Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IijWRwQcuvESn5Fmf6pghePQpKE.roa
File: IijWRwQcuvESn5Fmf6pghePQpKE.roa (raw, json)
Hash identifier: sziZrocQAfoZrUeGS1ILYxY3AqDK4U6ZTZi7ishG4iU=
Subject key identifier: 22:28:D6:47:04:1C:BA:F1:12:9F:91:66:7F:AA:60:85:E3:D0:A4:A1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01994121D0A436271DBAA0CE6171BF3E30A5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IijWRwQcuvESn5Fmf6pghePQpKE.roa
Signing time: Sat 13 Sep 2025 03:32:39 +0000
ROA not before: Sat 13 Sep 2025 03:32:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212336
IP address blocks: 151.241.88.0/24 maxlen: 24
151.242.11.0/24 maxlen: 24
151.242.188.0/23 maxlen: 24
151.247.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Sep 2025 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:41:21:d0:a4:36:27:1d:ba:a0:ce:61:71:bf:3e:30:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 13 03:32:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2228d647041cbaf1129f91667faa6085e3d0a4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cf:e3:fd:2e:89:4a:0f:31:42:38:6a:dd:3b:
4c:3e:d9:3c:2c:66:55:f6:6d:db:2e:9e:99:db:da:
9d:40:8f:2a:ea:c6:63:df:1b:19:c7:01:03:58:57:
f3:2e:aa:54:68:60:b3:ac:bb:94:8f:72:85:3a:61:
4a:b7:bf:80:fa:b7:c8:9e:c7:e3:61:7b:b9:d1:fe:
d1:7b:5c:c7:17:79:08:11:0c:86:fc:53:37:46:b6:
67:b3:70:21:3c:45:67:2e:fb:46:12:ec:68:4e:45:
fa:1f:aa:a3:31:93:42:17:0c:8f:59:d7:b8:67:3e:
b1:54:a1:0a:cd:6f:90:0d:0f:4f:ed:24:2b:83:e0:
44:db:2e:ac:d9:6b:cb:3e:30:59:97:5d:af:e9:3f:
2f:c2:65:1f:8a:0f:83:69:7a:af:bb:3f:ff:e3:15:
df:85:75:df:8d:c6:94:0c:7d:02:7e:eb:ab:ed:20:
27:84:c9:13:cf:c8:2f:54:70:0c:5a:7e:82:fb:81:
63:4e:79:54:cb:56:54:c8:79:4f:4d:73:7d:9a:b8:
39:5b:8f:13:1a:fa:4d:d4:d4:89:9e:a9:bb:70:04:
16:8a:e3:06:41:2d:a4:28:33:5f:46:ed:51:f9:d8:
6c:dc:ab:b7:4a:a0:e8:6c:5a:ea:21:a9:55:6e:b1:
2f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:28:D6:47:04:1C:BA:F1:12:9F:91:66:7F:AA:60:85:E3:D0:A4:A1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IijWRwQcuvESn5Fmf6pghePQpKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.88.0/24
151.242.11.0/24
151.242.188.0/23
151.247.246.0/24
Signature Algorithm: sha256WithRSAEncryption
31:e1:86:6d:11:9b:b9:da:9e:de:e9:b7:70:49:bc:13:a0:ba:
60:74:66:56:ba:bb:43:76:43:28:0a:12:05:ea:77:f2:38:a9:
26:2a:54:c2:b6:15:c8:4d:7c:d2:a6:3a:a2:ab:83:ee:59:d6:
39:06:19:eb:f6:66:24:38:a8:bc:98:14:c1:1d:53:3c:4c:1c:
76:2d:e6:19:ff:39:21:aa:53:8d:98:8d:25:f0:7a:18:c2:1a:
14:82:4e:38:b6:00:98:37:b1:ab:bc:84:9d:bf:8e:b7:01:eb:
57:29:4f:1e:38:5c:53:7a:41:75:4d:26:d2:d8:b0:c8:83:cf:
e3:96:ca:a1:33:e3:bd:20:17:e7:b6:f8:42:53:36:72:43:0d:
c3:e9:69:c8:9d:e5:0c:c3:e7:c4:0a:30:00:ab:e0:d9:c4:4a:
2e:3a:46:e5:2c:68:bb:12:24:b5:a7:6d:b5:26:26:5a:d1:06:
92:3d:8c:cd:bb:6c:1b:97:08:4b:01:40:89:3b:dc:5e:0c:f8:
c0:d8:07:fb:22:f1:e4:7e:5d:a1:d8:ab:fb:4a:e6:56:b8:b6:
db:9e:dc:17:fc:a4:b1:7f:fd:61:73:d9:a3:bf:de:92:40:b3:
24:bc:98:24:ea:4f:1c:8e:2d:98:95:0f:87:19:b5:46:82:6d:
38:1c:67:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 15:18:51 2025 by rpki-client