Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_j4kbeZliFNwNyTuNFcdm_5HlRc.roa
File: _j4kbeZliFNwNyTuNFcdm_5HlRc.roa (raw, json)
Hash identifier: +FIIdCrkwClXaH01YOZqTCuJUDjTXjOI+oorXhMe+U4=
Subject key identifier: FE:3E:24:6D:E6:65:88:53:70:37:24:EE:34:57:1D:9B:FE:47:95:17
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199F595CEDFC45A365AB6FF4D10E3F900A2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_j4kbeZliFNwNyTuNFcdm_5HlRc.roa
Signing time: Sat 18 Oct 2025 04:30:59 +0000
ROA not before: Sat 18 Oct 2025 04:30:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203363
IP address blocks: 151.244.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Oct 2025 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f5:95:ce:df:c4:5a:36:5a:b6:ff:4d:10:e3:f9:00:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 18 04:30:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe3e246de6658853703724ee34571d9bfe479517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:87:30:2e:f7:50:46:36:f8:4b:88:24:df:
8d:7b:8f:24:2c:91:46:27:49:ff:4e:c1:ef:d8:f5:
7a:35:ef:28:0b:5d:40:01:36:3f:c4:cd:3e:1f:e5:
5a:d4:34:7b:87:e6:12:19:9d:44:33:f3:c7:48:92:
bf:aa:75:c2:1a:04:03:82:5c:30:f2:02:74:b7:2b:
2b:60:5c:3d:b4:c0:42:90:95:36:62:75:23:2b:e8:
e5:f4:f2:cd:f5:18:a5:29:46:61:34:6c:c1:28:cd:
0a:36:b7:ca:1f:03:2f:ea:f1:08:71:50:08:2e:fc:
b9:5a:06:b3:d8:17:61:5f:08:1a:6d:30:3a:64:b7:
71:3c:f8:36:fe:f3:c1:ef:36:4b:cd:76:87:7e:3f:
73:d9:a6:4a:a3:94:da:71:a0:83:20:cd:3a:bf:34:
e8:a7:76:7a:c7:cc:72:76:20:7e:12:96:15:5c:5f:
7a:07:bf:5e:87:d0:e9:48:60:8b:7d:0c:00:36:68:
6b:2f:7f:4e:6d:7d:df:2a:5c:37:b2:05:d7:10:a4:
c3:b0:f0:ba:cc:56:1c:1f:50:79:b5:d5:4d:1d:b1:
dd:df:f3:b8:b5:d8:47:0c:db:d3:30:ba:70:d0:53:
57:ee:f5:56:55:f7:68:c8:db:8e:07:cf:4a:44:1d:
f2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3E:24:6D:E6:65:88:53:70:37:24:EE:34:57:1D:9B:FE:47:95:17
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_j4kbeZliFNwNyTuNFcdm_5HlRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.215.0/24
Signature Algorithm: sha256WithRSAEncryption
12:cb:ec:96:cd:41:6b:22:1b:35:bf:b4:03:c9:12:01:73:60:
77:0a:00:ca:1d:0a:3c:1e:1b:47:43:6b:e9:74:e4:3e:26:50:
e3:29:75:46:49:37:97:4d:8f:93:e2:4c:49:3e:29:92:20:0b:
e4:1d:12:ec:f2:e7:e0:28:cc:4e:0d:27:2c:9a:ea:cf:d6:e1:
e8:8b:dc:70:68:58:2c:56:4a:58:ec:2b:bf:18:3c:3a:19:46:
31:e7:2f:19:e1:a0:4c:de:ea:af:57:a1:76:9b:9f:fd:87:5c:
24:af:08:01:2f:c4:13:11:c5:55:06:86:c1:bf:4a:05:c9:2e:
df:44:7a:8a:c5:8a:40:36:f4:12:ee:a0:be:b6:15:88:e4:c1:
32:c6:d7:41:8b:51:c3:db:f6:9f:74:a6:86:cb:73:5e:f0:09:
77:d2:80:df:f5:82:2d:65:c8:56:e3:44:f5:a2:ad:4f:54:3a:
8f:03:7c:3a:a1:ac:f8:45:80:39:0d:a8:96:36:16:14:9a:94:
e0:f6:fb:7f:e9:b4:e1:03:cf:8e:57:8d:da:a2:eb:87:af:88:
67:05:39:d7:c1:19:e2:26:a5:22:30:25:b8:17:f1:5c:54:6a:
80:58:91:8d:7f:f8:cb:b2:b4:59:b5:78:d5:0e:94:3f:98:41:
9e:9e:7b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 21:05:54 2025 by rpki-client