec:e3:ab:74:b5:d9:c5:
23:c3:ce:ef:fa:b2:12:a7:3f:6c:2f:28:c0:b5:6e:e0:0e:83:
6e:26:49:82:6d:89:b7:82:0c:e0:2c:36:94:45:d1:1a:17:00:
8b:ee:7f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 22:56:32 2025 by rpki-client