Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Pz5MH7kt9Pw5n-4_YirDNtEAGWM.roa
File: Pz5MH7kt9Pw5n-4_YirDNtEAGWM.roa (raw, json)
Hash identifier: +Jj7DoezQuJ7WcXRMo+R31iHwrTVw+lH24zm2gKPdwU=
Subject key identifier: 3F:3E:4C:1F:B9:2D:F4:FC:39:9F:EE:3F:62:2A:C3:36:D1:00:19:63
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01994168E4F0F487A740F66DA41DB6A29591
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Pz5MH7kt9Pw5n-4_YirDNtEAGWM.roa
Signing time: Sat 13 Sep 2025 04:50:17 +0000
ROA not before: Sat 13 Sep 2025 04:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12027
IP address blocks: 151.247.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 17:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:41:68:e4:f0:f4:87:a7:40:f6:6d:a4:1d:b6:a2:95:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 13 04:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f3e4c1fb92df4fc399fee3f622ac336d1001963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3d:7e:a8:df:4b:68:09:3f:3d:e2:a9:73:31:
78:5b:01:7f:3e:8d:23:da:a7:b7:98:92:62:0f:7d:
ed:7a:b0:77:41:13:8d:7b:9f:c2:b3:97:7d:eb:1a:
84:a5:6c:ab:30:34:24:e4:b5:6d:70:fe:c5:29:75:
da:0a:e1:65:68:00:13:a9:dd:85:e5:1e:4c:71:a8:
b2:00:67:26:70:7a:58:f2:68:a9:b2:da:97:60:53:
9a:79:58:f1:81:4f:1a:24:0a:40:10:34:85:7c:f7:
8a:4e:30:f5:06:d0:79:d4:21:38:83:fe:df:56:68:
e3:6e:08:f2:7a:8b:94:7f:1b:fb:29:c2:f5:cc:b9:
65:ad:cf:73:8e:45:98:67:f6:1f:45:cb:85:e2:be:
0a:01:43:43:28:7a:91:0d:cc:1c:66:dd:d3:09:c3:
cd:d5:9f:aa:c5:86:12:d6:36:50:e3:7d:58:8f:a9:
c2:a2:6d:e4:44:ef:10:30:2e:06:a3:81:8b:be:3a:
4f:01:21:fd:e0:6a:ec:6e:c0:88:20:8c:30:ba:a5:
ec:5d:0d:db:96:64:24:01:d0:ac:11:1c:00:63:fb:
81:71:25:81:84:03:53:45:88:be:e4:1c:bb:30:55:
8e:81:4a:26:02:b9:87:4c:10:a5:d4:b3:f7:96:e3:
72:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3E:4C:1F:B9:2D:F4:FC:39:9F:EE:3F:62:2A:C3:36:D1:00:19:63
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Pz5MH7kt9Pw5n-4_YirDNtEAGWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.166.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:ef:35:4d:4f:0d:7d:d2:a8:87:6c:df:c7:71:cc:04:c2:62:
0f:8e:db:fa:28:16:20:1e:78:32:8d:35:e6:60:72:f5:8d:c0:
94:c1:d4:10:f3:2d:79:b0:b1:28:20:00:ca:c5:f4:04:34:60:
9d:60:14:29:04:8a:20:2b:62:c5:9a:49:00:b2:35:82:db:ce:
e6:ba:bd:5a:33:2c:b8:3f:52:19:2e:2d:eb:7f:85:32:0e:b8:
cf:21:0b:3d:ce:69:60:9a:57:c4:39:ce:9f:0d:66:b1:e0:5f:
6f:0a:33:2f:b0:f1:a1:25:c1:bd:34:6e:82:3f:4e:51:3f:51:
5c:88:2c:5c:d7:d7:99:0a:19:64:a4:f3:d5:e1:da:b8:2a:96:
c8:4d:30:b7:ee:44:9f:09:a6:1b:5c:8e:e1:49:4b:e1:15:2e:
dd:d9:25:66:f1:10:10:69:52:99:5e:39:5a:c2:bf:f4:53:85:
41:39:66:ee:cf:e1:7f:c9:8c:59:af:3c:9c:23:a1:b5:d2:e4:
19:3f:80:15:e8:92:7b:2a:6a:f5:8b:e4:c4:ff:7f:3a:d3:03:
64:06:b2:24:70:c9:c8:35:b0:07:da:0f:e2:1d:8c:f2:2b:81:
1a:8f:0a:6a:e1:dd:bd:07:89:b4:0b:a0:a0:f8:9c:c4:a3:5c:
b4:17:55:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 23:50:58 2025 by rpki-client