Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UETrK6VqOxw4jGMkS1Z187jMWic.roa
File: UETrK6VqOxw4jGMkS1Z187jMWic.roa (raw, json)
Hash identifier: 03+kofDFcXsGF/nmtZKLm8GXmPV5HijB5Iyd2Y48ewI=
Subject key identifier: 50:44:EB:2B:A5:6A:3B:1C:38:8C:63:24:4B:56:75:F3:B8:CC:5A:27
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019962C99DCB872D46ED3DE9ED6ADCFAB65F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UETrK6VqOxw4jGMkS1Z187jMWic.roa
Signing time: Fri 19 Sep 2025 16:23:24 +0000
ROA not before: Fri 19 Sep 2025 16:23:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61254
IP address blocks: 151.241.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Oct 2025 05:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:62:c9:9d:cb:87:2d:46:ed:3d:e9:ed:6a:dc:fa:b6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 19 16:23:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5044eb2ba56a3b1c388c63244b5675f3b8cc5a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:20:34:a6:bc:4f:39:37:0a:ba:d2:98:10:73:
f5:75:a3:a1:6c:18:43:78:40:59:d9:b3:f7:28:4f:
94:58:a7:f1:ff:7d:4c:c5:3c:0e:39:e7:6b:d7:72:
00:40:5f:87:6a:1d:cf:51:ab:26:78:3a:51:b0:a0:
ec:59:2a:25:2d:2e:5e:05:30:d1:da:23:91:f1:77:
db:eb:06:d3:8b:e5:55:97:ae:4d:04:96:27:8d:41:
f2:62:5a:10:30:fe:f5:5f:c9:1f:32:be:90:99:86:
bb:52:11:1f:ab:77:2a:2e:59:73:39:9d:78:ad:43:
dc:bf:4a:b9:a6:49:57:21:50:bb:46:52:40:18:2b:
62:e7:e5:d0:ff:60:b9:78:7e:aa:e9:51:95:c0:51:
f5:42:6e:6e:f6:05:77:49:33:ec:1d:41:62:4d:4c:
22:aa:1a:1d:b1:b1:c9:b5:e4:09:e9:a9:c5:75:c1:
d1:3f:a2:5a:36:73:d7:c8:9e:23:a0:0f:95:8b:1f:
4e:04:85:a9:75:a0:62:08:5a:cf:85:49:99:61:c5:
96:4c:62:51:89:2d:93:07:00:c4:db:4c:1c:1f:ad:
ee:5d:76:4e:b7:99:73:4d:2b:2c:e0:18:76:e3:5d:
f2:96:03:45:12:ba:1c:21:0a:82:2e:87:73:20:ac:
02:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:44:EB:2B:A5:6A:3B:1C:38:8C:63:24:4B:56:75:F3:B8:CC:5A:27
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UETrK6VqOxw4jGMkS1Z187jMWic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.11.0/24
Signature Algorithm: sha256WithRSAEncryption
23:a4:a0:d0:f3:a9:d3:5b:75:13:2e:98:00:67:58:4b:35:dd:
08:8c:ef:1e:5c:e1:33:94:74:69:c1:ef:36:e3:78:c5:22:c1:
48:4b:94:7c:3a:06:b5:04:ce:94:7b:f5:10:c1:fc:60:ec:d5:
37:b9:ab:c5:1d:e1:36:b6:e2:1d:9e:6d:97:2b:a6:df:2d:5c:
0c:db:f5:d2:5a:0b:2a:3f:b6:2e:d1:ac:b0:dd:6b:cf:11:d3:
0c:66:6c:b9:71:88:63:c3:1a:a5:98:85:cd:44:a6:77:b5:30:
2b:17:1f:37:4e:77:aa:8c:4e:09:95:65:e7:27:e4:25:ed:ec:
96:30:ad:e5:cf:8e:8f:4d:ef:d5:4c:2d:6d:84:8f:94:77:83:
a4:2f:02:65:c2:87:80:1a:5b:ff:61:fe:58:2e:d2:5d:e6:bd:
a2:36:d9:25:12:77:b8:11:57:8b:97:1c:a5:b2:19:5a:32:20:
65:cc:00:96:6e:82:41:d2:67:8a:4a:4b:63:9b:76:1d:21:27:
f9:a3:e9:e1:94:c1:48:f2:ce:f1:ba:3c:d4:29:43:98:bd:57:
ba:c7:b6:e6:38:c4:1c:a6:3b:6a:ec:e9:b5:cc:79:b2:58:4f:
84:4a:d2:07:fc:f6:82:bd:4f:fd:62:34:ef:10:31:d0:1c:f4:
24:e7:27:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 10:44:25 2025 by rpki-client