Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hathRENIWSaSCMfetOpz3AAgcEU.roa
File: hathRENIWSaSCMfetOpz3AAgcEU.roa (raw, json)
Hash identifier: yS1csHx4DRph+Zp6xpq51StySy/VZdxTcfiI6QGoiAs=
Subject key identifier: 85:AB:61:44:43:48:59:26:92:08:C7:DE:B4:EA:73:DC:00:20:70:45
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198F9618EE0D3866E88B7FE6D7701B6A30B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hathRENIWSaSCMfetOpz3AAgcEU.roa
Signing time: Sat 30 Aug 2025 05:09:37 +0000
ROA not before: Sat 30 Aug 2025 05:09:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 151.240.128.0/21 maxlen: 24
151.240.136.0/21 maxlen: 24
151.240.171.0/24 maxlen: 24
151.241.132.0/22 maxlen: 22
151.242.56.0/24 maxlen: 24
151.243.8.0/23 maxlen: 23
151.243.204.0/23 maxlen: 23
151.244.56.0/24 maxlen: 24
151.245.2.0/24 maxlen: 24
151.245.22.0/24 maxlen: 24
151.245.56.0/22 maxlen: 22
151.245.185.0/24 maxlen: 24
151.245.187.0/24 maxlen: 24
151.245.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 13:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f9:61:8e:e0:d3:86:6e:88:b7:fe:6d:77:01:b6:a3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 30 05:09:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85ab6144434859269208c7deb4ea73dc00207045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:4f:b0:ec:31:6b:33:95:02:c0:b6:ef:9d:
33:85:b2:33:9f:8e:f7:aa:db:97:68:38:bf:15:77:
7d:54:19:c8:b9:24:97:84:c2:bb:31:4a:7b:34:e5:
a9:cf:65:6c:e4:93:49:97:8b:92:e7:49:47:b6:a8:
df:8a:4a:25:2d:83:d2:ea:52:40:16:4c:24:9b:4a:
f5:92:a7:48:1c:79:fd:05:3d:51:cc:a0:68:3f:68:
96:dd:80:92:a3:69:65:66:6c:24:5f:0d:e5:7b:fc:
f6:f7:a3:19:42:8d:24:cd:ff:8f:ff:88:7f:48:0a:
13:a6:8b:cf:79:2d:e6:3d:18:6a:f3:43:85:b5:aa:
a4:02:be:78:0d:cf:67:78:bb:9f:68:f3:00:b1:8c:
d6:48:5e:7b:02:2d:5f:e1:27:02:8d:0a:b3:c1:10:
7b:20:b6:bb:90:7e:3f:48:ee:06:b5:66:a4:d3:bc:
d5:d7:11:8f:7d:21:51:dd:5f:f8:af:ce:de:14:a2:
c3:69:0e:af:ae:53:13:96:fe:ac:ea:96:f6:d3:b9:
92:61:d7:8e:f6:0b:4e:02:3c:ee:b7:95:20:2b:64:
31:7d:71:4a:cc:44:a1:6c:c2:12:64:3c:14:eb:52:
6f:fb:1f:b8:ae:35:e0:5c:e4:ac:59:c8:f6:13:ee:
b4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AB:61:44:43:48:59:26:92:08:C7:DE:B4:EA:73:DC:00:20:70:45
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hathRENIWSaSCMfetOpz3AAgcEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.128.0/20
151.240.171.0/24
151.241.132.0/22
151.242.56.0/24
151.243.8.0/23
151.243.204.0/23
151.244.56.0/24
151.245.2.0/24
151.245.22.0/24
151.245.56.0/22
151.245.185.0/24
151.245.187.0-151.245.188.255
Signature Algorithm: sha256WithRSAEncryption
27:15:84:1d:2e:51:62:b8:2f:ca:7f:62:16:9d:6a:d6:04:a5:
ff:d3:05:2c:e9:c1:ba:85:54:f7:13:94:8d:6a:7e:15:98:dd:
06:a1:44:ce:d9:84:78:b8:9a:d6:a0:32:2b:04:f8:7a:3f:b6:
ea:0a:33:6f:f2:01:8b:1a:a2:c4:d1:18:2b:3b:9f:80:d0:86:
20:66:bd:c6:8b:28:91:33:16:d6:7c:0d:6c:0c:a7:f6:51:e1:
93:65:73:1b:91:e5:ed:ea:ba:f2:95:ad:57:cd:9d:76:35:df:
78:ee:c1:ae:a9:9b:2b:74:13:fd:53:ce:cb:bb:6f:38:49:e2:
f4:87:43:51:91:4a:c9:9d:c8:af:b3:45:13:dd:4d:94:83:67:
3e:ae:99:66:36:d0:c0:7f:fe:7c:56:ef:c7:8f:1e:3f:d7:28:
22:9a:d6:db:22:d9:51:5f:63:bf:5d:aa:12:fc:0c:b2:6b:c1:
19:04:8a:be:82:1a:60:9e:1d:53:b6:94:1c:41:d7:e1:49:58:
bc:af:2a:98:3c:4d:a2:b2:a1:0c:d8:4b:bc:b1:5c:2c:e1:72:
8c:f8:4a:d7:24:db:cc:a8:8b:6a:3f:f8:2b:f1:da:a6:13:0a:
59:02:30:00:18:61:f8:55:23:76:e1:ac:aa:9f:c0:eb:09:60:
b1:e3:a3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:36:53 2025 by rpki-client