Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bQoRrEJyM0KGDXa7fUKYqJDPPac.roa
File: bQoRrEJyM0KGDXa7fUKYqJDPPac.roa (raw, json)
Hash identifier: OfurDkg/ozJW4/rxmHUDQs/IBTKzJOpeS3CAyjEIMZQ=
Subject key identifier: 6D:0A:11:AC:42:72:33:42:86:0D:76:BB:7D:42:98:A8:90:CF:3D:A7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198E0E565AC45677194ACEEE3A254E0349E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bQoRrEJyM0KGDXa7fUKYqJDPPac.roa
Signing time: Mon 25 Aug 2025 11:03:06 +0000
ROA not before: Mon 25 Aug 2025 11:03:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215269
IP address blocks: 151.246.249.0/24 maxlen: 24
151.246.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 13:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e0:e5:65:ac:45:67:71:94:ac:ee:e3:a2:54:e0:34:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 25 11:03:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d0a11ac42723342860d76bb7d4298a890cf3da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:49:b0:59:4f:c7:2b:99:a1:6f:8a:a7:53:81:
64:6c:8a:0b:b1:ea:37:88:4a:20:93:5d:59:08:e0:
20:c4:f4:11:52:b1:39:dc:97:55:8e:b6:16:06:23:
2a:44:1d:62:c8:af:97:c1:ff:8a:8e:8b:c0:60:0a:
b3:92:68:2e:43:0f:fd:bb:13:00:d9:19:09:2a:cf:
80:2b:e1:b4:f1:44:f4:09:b7:d2:1b:65:6c:f3:8e:
53:23:c5:3d:9b:87:79:37:ff:1c:bf:be:2f:60:e2:
cc:53:31:42:9f:77:82:e9:14:ea:e8:73:2f:d3:59:
b9:f5:67:12:d8:a7:ff:32:a0:56:d2:7c:16:c7:2a:
43:f5:1e:23:60:b2:37:ed:99:b8:c8:7f:a0:f8:1a:
d2:b8:a4:9c:9d:d4:16:58:93:24:82:db:14:c9:05:
26:ff:76:9e:60:14:6d:98:a7:a3:57:f8:3e:bd:3a:
c8:c6:35:e8:e0:fd:89:12:43:cd:40:67:2c:87:55:
c0:f6:a3:44:18:0e:11:b8:c0:e2:fc:1e:12:6a:90:
cd:3f:c0:d0:b4:01:1c:78:62:be:7d:e8:03:02:f0:
4a:66:b4:2d:39:59:8a:da:4b:4d:02:df:78:1a:40:
7b:aa:3d:f1:57:d0:1b:aa:3e:d4:e5:e2:a2:cc:6d:
de:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0A:11:AC:42:72:33:42:86:0D:76:BB:7D:42:98:A8:90:CF:3D:A7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bQoRrEJyM0KGDXa7fUKYqJDPPac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.249.0/24
151.246.255.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:50:42:7c:4e:8b:49:4a:d4:6d:ef:19:c5:2d:b9:d7:6e:d5:
4e:f8:1e:ef:9d:ef:95:08:bb:dd:8c:18:cc:57:73:81:ef:20:
58:3f:84:73:35:a8:22:6c:39:8c:0d:4b:57:c0:7e:1f:f9:3f:
31:e0:f3:d1:2f:38:d7:29:22:46:c7:d3:19:bd:0d:87:87:fc:
28:d9:d5:48:18:28:d5:93:6c:a1:ea:46:79:78:37:ae:1e:a8:
e8:28:c3:00:12:08:b0:dc:93:40:22:25:05:63:a8:e6:a9:ef:
82:87:e9:9d:00:e8:26:d3:c9:39:20:99:40:8c:f5:cf:28:ac:
ec:20:66:1a:29:73:fd:02:0d:72:69:ee:75:ea:19:3b:96:7e:
34:5c:18:f8:8e:35:62:8c:cd:c7:7c:30:6b:21:d0:ee:3d:c6:
1a:ba:0b:03:bf:bf:a6:5f:ee:d9:f2:3b:90:e8:99:a5:fd:5e:
4e:75:8c:68:1a:0b:d5:09:c5:30:ab:26:35:f2:5a:ad:1d:5a:
4b:a8:e7:40:af:28:db:78:55:c4:cd:14:9d:18:ff:10:91:84:
74:17:16:5f:cb:59:51:da:79:8e:08:a7:11:a9:97:f1:e1:91:
63:45:95:18:20:c6:aa:d7:48:e0:ef:b7:25:b7:4a:55:41:36:
ce:de:85:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:42:28 2025 by rpki-client