Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Z7wxUfiOn18OdDUQiEAqAnDpVGw.roa
File: Z7wxUfiOn18OdDUQiEAqAnDpVGw.roa (raw, json)
Hash identifier: hRPoC3R1+KEGJL9udppYO0VAYZ6hSMUlkRujILb7dio=
Subject key identifier: 67:BC:31:51:F8:8E:9F:5F:0E:74:35:10:88:40:2A:02:70:E9:54:6C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019905F578684D8E83F27936A57EAF6CB307
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Z7wxUfiOn18OdDUQiEAqAnDpVGw.roa
Signing time: Mon 01 Sep 2025 15:46:37 +0000
ROA not before: Mon 01 Sep 2025 15:46:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207363
IP address blocks: 151.245.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 13:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:05:f5:78:68:4d:8e:83:f2:79:36:a5:7e:af:6c:b3:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 1 15:46:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67bc3151f88e9f5f0e74351088402a0270e9546c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:eb:43:a0:c0:af:df:93:96:8e:2a:99:6e:
f8:35:12:cc:01:8f:31:4c:ac:26:a3:00:7b:02:98:
e2:20:59:6f:fb:7d:ce:ba:82:b9:0d:e3:a5:8a:d4:
04:f2:e0:3d:93:16:93:a8:e0:cc:18:6a:77:1e:df:
d4:c3:cb:6e:ac:5d:fd:33:04:d3:eb:f5:5a:ee:aa:
52:f1:d7:4a:b8:d3:fe:c8:46:93:88:bc:20:8d:41:
a9:9c:82:2f:d4:99:85:ea:4b:87:6d:33:5b:75:d3:
db:51:8e:19:9b:ce:4d:6b:b1:7b:9a:55:df:81:03:
15:5c:8f:6d:1e:08:33:d8:32:fc:12:46:20:df:12:
51:5c:9c:fd:fd:cf:9c:1f:6d:f3:ed:39:31:d5:4c:
b7:14:c9:c1:68:b2:1a:b2:10:9f:6b:bc:1c:84:6c:
8c:f5:1b:ec:e6:ba:82:83:66:a8:7e:8b:bb:67:78:
a8:b2:2f:a0:5a:4c:02:43:e1:4f:a4:59:bd:27:16:
fa:f6:cf:f8:b0:9c:09:8c:ce:0b:3c:5d:14:38:d6:
01:b2:e3:d0:36:b0:43:9d:05:9b:ae:8c:1d:07:35:
de:65:f3:ee:31:5c:65:d0:bd:13:86:bd:62:70:9c:
87:93:4c:ea:9b:6e:5a:29:16:67:77:a2:69:38:81:
4a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BC:31:51:F8:8E:9F:5F:0E:74:35:10:88:40:2A:02:70:E9:54:6C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Z7wxUfiOn18OdDUQiEAqAnDpVGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.3.0/24
Signature Algorithm: sha256WithRSAEncryption
01:96:62:35:f6:4e:f6:37:44:39:4c:11:f0:2a:32:6f:81:24:
5c:89:a0:3c:d5:92:82:48:f5:f2:89:e4:ed:46:a8:fb:ef:fe:
71:1a:72:1f:cc:07:d3:91:3f:3f:3f:74:c1:fb:18:33:03:4c:
e6:03:5c:0e:c7:1f:88:74:00:d0:37:8f:6f:0f:a8:21:63:f8:
ff:1e:d1:24:72:57:74:88:ba:39:e7:2b:42:76:ac:b9:64:95:
60:96:f3:29:81:e9:79:fc:9e:bd:32:62:03:61:94:b5:a5:38:
3f:90:4a:87:88:18:a6:ad:60:b9:21:69:46:49:0c:dd:ff:d2:
08:4c:28:65:d2:a9:cb:15:c0:1e:cb:c3:55:5f:9b:f8:79:6a:
19:34:c9:b3:7c:a9:a0:52:0d:9f:4e:2d:95:84:ae:3e:4f:bf:
d7:dd:2d:51:bd:e7:1c:32:4f:3b:06:5b:ec:f9:26:fa:14:e9:
44:a4:1e:de:49:81:c1:65:52:99:43:b1:46:cd:26:e1:45:96:
9c:11:c2:ef:2e:25:b1:09:5b:0d:ce:87:2f:ca:48:53:f0:c7:
7c:bb:e7:fc:e4:9d:91:02:90:79:f2:2d:db:a8:55:05:ff:81:
bd:ab:e9:67:95:4c:7e:3f:e9:21:e0:06:d4:b9:45:ec:e0:4e:
08:2c:10:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:40:16 2025 by rpki-client