Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jlWQn3WE9iSFg_hv3zQW7Cm1AKA.roa
File: jlWQn3WE9iSFg_hv3zQW7Cm1AKA.roa (raw, json)
Hash identifier: as0JvkRJ9z0BlkPxVeg1S6MsjY1iGUaoAK64gmU+fmM=
Subject key identifier: 8E:55:90:9F:75:84:F6:24:85:83:F8:6F:DF:34:16:EC:29:B5:00:A0
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199398C8E0D37A6FA4166FD74F1A6BD1EED
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jlWQn3WE9iSFg_hv3zQW7Cm1AKA.roa
Signing time: Thu 11 Sep 2025 16:12:16 +0000
ROA not before: Thu 11 Sep 2025 16:12:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10753
IP address blocks: 151.242.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:8c:8e:0d:37:a6:fa:41:66:fd:74:f1:a6:bd:1e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 11 16:12:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e55909f7584f6248583f86fdf3416ec29b500a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:62:b3:8a:0a:78:23:f6:19:57:c6:bf:78:e0:
9c:b3:d6:c9:99:6e:50:03:91:df:b9:7f:e0:b5:aa:
aa:42:33:f6:0a:53:23:aa:62:31:2c:b3:65:b6:c2:
89:ae:8c:de:fe:32:d2:55:fe:0e:0f:2d:66:72:2b:
88:c5:62:e1:59:a3:ac:69:03:97:60:8a:d8:ff:fe:
53:16:2e:f2:ac:f4:89:c4:9c:07:dc:98:12:89:ca:
6c:9a:3c:48:ec:76:4e:d0:30:72:18:b5:ef:43:e5:
5b:9c:a9:99:e6:d7:54:53:41:5e:b0:5a:8c:da:01:
a9:ec:ae:e7:61:56:df:c1:86:c9:80:a9:71:22:a5:
9a:52:d3:84:36:c6:8e:59:75:26:96:2b:2d:64:13:
cb:f3:ac:4f:b8:47:31:2a:86:b7:32:45:35:38:bd:
43:07:40:fd:02:b5:d1:93:0f:ab:5c:91:aa:40:7a:
c6:4b:c0:36:e1:c6:1d:2f:b4:1e:53:96:82:b1:09:
2a:8f:6c:88:5f:e5:c6:4c:13:ab:7b:0b:cf:dd:12:
0b:b7:e4:11:9a:9e:77:26:d0:4e:f8:d1:af:52:e1:
b7:f3:7b:64:d2:64:5f:1d:98:78:b2:18:23:0a:2d:
7e:29:44:d1:74:cb:ce:00:b1:89:d5:2a:7f:2d:51:
b8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:55:90:9F:75:84:F6:24:85:83:F8:6F:DF:34:16:EC:29:B5:00:A0
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jlWQn3WE9iSFg_hv3zQW7Cm1AKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.180.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:42:75:a1:86:be:21:2e:b3:bd:ee:43:f3:1d:a6:9c:4c:f4:
8d:eb:21:28:2e:cf:97:24:59:5e:c9:b6:11:76:fe:e2:ce:bb:
65:ca:7f:06:5c:83:e1:2b:4f:0d:28:b3:ed:9b:68:7a:c6:26:
ef:01:58:df:20:81:2a:fc:e1:10:57:c3:cb:ec:5c:95:36:d9:
de:e4:18:3e:fd:7c:10:72:c6:f4:d0:28:ed:58:9a:a1:05:c0:
5e:06:a9:6b:1f:6d:2b:ec:b8:98:1f:69:ee:f1:3c:93:b7:d1:
93:af:11:2f:27:fa:35:41:32:53:59:8c:e1:bc:b1:8f:43:bb:
1a:93:de:c2:88:02:35:43:bd:0e:5f:7a:49:ad:b7:ba:9a:7e:
4a:19:5d:36:f1:39:6f:50:76:ce:98:c6:97:ab:61:0b:31:50:
da:bb:bd:ff:e0:b6:b9:44:4d:c8:34:62:ad:22:8a:f3:42:39:
bb:a7:ee:28:3c:3e:31:2a:a1:ef:7b:54:71:b8:3d:cf:fc:f3:
b3:c0:73:6c:1b:fd:e1:d3:68:5b:7a:aa:51:40:57:8e:6f:c9:
08:d4:fe:17:f9:26:d3:16:02:12:00:60:2c:89:ad:cb:cb:f4:
eb:20:7b:38:7a:fd:e2:d0:0b:95:64:b2:ca:aa:5e:18:e2:4b:
72:c7:fd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 07:09:54 2025 by rpki-client