Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KKuYqGmqPiEALQ2mQf8jtdoQ9cM.roa
File: KKuYqGmqPiEALQ2mQf8jtdoQ9cM.roa (raw, json)
Hash identifier: AfMtpp6nc5aPO4fvOjW6MNOdZOSrKVRdu5ZGVmOomdw=
Subject key identifier: 28:AB:98:A8:69:AA:3E:21:00:2D:0D:A6:41:FF:23:B5:DA:10:F5:C3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01987DA8C861403E3C7AF82D24C1470A35E0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KKuYqGmqPiEALQ2mQf8jtdoQ9cM.roa
Signing time: Wed 06 Aug 2025 04:34:29 +0000
ROA not before: Wed 06 Aug 2025 04:34:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 151.242.61.0/24 maxlen: 24
151.244.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 21:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:a8:c8:61:40:3e:3c:7a:f8:2d:24:c1:47:0a:35:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 6 04:34:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28ab98a869aa3e21002d0da641ff23b5da10f5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:e0:7a:bf:1f:4b:e8:50:50:5b:f7:16:57:
38:1c:2b:46:8a:8f:0c:ae:4b:86:0b:85:18:4a:6c:
18:6f:76:5f:c9:35:66:eb:d1:43:e0:02:5e:b1:fc:
47:9c:38:30:13:a8:46:7b:04:64:f5:6b:b2:e8:8f:
c0:7f:1c:d1:da:31:ed:3a:0a:c7:db:35:27:4b:87:
22:3f:dd:35:66:0e:a0:c5:eb:ab:6f:ee:d2:28:58:
26:86:bb:b7:a4:e6:59:26:73:ac:d4:17:4f:6e:55:
24:ef:94:c7:25:83:28:fa:19:d1:f4:17:19:86:40:
04:0a:5c:2f:7a:29:95:37:29:9c:c3:a4:d9:3c:bc:
02:30:ca:3f:f1:e9:7c:fb:b2:93:ef:32:f1:9b:dc:
c5:66:e6:7f:05:fd:be:bf:22:38:8d:18:9f:54:69:
fb:c6:25:54:01:e5:68:f2:a5:d7:3c:26:81:e3:d6:
4c:de:15:d6:1b:74:48:5c:31:7a:80:97:6d:9b:83:
a1:08:44:85:5e:b6:f8:03:9b:52:0f:c8:e6:bf:3c:
77:72:9a:38:ff:91:91:a1:d5:85:ec:36:0f:b4:e3:
7f:52:33:ab:c6:1f:88:bd:13:19:a8:59:1f:4a:1c:
e0:de:75:28:9f:70:e9:b6:61:b8:de:10:d2:3a:34:
e0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AB:98:A8:69:AA:3E:21:00:2D:0D:A6:41:FF:23:B5:DA:10:F5:C3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KKuYqGmqPiEALQ2mQf8jtdoQ9cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.61.0/24
151.244.97.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:32:de:e5:21:e8:76:92:03:6c:e7:c3:fa:46:ff:60:48:af:
0b:e7:35:93:b9:e7:4f:f1:a9:9f:55:eb:e0:14:58:42:97:80:
97:6b:7b:9b:3b:b9:4b:4e:f7:df:6e:73:09:a3:20:c2:81:67:
a1:ff:66:34:51:8b:08:42:86:3d:e0:b0:41:69:a9:c0:b0:cd:
71:25:1c:5c:5c:85:6b:1b:c6:cb:5b:c3:6a:f4:df:69:8f:6f:
33:5c:00:b5:fb:a2:69:a2:2c:9e:18:9d:2e:cc:74:4c:a5:fa:
e0:54:68:08:d6:a2:52:a4:d9:7c:90:7c:e0:e2:aa:aa:1b:55:
e1:fe:aa:d4:ed:22:44:7f:0e:ef:25:7a:45:fb:ba:c0:8c:3f:
86:57:90:27:f2:00:6f:b6:fc:0c:aa:fe:3b:0f:82:2e:a9:fa:
16:82:11:1e:07:7b:20:03:5a:d0:c7:04:13:cd:ae:fa:d8:36:
74:8a:31:77:56:69:d6:15:4f:24:a1:84:79:9b:53:88:6f:4c:
0d:fc:61:b1:12:44:64:1b:62:80:0e:4f:dd:45:71:59:2c:b8:
4c:5c:3c:42:70:41:3e:89:e5:ca:27:c0:0d:67:f8:bc:4c:5f:
f7:d5:a1:8f:f5:7a:c7:70:dd:a9:d3:30:bf:e4:bd:89:bd:7e:
5f:23:6f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:00:09 2025 by rpki-client