Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AdMd3irSs8HSAy0k9FdB9gC2AEI.roa
File: AdMd3irSs8HSAy0k9FdB9gC2AEI.roa (raw, json)
Hash identifier: AVUR+/qZTDWopfdwrtSJp0t9Vb84bZtCxQiiq5rsO8w=
Subject key identifier: 01:D3:1D:DE:2A:D2:B3:C1:D2:03:2D:24:F4:57:41:F6:00:B6:00:42
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198E4E5D982E357B005386993AECC0AA597
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AdMd3irSs8HSAy0k9FdB9gC2AEI.roa
Signing time: Tue 26 Aug 2025 05:42:05 +0000
ROA not before: Tue 26 Aug 2025 05:42:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203446
IP address blocks: 151.243.116.0/24 maxlen: 24
151.247.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 13:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e4:e5:d9:82:e3:57:b0:05:38:69:93:ae:cc:0a:a5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 26 05:42:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01d31dde2ad2b3c1d2032d24f45741f600b60042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:49:56:bf:ad:ae:3a:c8:12:62:dc:62:d9:4a:
3b:e9:74:fe:5c:9f:2c:f4:b3:c3:d8:0d:15:81:fe:
ea:80:c4:48:57:c8:72:e8:57:2b:ce:a0:65:61:c0:
ed:af:53:2b:f7:18:22:12:5f:fa:f1:1a:8e:c9:b7:
d1:94:2c:51:2c:30:95:c3:ec:3c:e1:ab:33:d3:76:
7b:fc:49:eb:d6:59:de:2b:3f:45:d8:4b:1f:4e:94:
7c:be:48:b0:c8:75:08:74:f0:f1:62:ec:d6:c1:0e:
e1:4c:5e:ce:52:85:0b:b7:70:df:f5:ba:fa:bb:93:
70:b1:ae:f6:de:47:34:fa:93:fe:39:6b:9e:3e:2c:
11:ca:84:ab:d7:92:8e:4f:d8:a6:59:ed:08:52:ea:
ce:43:d6:fc:19:b4:18:ba:82:8d:08:59:58:df:1e:
87:4b:73:b0:c4:06:0a:75:35:d7:19:b3:7f:94:92:
6a:b9:e5:41:7a:df:5f:97:d0:b6:f0:09:91:7a:e4:
63:ba:36:c0:e9:03:fa:ae:02:f7:6b:2d:64:10:62:
69:45:52:31:62:3e:76:99:6d:b0:af:60:d5:94:0c:
12:94:44:f2:f6:4b:13:76:d1:4b:e8:b9:cc:be:ad:
e6:e7:f9:02:42:7b:63:76:da:38:51:6c:98:2a:6a:
86:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D3:1D:DE:2A:D2:B3:C1:D2:03:2D:24:F4:57:41:F6:00:B6:00:42
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AdMd3irSs8HSAy0k9FdB9gC2AEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.116.0/24
151.247.207.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a2:d3:49:46:fa:b5:88:ee:a6:76:87:0a:f1:38:ca:a3:43:
11:5b:30:65:ea:28:1d:c6:42:39:c7:eb:73:4e:f5:ba:76:f8:
47:09:9f:4b:db:16:79:bc:eb:35:aa:50:7a:00:ab:bb:af:58:
df:6a:cb:93:34:b3:e2:dc:6c:ee:b5:1c:36:97:1f:bd:1f:93:
73:77:e2:81:4b:06:42:dc:ad:fe:e0:17:dd:f3:26:52:3d:c2:
c4:b5:43:2c:d5:f7:ca:a7:fd:2e:01:50:98:da:71:c8:09:6c:
b0:69:88:08:b6:db:23:6d:a9:1b:4c:d5:be:4e:8a:2a:0c:ef:
c6:5a:81:f8:d0:54:1d:94:ed:ef:af:d3:f1:56:87:03:ce:6f:
2d:92:53:44:f8:9a:59:3b:02:6b:de:b3:e9:19:ec:fa:8d:98:
68:fe:39:3a:5b:2b:06:21:be:4e:14:2d:23:c5:d6:be:30:81:
3b:7f:a4:e2:60:f1:08:44:b3:83:78:07:1d:27:00:7f:81:f0:
47:4e:ac:b3:c3:11:f0:26:7e:70:3d:80:a2:9a:4d:3f:b7:e5:
84:91:d1:e2:46:7e:97:d6:fb:f5:e1:bb:ff:96:43:4a:d5:de:
ec:b6:c4:eb:d0:35:f9:76:5f:e7:0f:ad:d5:62:f8:19:f2:21:
bd:35:1e:b1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZjk5dmC41ewBThpk67MCqWXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwODI2MDU0MjA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWQzMWRkZTJhZDJiM2MxZDIwMzJkMjRmNDU3NDFmNjAwYjYwMDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0lWv62uOsgSYtxi2Uo76XT+XJ8s
9LPD2A0Vgf7qgMRIV8hy6FcrzqBlYcDtr1Mr9xgiEl/68RqOybfRlCxRLDCVw+w8
4asz03Z7/Enr1lneKz9F2EsfTpR8vkiwyHUIdPDxYuzWwQ7hTF7OUoULt3Df9br6
u5Nwsa723kc0+pP+OWuePiwRyoSr15KOT9imWe0IUurOQ9b8GbQYuoKNCFlY3x6H
S3OwxAYKdTXXGbN/lJJqueVBet9fl9C28AmReuRjujbA6QP6rgL3ay1kEGJpRVIx
Yj52mW2wr2DVlAwSlETy9ksTdtFL6LnMvq3m5/kCQntjdto4UWyYKmqG5QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAHTHd4q0rPB0gMtJPRXQfYAtgBCMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvQWRNZDNpclNzOEhTQXkwazlGZEI5Z0MyQUVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/N0AwQA
l/fPMA0GCSqGSIb3DQEBCwUAA4IBAQBwotNJRvq1iO6mdocK8TjKo0MRWzBl6igd
xkI5x+tzTvW6dvhHCZ9L2xZ5vOs1qlB6AKu7r1jfasuTNLPi3GzutRw2lx+9H5Nz
d+KBSwZC3K3+4Bfd8yZSPcLEtUMs1ffKp/0uAVCY2nHICWywaYgIttsjbakbTNW+
TooqDO/GWoH40FQdlO3vr9PxVocDzm8tklNE+JpZOwJr3rPpGez6jZho/jk6WysG
Ib5OFC0jxda+MIE7f6TiYPEIRLODeAcdJwB/gfBHTqyzwxHwJn5wPYCimk0/t+WE
kdHiRn6X1vv14bv/lkNK1d7stsTr0DX5dl/nD63VYvgZ8iG9NR6x
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:34:47 2025 by rpki-client