Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UW4NxM5WftxZShdzYo_b0qz-pRg.roa
File: UW4NxM5WftxZShdzYo_b0qz-pRg.roa (raw, json)
Hash identifier: m4fIFeqf/rFuBZw8j95PHuXcQdDy4RBBe91ZzN4cDCk=
Subject key identifier: 51:6E:0D:C4:CE:56:7E:DC:59:4A:17:73:62:8F:DB:D2:AC:FE:A5:18
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01994C38878E233B5DCB7A1F90EF80CFE9B6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UW4NxM5WftxZShdzYo_b0qz-pRg.roa
Signing time: Mon 15 Sep 2025 07:13:17 +0000
ROA not before: Mon 15 Sep 2025 07:13:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211826
IP address blocks: 37.202.221.0/24 maxlen: 24
151.242.124.0/24 maxlen: 24
151.243.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4c:38:87:8e:23:3b:5d:cb:7a:1f:90:ef:80:cf:e9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 15 07:13:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=516e0dc4ce567edc594a1773628fdbd2acfea518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:26:85:bd:24:8a:01:92:bc:e6:86:dd:70:
79:5b:32:63:2e:c4:4d:aa:f7:a5:f5:53:f2:e4:c1:
c0:a3:58:1e:df:ed:b3:97:b4:b8:fa:2f:1e:15:b2:
6e:08:f7:47:cd:25:1f:38:6e:54:e6:fa:39:60:c6:
bb:ba:0a:41:d5:9d:77:ce:94:24:7c:4f:44:45:4e:
82:11:72:a6:2a:04:67:6f:7c:b0:2d:69:11:4a:47:
6b:dd:79:b8:bf:bc:4a:a4:89:00:35:f7:1f:9f:57:
05:91:0f:1a:05:c3:1c:38:f0:1d:3c:59:b5:f0:c5:
61:fc:f0:82:79:45:a3:40:91:3a:96:a8:fe:3a:cf:
3a:7e:e3:45:74:25:4c:ce:7c:48:38:f9:f7:0e:1e:
06:37:c4:75:dc:74:a3:54:7c:8d:53:84:00:6d:f9:
03:f9:cc:3e:a0:db:d6:e8:5e:d1:00:fd:4c:51:8b:
3a:ff:ba:9e:86:5d:2c:c1:14:3a:41:36:49:71:2d:
80:10:03:ae:b6:e2:04:23:b9:8a:cd:46:6c:76:6d:
1a:a4:08:54:8f:8a:46:8e:ae:e0:55:a5:9f:95:a5:
67:75:f6:eb:2c:2f:d3:fe:1e:8d:a9:8d:c0:43:83:
a4:00:a6:34:01:f3:ed:fc:8e:22:46:7a:e1:17:8c:
58:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6E:0D:C4:CE:56:7E:DC:59:4A:17:73:62:8F:DB:D2:AC:FE:A5:18
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UW4NxM5WftxZShdzYo_b0qz-pRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.221.0/24
151.242.124.0/24
151.243.83.0/24
Signature Algorithm: sha256WithRSAEncryption
92:8d:77:cd:08:5b:06:22:40:16:5e:a3:62:9c:12:59:4f:8d:
6c:27:9d:e2:e1:5a:b9:4d:4f:aa:57:0e:a5:2c:0f:29:da:cd:
f6:15:46:7c:70:45:79:9c:96:d8:81:cc:09:7c:2c:4d:07:35:
92:43:fe:ff:f9:69:45:70:d4:d1:ac:66:43:36:f6:64:81:f9:
01:c2:d5:f7:3c:92:fd:4e:7e:ed:6f:8f:f1:3b:a9:ec:15:63:
fe:9e:7c:c9:a1:7d:21:97:0e:82:30:d3:05:48:ee:91:73:59:
40:1d:1f:2d:2f:bd:2c:59:ef:83:e6:e2:64:9a:08:26:9c:f4:
c1:10:de:6e:ad:a8:8c:ef:41:c8:af:a0:1b:92:7f:0e:db:dd:
e7:4b:6b:34:ca:a0:19:cb:32:ae:dc:2b:3b:47:0e:12:6a:6f:
c4:95:d6:93:2b:53:82:0e:ae:33:ab:33:9d:69:32:92:69:41:
34:78:62:48:f9:20:72:88:17:e2:70:6e:aa:f3:61:7b:a1:3c:
98:96:b6:ee:0a:ad:4f:d8:40:2e:e7:64:f7:d4:e3:ad:a4:f0:
b0:c8:32:71:9e:c3:7d:ea:76:fd:b8:f1:68:6e:67:6f:56:53:
fe:d1:18:95:ec:a1:fb:fb:0b:5d:5e:e6:4e:3d:b8:6b:90:d1:
82:b9:3c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:20:56 2025 by rpki-client