Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/h7QXEnt0bEuajPZ8n9IHSBU1ma0.roa
File: h7QXEnt0bEuajPZ8n9IHSBU1ma0.roa (raw, json)
Hash identifier: rEgHtzX0FInXhvNLDNdofN0lurhcnPYCduKqql96tjQ=
Subject key identifier: 87:B4:17:12:7B:74:6C:4B:9A:8C:F6:7C:9F:D2:07:48:15:35:99:AD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01991D6DE66D1B6473149C89FE532DD129DC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/h7QXEnt0bEuajPZ8n9IHSBU1ma0.roa
Signing time: Sat 06 Sep 2025 05:09:25 +0000
ROA not before: Sat 06 Sep 2025 05:09:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215567
IP address blocks: 151.242.19.0/24 maxlen: 24
151.242.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:6d:e6:6d:1b:64:73:14:9c:89:fe:53:2d:d1:29:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 6 05:09:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87b417127b746c4b9a8cf67c9fd20748153599ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:35:28:79:35:37:80:38:b5:e0:f9:f2:d8:ae:
f1:dd:6d:a8:a1:0e:63:ce:44:7a:55:e3:89:c0:cf:
47:22:02:a9:45:5f:eb:4e:f0:f6:da:7c:d7:f5:fa:
f9:7f:32:69:ad:df:0f:58:4f:b9:40:e9:93:91:ca:
60:4f:62:0a:94:82:1a:cd:9e:76:01:5b:31:d6:d1:
83:62:ce:68:f2:04:2c:03:d2:b9:68:9a:b5:8a:df:
72:63:06:ae:fb:d6:9a:17:fb:37:fc:8d:db:c1:e8:
13:8b:e0:62:cb:62:2a:aa:00:57:7a:ab:0d:21:64:
f6:a5:52:40:77:47:66:41:7f:94:1b:e8:f8:39:4c:
03:96:47:bf:a7:93:c5:86:10:86:c3:18:6b:f4:87:
e9:91:81:e3:1d:e3:7b:d5:65:e6:98:95:fa:e1:bc:
5c:8b:1f:b6:7a:ef:f7:9c:5e:e9:dc:ab:ea:19:b3:
86:d2:a4:57:48:c9:b6:ce:5b:b2:db:c7:53:bc:ec:
15:03:e0:4f:6c:ca:e6:3a:a6:83:e4:de:c5:ad:cb:
25:54:7e:85:09:d0:35:2a:40:9e:72:b9:c8:db:9e:
85:3e:e1:36:7e:11:d1:db:77:26:ac:ff:7a:b5:6a:
83:d5:e0:6b:39:7b:47:fb:c4:eb:1f:1c:9f:cb:19:
67:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B4:17:12:7B:74:6C:4B:9A:8C:F6:7C:9F:D2:07:48:15:35:99:AD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/h7QXEnt0bEuajPZ8n9IHSBU1ma0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.19.0/24
151.242.38.0/24
Signature Algorithm: sha256WithRSAEncryption
77:25:83:77:b6:df:ab:e7:95:83:7b:d8:1c:ce:93:5d:ed:71:
de:8b:d9:4e:54:6e:2d:e6:19:1f:b5:21:d6:5c:5f:a1:cf:31:
c6:0a:31:30:88:21:15:ab:41:d4:cf:f9:cb:24:b4:df:db:73:
b9:de:17:b7:42:24:27:8d:18:8a:e5:4f:43:70:33:cc:0e:7d:
9d:54:67:e6:d1:14:c8:a0:af:2f:70:f5:ae:8a:dd:49:a4:6b:
72:fc:8d:ae:4c:b3:30:e3:92:ea:36:80:0c:b4:a0:8c:6c:f3:
a9:9c:04:76:d6:3c:8c:0a:a4:a2:78:f1:48:5c:b6:bd:84:1c:
a6:9c:d3:5a:e2:08:53:29:b4:2c:35:e2:e7:c3:d6:db:97:04:
a9:e7:27:b5:1c:19:45:91:fc:dd:e8:c8:ff:da:3f:34:5e:5f:
c0:e6:77:ba:b8:08:cd:17:3a:be:81:89:0a:33:ba:18:d0:b8:
25:be:93:de:20:1c:34:a6:a2:a0:cc:2e:8d:e2:8c:a5:84:30:
65:cf:bb:b6:19:71:36:48:22:06:b9:25:9f:31:54:06:f4:b4:
2a:33:f7:df:85:ec:98:58:b5:63:4a:9c:df:b0:c5:bd:62:df:
9c:62:8f:67:69:71:f8:8d:79:e0:69:d2:84:2e:ad:6d:ae:62:
c5:dd:33:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 01:59:23 2025 by rpki-client