Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/X5iB2x1oZi93ktjY_LEjnPsdYTk.roa
File: X5iB2x1oZi93ktjY_LEjnPsdYTk.roa (raw, json)
Hash identifier: BlXd8LtBO4Ula7T9C8u18G4uZ44XlEX059+4SuqhS4g=
Subject key identifier: 5F:98:81:DB:1D:68:66:2F:77:92:D8:D8:FC:B1:23:9C:FB:1D:61:39
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196DCECD7FC186B98C6ABD8195F7EFBA0B0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/X5iB2x1oZi93ktjY_LEjnPsdYTk.roa
Signing time: Sat 17 May 2025 06:27:11 +0000
ROA not before: Sat 17 May 2025 06:27:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138997
IP address blocks: 151.243.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dc:ec:d7:fc:18:6b:98:c6:ab:d8:19:5f:7e:fb:a0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 17 06:27:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f9881db1d68662f7792d8d8fcb1239cfb1d6139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9e:ad:b8:a8:89:3e:c4:26:f0:b1:6e:fa:aa:
aa:66:36:e9:87:03:bf:16:a8:c0:1a:87:44:4f:c4:
3a:08:e7:23:7e:86:16:98:b3:28:5e:d4:31:de:61:
4b:07:c6:30:df:cd:b8:04:bc:f0:cd:84:f1:dc:32:
97:0b:5d:9d:d7:6b:a3:fe:7a:25:bb:c2:49:67:90:
17:22:27:af:6e:56:cb:14:50:df:7f:c3:18:10:3a:
9f:e0:9d:79:9d:78:7b:6f:06:28:c2:51:65:f9:c4:
72:7b:a9:1f:d0:5e:21:98:26:86:d6:ff:b1:f3:10:
65:de:d8:40:f7:49:89:2c:a9:76:57:71:92:aa:b6:
25:63:2a:39:92:bb:6d:5f:fc:b7:1e:3b:21:7f:e0:
8f:7d:86:0b:c1:90:14:b9:91:71:6e:f3:e5:80:79:
0a:63:f2:f9:25:6f:16:83:62:53:3b:9a:6f:9f:30:
2e:38:4d:85:44:69:32:1d:df:ab:ef:12:e4:5c:fe:
f7:51:55:ca:65:07:61:83:17:a6:c0:ee:4d:36:83:
0a:93:0b:02:93:f6:94:6f:22:9e:9f:ef:90:8a:6c:
61:a3:e6:f7:f8:ea:77:0e:c2:e8:e9:62:0a:e7:19:
70:cc:bc:0e:a6:9d:08:99:d4:b7:93:b9:63:09:39:
94:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:98:81:DB:1D:68:66:2F:77:92:D8:D8:FC:B1:23:9C:FB:1D:61:39
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/X5iB2x1oZi93ktjY_LEjnPsdYTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.37.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:70:5c:1a:b0:d5:fe:74:82:d4:65:37:cb:fd:b3:f0:79:d1:
6f:5a:6b:f7:18:fc:0c:c6:9e:7e:41:b4:db:bc:b7:a8:86:62:
dd:ee:9a:e7:3b:3e:03:4c:ca:0c:44:a8:80:0a:f9:8b:b3:16:
11:54:07:c6:87:fb:73:d3:78:60:30:30:2b:4c:7b:10:5f:fb:
ef:b9:13:a4:8f:4a:9d:d9:5b:8c:46:08:2d:f8:e8:e7:42:2f:
7d:aa:f6:b0:8c:9e:a4:81:eb:52:a1:02:f8:80:91:81:c4:ef:
7a:c8:fc:af:43:de:8a:fc:54:82:0b:4b:16:88:de:be:16:8a:
59:64:19:4c:b7:a9:7b:38:86:55:be:83:08:f2:b7:9f:cd:af:
df:8d:09:08:0b:69:6e:0c:f9:72:11:01:ab:b9:93:3e:b3:cd:
c0:43:7e:d1:b3:b4:66:87:16:53:fb:ff:fd:a8:3b:b3:71:a7:
11:68:7e:70:06:4e:1e:41:14:e4:fe:05:3c:e5:dc:e2:ce:35:
c1:f6:ee:26:3b:98:a4:e5:e6:4c:e2:4e:c3:7a:a0:ea:1f:23:
f0:f8:28:79:7c:0d:9e:23:b1:0f:77:43:72:e5:64:09:de:a9:
46:f3:07:fe:73:3b:c4:6f:f4:03:92:7a:02:7b:5a:0e:b8:bb:
2c:5d:be:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbc7Nf8GGuYxqvYGV9++6CwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNTE3MDYyNzExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Zjk4ODFkYjFkNjg2NjJmNzc5MmQ4ZDhmY2IxMjM5Y2ZiMWQ2MTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy56tuKiJPsQm8LFu+qqqZjbphwO/
FqjAGodET8Q6COcjfoYWmLMoXtQx3mFLB8Yw3824BLzwzYTx3DKXC12d12uj/nol
u8JJZ5AXIievblbLFFDff8MYEDqf4J15nXh7bwYowlFl+cRye6kf0F4hmCaG1v+x
8xBl3thA90mJLKl2V3GSqrYlYyo5krttX/y3Hjshf+CPfYYLwZAUuZFxbvPlgHkK
Y/L5JW8Wg2JTO5pvnzAuOE2FRGkyHd+r7xLkXP73UVXKZQdhgxemwO5NNoMKkwsC
k/aUbyKen++Qimxho+b3+Op3DsLo6WIK5xlwzLwOpp0ImdS3k7ljCTmUWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF+YgdsdaGYvd5LY2PyxI5z7HWE5MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvWDVpQjJ4MW9aaTkza3RqWV9MRWpuUHNkWVRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/MlMA0G
CSqGSIb3DQEBCwUAA4IBAQCicFwasNX+dILUZTfL/bPwedFvWmv3GPwMxp5+QbTb
vLeohmLd7prnOz4DTMoMRKiACvmLsxYRVAfGh/tz03hgMDArTHsQX/vvuROkj0qd
2VuMRggt+OjnQi99qvawjJ6kgetSoQL4gJGBxO96yPyvQ96K/FSCC0sWiN6+FopZ
ZBlMt6l7OIZVvoMI8refza/fjQkIC2luDPlyEQGruZM+s83AQ37Rs7RmhxZT+//9
qDuzcacRaH5wBk4eQRTk/gU85dzizjXB9u4mO5ik5eZM4k7DeqDqHyPw+Ch5fA2e
I7EPd0Ny5WQJ3qlG8wf+czvEb/QDknoCe1oOuLssXb6/
-----END CERTIFICATE-----
Generated at Fri Jun 6 06:51:41 2025 by rpki-client