Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UxM12To6i9tDwSqVHlbLqPIbnDw.roa
File: UxM12To6i9tDwSqVHlbLqPIbnDw.roa (raw, json)
Hash identifier: gaKVQ7qe80VPfFF4dFVjjAnS+7xDfB6g9aTVwNrOjEs=
Subject key identifier: 53:13:35:D9:3A:3A:8B:DB:43:C1:2A:95:1E:56:CB:A8:F2:1B:9C:3C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198E4D473DBC9D303A87028BD1CE84F98DC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UxM12To6i9tDwSqVHlbLqPIbnDw.roa
Signing time: Tue 26 Aug 2025 05:23:05 +0000
ROA not before: Tue 26 Aug 2025 05:23:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393942
IP address blocks: 151.242.89.0/24 maxlen: 24
151.243.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 13:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e4:d4:73:db:c9:d3:03:a8:70:28:bd:1c:e8:4f:98:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 26 05:23:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=531335d93a3a8bdb43c12a951e56cba8f21b9c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:55:56:71:62:09:8e:1d:77:a8:44:0c:f5:81:
94:e9:9a:11:ce:fd:d2:97:ce:fc:63:c6:ee:74:5f:
f1:96:a4:dd:d3:1e:9e:4a:8d:18:b4:5d:aa:cd:cf:
15:b9:26:cd:ec:31:eb:9a:cf:79:df:46:d2:24:3f:
43:b7:7b:40:b3:49:11:58:64:5a:65:f1:ee:d3:20:
be:bd:20:40:c9:08:83:27:b5:ef:0f:6a:e5:a4:8f:
a3:22:e8:73:4a:75:25:0a:e5:12:39:47:5e:0e:b0:
7e:18:02:02:56:c9:54:a4:59:0d:69:31:34:33:0c:
08:72:7c:85:5a:d0:f4:53:11:67:14:16:1c:53:8a:
92:9a:06:12:fa:78:a5:d1:55:e7:17:48:5e:e3:88:
cd:17:b1:a4:d9:47:58:a7:af:e7:1a:1f:78:b5:e9:
69:4e:0c:19:ac:55:4c:07:56:2f:39:a2:c2:80:0a:
42:38:ab:34:59:09:7c:c2:0f:39:27:a9:40:5b:70:
76:0b:65:41:bf:8a:18:43:85:ea:b5:ef:ca:a8:a7:
e0:cb:40:78:20:9f:16:c4:ab:7a:b5:e7:6d:0c:e0:
60:07:0a:3a:9c:b4:dd:78:ab:ec:1d:1e:cf:ba:24:
ba:90:3d:12:42:54:42:e7:4c:eb:d0:a2:23:06:41:
a2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:13:35:D9:3A:3A:8B:DB:43:C1:2A:95:1E:56:CB:A8:F2:1B:9C:3C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UxM12To6i9tDwSqVHlbLqPIbnDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.89.0/24
151.243.99.0/24
Signature Algorithm: sha256WithRSAEncryption
84:87:6f:78:08:d2:a5:72:b3:7c:70:5d:57:68:8e:94:35:36:
31:23:37:6b:2a:76:6d:28:59:30:01:c9:96:9c:a7:e5:d9:9f:
b0:15:58:3d:2b:84:0d:1a:ad:bb:6a:08:17:66:bf:d5:18:4d:
8e:ce:d8:0d:7c:08:ef:a8:70:e2:91:dd:f7:36:ec:ec:6a:6d:
9b:a3:bc:8d:f8:4b:11:fe:8d:20:60:c0:99:31:de:9d:75:67:
15:45:d2:5a:00:a7:57:a9:05:7b:49:3b:17:ca:89:80:57:8f:
f6:cf:96:3f:26:53:6e:3c:09:2c:91:7a:20:4e:c3:e3:bf:27:
83:58:67:0e:90:43:8f:78:43:84:59:74:1f:05:2d:42:13:82:
b8:de:07:5b:9d:29:a3:8c:d4:ce:4f:e2:0d:3b:7c:88:bc:52:
5f:38:44:81:ad:5a:a1:16:8c:a5:29:1a:3d:2e:60:44:2c:a8:
fb:50:8b:5d:eb:bc:7e:9f:67:dc:c1:d5:08:ce:f9:7b:14:3c:
59:3c:a3:66:f2:4c:f1:aa:71:15:b7:95:95:0e:7e:8d:13:ef:
1f:3f:d6:ae:0d:b1:84:1a:58:37:14:17:c8:4a:2d:df:7c:53:
6d:ce:f9:e8:e5:d3:de:43:74:f8:3a:88:f4:34:c7:78:b7:90:
88:5e:da:e2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZjk1HPbydMDqHAovRzoT5jcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwODI2MDUyMzA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzEzMzVkOTNhM2E4YmRiNDNjMTJhOTUxZTU2Y2JhOGYyMWI5YzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1VWcWIJjh13qEQM9YGU6ZoRzv3S
l878Y8budF/xlqTd0x6eSo0YtF2qzc8VuSbN7DHrms9530bSJD9Dt3tAs0kRWGRa
ZfHu0yC+vSBAyQiDJ7XvD2rlpI+jIuhzSnUlCuUSOUdeDrB+GAICVslUpFkNaTE0
MwwIcnyFWtD0UxFnFBYcU4qSmgYS+nil0VXnF0he44jNF7Gk2UdYp6/nGh94telp
TgwZrFVMB1YvOaLCgApCOKs0WQl8wg85J6lAW3B2C2VBv4oYQ4Xqte/KqKfgy0B4
IJ8WxKt6tedtDOBgBwo6nLTdeKvsHR7PuiS6kD0SQlRC50zr0KIjBkGiCQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFMTNdk6OovbQ8EqlR5Wy6jyG5w8MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvVXhNMTJUbzZpOXREd1NxVkhsYkxxUElibkR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/JZAwQA
l/NjMA0GCSqGSIb3DQEBCwUAA4IBAQCEh294CNKlcrN8cF1XaI6UNTYxIzdrKnZt
KFkwAcmWnKfl2Z+wFVg9K4QNGq27aggXZr/VGE2OztgNfAjvqHDikd33Nuzsam2b
o7yN+EsR/o0gYMCZMd6ddWcVRdJaAKdXqQV7STsXyomAV4/2z5Y/JlNuPAkskXog
TsPjvyeDWGcOkEOPeEOEWXQfBS1CE4K43gdbnSmjjNTOT+INO3yIvFJfOESBrVqh
FoylKRo9LmBELKj7UItd67x+n2fcwdUIzvl7FDxZPKNm8kzxqnEVt5WVDn6NE+8f
P9auDbGEGlg3FBfISi3ffFNtzvno5dPeQ3T4Ooj0NMd4t5CIXtri
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:44:16 2025 by rpki-client