Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DeTXyJQ2Yg28sbYVkHxPI-Uu-k0.roa
File: DeTXyJQ2Yg28sbYVkHxPI-Uu-k0.roa (raw, json)
Hash identifier: gJeyZ+AH3Mj31rXoubRCKy1trzRlM12QPW1XSm+05SE=
Subject key identifier: 0D:E4:D7:C8:94:36:62:0D:BC:B1:B6:15:90:7C:4F:23:E5:2E:FA:4D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A06BF7D66AB1A0A3D3CCCE67BB38CF936
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DeTXyJQ2Yg28sbYVkHxPI-Uu-k0.roa
Signing time: Tue 21 Oct 2025 12:30:04 +0000
ROA not before: Tue 21 Oct 2025 12:30:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205441
IP address blocks: 151.247.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:bf:7d:66:ab:1a:0a:3d:3c:cc:e6:7b:b3:8c:f9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 21 12:30:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0de4d7c89436620dbcb1b615907c4f23e52efa4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:4d:cd:b5:3e:a9:28:ae:32:e7:8c:70:1c:
5f:c0:2c:fb:74:30:3c:6c:45:d0:c1:d9:1f:ab:bf:
1c:e9:06:3e:f3:7a:85:8a:45:b6:10:53:c2:dd:5f:
2a:50:16:d3:89:96:c5:0a:87:dc:0a:7c:c4:43:1b:
eb:1b:26:33:a3:c0:ae:24:41:ab:8b:88:29:81:a6:
36:c5:9a:8c:80:bd:ac:25:1e:28:55:a8:5b:18:6a:
4c:56:5f:c9:76:0a:ea:8c:1e:e5:a6:57:e0:4f:0b:
d6:01:e8:2a:d8:29:10:c2:c5:67:ae:3a:18:f1:fa:
6c:4a:80:50:3c:83:e4:0e:93:d9:d1:5c:61:e9:43:
2e:31:a1:c9:6c:c7:5d:a2:98:02:5e:ea:b1:bb:40:
bf:dc:2d:15:1f:2b:84:21:7f:0d:ac:9d:1b:6a:13:
79:bc:b7:0d:38:b5:ff:42:c1:8b:fe:63:d8:38:6a:
93:22:bf:7e:bb:1b:4d:4e:99:88:ba:32:b8:d2:85:
10:d1:f7:77:85:63:68:55:3e:1e:58:cc:1c:e5:e6:
0e:9f:55:f0:48:0f:99:56:21:1d:d1:88:d3:86:d7:
32:b8:20:49:c3:c6:cf:4e:85:55:a1:36:23:36:0b:
19:86:8b:0b:9e:06:0c:68:ce:18:e0:ec:f9:16:a6:
b9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E4:D7:C8:94:36:62:0D:BC:B1:B6:15:90:7C:4F:23:E5:2E:FA:4D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DeTXyJQ2Yg28sbYVkHxPI-Uu-k0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.210.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:33:ab:f0:2a:63:a3:6c:b8:9c:13:14:37:83:55:20:b0:cc:
56:0e:4f:12:09:4a:d4:dc:e9:ac:14:c4:f6:bc:00:9a:af:a4:
e9:ed:80:e7:8d:0c:2f:92:83:4b:36:13:54:47:46:bb:25:79:
c9:b7:10:33:69:22:00:73:f9:84:5c:1e:e1:16:f7:7c:2a:4a:
1d:51:8c:4a:b8:d9:d3:a5:9d:c2:a6:50:c3:35:5f:ff:e7:e0:
61:b6:3e:34:dd:40:c0:e7:96:8e:e8:f4:d1:f8:ec:95:51:83:
94:97:44:04:7d:73:b3:fd:32:6e:5f:be:40:15:7c:a5:88:8d:
0f:82:16:2a:df:cc:c7:79:be:75:30:08:eb:4f:95:3f:cd:9e:
bc:b1:4b:82:c5:9b:bd:0e:55:64:86:2b:f3:c8:80:97:5f:2d:
81:be:66:5a:fc:7c:da:bc:fa:05:c6:20:85:eb:99:b6:14:35:
6e:c6:46:4e:7e:27:ce:bf:b6:19:01:75:69:4d:c5:11:be:af:
e5:02:02:4e:59:16:d6:7f:79:fd:95:c3:c5:a6:b6:a3:df:5c:
db:51:95:e8:7a:16:d4:d1:fd:d7:ab:4c:e9:c8:d7:28:a8:f0:
b7:59:34:11:a2:3c:4a:5b:4c:8c:95:b9:72:08:04:e7:16:2d:
30:bc:0a:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZoGv31mqxoKPTzM5nuzjPk2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUxMDIxMTIzMDA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGU0ZDdjODk0MzY2MjBkYmNiMWI2MTU5MDdjNGYyM2U1MmVmYTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJVNzbU+qSiuMueMcBxfwCz7dDA8
bEXQwdkfq78c6QY+83qFikW2EFPC3V8qUBbTiZbFCofcCnzEQxvrGyYzo8CuJEGr
i4gpgaY2xZqMgL2sJR4oVahbGGpMVl/JdgrqjB7lplfgTwvWAegq2CkQwsVnrjoY
8fpsSoBQPIPkDpPZ0Vxh6UMuMaHJbMddopgCXuqxu0C/3C0VHyuEIX8NrJ0bahN5
vLcNOLX/QsGL/mPYOGqTIr9+uxtNTpmIujK40oUQ0fd3hWNoVT4eWMwc5eYOn1Xw
SA+ZViEd0YjThtcyuCBJw8bPToVVoTYjNgsZhosLngYMaM4Y4Oz5Fqa5uwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA3k18iUNmINvLG2FZB8TyPlLvpNMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvRGVUWHlKUTJZZzI4c2JZVmtIeFBJLVV1LWswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/fSMA0G
CSqGSIb3DQEBCwUAA4IBAQCrM6vwKmOjbLicExQ3g1UgsMxWDk8SCUrU3OmsFMT2
vACar6Tp7YDnjQwvkoNLNhNUR0a7JXnJtxAzaSIAc/mEXB7hFvd8KkodUYxKuNnT
pZ3CplDDNV//5+Bhtj403UDA55aO6PTR+OyVUYOUl0QEfXOz/TJuX75AFXyliI0P
ghYq38zHeb51MAjrT5U/zZ68sUuCxZu9DlVkhivzyICXXy2BvmZa/HzavPoFxiCF
65m2FDVuxkZOfifOv7YZAXVpTcURvq/lAgJOWRbWf3n9lcPFpraj31zbUZXoehbU
0f3Xq0zpyNcoqPC3WTQRojxKW0yMlblyCATnFi0wvApm
-----END CERTIFICATE-----
Generated at Sun Oct 26 04:12:11 2025 by rpki-client