Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BDRX0uvTwX3HOv96Uzbx6WknsqU.roa
File: BDRX0uvTwX3HOv96Uzbx6WknsqU.roa (raw, json)
Hash identifier: o05KY1U2s9ap+3L4ndiPNULnr1QL7Gd237fRHTUMeIY=
Subject key identifier: 04:34:57:D2:EB:D3:C1:7D:C7:3A:FF:7A:53:36:F1:E9:69:27:B2:A5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198E678790CA517960B041895B413471D93
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BDRX0uvTwX3HOv96Uzbx6WknsqU.roa
Signing time: Tue 26 Aug 2025 13:01:51 +0000
ROA not before: Tue 26 Aug 2025 13:01:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213784
IP address blocks: 151.246.40.0/22 maxlen: 22
151.246.44.0/22 maxlen: 22
151.246.132.0/22 maxlen: 22
151.246.140.0/22 maxlen: 22
151.246.148.0/22 maxlen: 22
151.246.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 13:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e6:78:79:0c:a5:17:96:0b:04:18:95:b4:13:47:1d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 26 13:01:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=043457d2ebd3c17dc73aff7a5336f1e96927b2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:39:35:d4:8b:4c:07:53:7b:f4:d1:cb:99:fb:
09:9f:cf:cb:5d:04:a1:88:45:e3:30:82:a5:72:6e:
e0:0c:93:57:e4:78:2d:60:2f:b4:56:d1:85:5b:03:
60:1a:7e:95:53:ed:de:f1:f6:a1:22:2c:d5:8c:13:
8e:f9:1d:8b:54:1e:07:99:c9:9b:d1:5d:e3:25:90:
7f:e6:5f:fa:b1:8a:f5:12:97:69:7e:af:7b:9b:cb:
5f:a1:84:4d:f9:c5:b0:60:98:6c:36:77:e0:ae:2f:
da:4d:62:bc:d0:a8:2b:4a:a2:dd:40:6a:09:74:bf:
4b:de:d2:62:8c:7a:3c:be:87:2e:01:56:41:12:de:
c0:b9:22:28:0c:bc:bc:59:94:c2:f1:c4:84:5d:80:
e1:73:c4:98:d4:64:f8:ea:87:73:ca:ca:e0:7a:d4:
8b:61:bb:57:76:77:75:70:7c:2e:5b:c1:3e:38:e5:
45:c1:ad:15:66:3b:63:b1:f7:ec:87:da:6b:77:1a:
49:de:79:9e:61:dc:53:b1:c0:e0:3a:d0:c7:46:a2:
ff:33:43:fa:82:af:a5:97:35:06:09:1d:5d:18:0c:
ec:0c:03:77:fa:8e:e2:a1:9d:04:9f:ee:5d:12:76:
d9:ad:05:19:aa:1e:f1:27:4c:b3:d3:43:00:52:ae:
37:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:34:57:D2:EB:D3:C1:7D:C7:3A:FF:7A:53:36:F1:E9:69:27:B2:A5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BDRX0uvTwX3HOv96Uzbx6WknsqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.40.0/21
151.246.132.0/22
151.246.140.0/22
151.246.148.0/22
151.246.156.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:4c:36:a2:04:06:60:70:b4:8a:dd:41:37:6f:6b:71:ee:1f:
7d:d6:6a:df:35:f3:bf:f0:cc:05:a7:a1:96:f3:33:1a:a6:b1:
6f:1c:42:ce:05:1e:56:09:a0:0b:48:67:b2:70:c8:9d:68:44:
2a:50:8c:bf:e4:e1:32:33:64:03:ac:3a:a4:b7:cb:76:9e:44:
1f:98:e8:25:dc:5b:83:9c:46:06:2e:16:8d:00:9f:7a:6a:5f:
8f:d1:60:70:d9:78:f4:d3:be:31:c8:ad:85:cd:3b:e3:5c:a0:
87:f7:bc:3c:ed:f5:11:fd:d3:df:1b:d3:e0:67:02:6e:53:17:
31:48:13:7c:78:f4:a4:46:87:f2:92:a0:48:1e:83:cf:54:2e:
03:88:83:97:24:72:de:80:fc:6b:1c:ac:bb:77:c6:cf:c9:17:
29:fe:1e:5b:0b:af:c3:3e:6c:69:50:ff:bf:1d:7b:43:3a:8b:
77:1a:f0:a8:d2:18:74:d3:d6:8b:e2:88:3c:9d:4d:ac:2c:f5:
69:45:0b:e5:75:a9:69:86:16:c7:51:1c:7b:12:6e:a7:f8:85:
22:71:4a:60:cd:6a:ed:7b:ef:7b:ee:34:c6:fe:2d:9f:87:71:
08:0a:0d:fe:94:2e:ee:18:e3:a4:51:a4:6c:3a:4f:25:40:6f:
51:7d:81:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:32 2025 by rpki-client