Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/k6qbTVn0esLzRvLHbNh_VlOYabc.roa
File: k6qbTVn0esLzRvLHbNh_VlOYabc.roa (raw, json)
Hash identifier: il3wh0ffMJGxKWL1lBRf3CLEvm5Rrm84w12nXtoiSTQ=
Subject key identifier: 93:AA:9B:4D:59:F4:7A:C2:F3:46:F2:C7:6C:D8:7F:56:53:98:69:B7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198F96AB7C599ED780CAB0E4237292B257E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/k6qbTVn0esLzRvLHbNh_VlOYabc.roa
Signing time: Sat 30 Aug 2025 05:19:37 +0000
ROA not before: Sat 30 Aug 2025 05:19:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214024
IP address blocks: 151.241.128.0/22 maxlen: 24
151.242.4.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.17.0/24 maxlen: 24
151.242.32.0/24 maxlen: 24
151.242.139.0/24 maxlen: 24
151.243.44.0/24 maxlen: 24
151.244.128.0/24 maxlen: 24
151.244.129.0/24 maxlen: 24
151.244.130.0/24 maxlen: 24
151.245.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 13:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f9:6a:b7:c5:99:ed:78:0c:ab:0e:42:37:29:2b:25:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 30 05:19:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93aa9b4d59f47ac2f346f2c76cd87f56539869b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5f:46:42:45:9b:a3:d3:a3:97:24:86:7d:12:
12:88:f9:d4:ef:dd:43:08:87:41:48:8c:19:b7:1e:
3e:c5:7d:23:2d:79:9f:d8:5c:75:31:9a:d1:94:75:
9f:72:c9:91:50:49:26:9d:8c:f8:7f:92:77:a2:23:
3b:52:c3:23:b0:0d:3b:81:e0:53:f2:d1:f1:3a:fb:
6f:e2:be:42:b0:1d:62:96:c8:1d:0c:cf:48:97:09:
35:5e:e5:cb:94:df:7c:25:41:ce:08:2d:ee:ae:17:
e2:6c:64:10:15:68:a2:d0:89:05:a0:51:78:31:d7:
d3:85:df:aa:9b:10:04:54:03:2c:04:2b:87:90:97:
3d:18:29:32:78:1c:3d:e6:60:eb:15:ac:2b:00:b1:
58:33:30:c1:9a:ad:9d:be:53:06:c7:93:99:54:5f:
be:9d:3f:bc:f0:22:7a:d4:4d:c5:8b:c3:f8:15:66:
a8:e8:0b:72:7f:12:8b:d8:47:4a:db:16:ee:ea:dd:
87:23:43:3c:1a:f7:a3:01:ae:1f:de:6b:dd:06:1e:
47:e4:2c:97:4c:fb:b0:b3:f3:34:6f:3c:ce:ac:57:
fb:20:ce:01:7d:cb:7e:25:7f:d7:27:84:aa:52:24:
74:97:24:bc:c3:38:5e:aa:51:f0:df:5e:fe:21:3c:
d3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AA:9B:4D:59:F4:7A:C2:F3:46:F2:C7:6C:D8:7F:56:53:98:69:B7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/k6qbTVn0esLzRvLHbNh_VlOYabc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
151.242.4.0/24
151.242.14.0/24
151.242.17.0/24
151.242.32.0/24
151.242.139.0/24
151.243.44.0/24
151.244.128.0-151.244.130.255
151.245.120.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:f3:c1:4a:10:d7:1c:e4:05:aa:70:1b:dd:a4:2e:a5:02:1a:
d0:89:5a:04:55:16:71:7e:3d:15:37:44:1d:f8:57:c0:de:2b:
0b:09:e8:22:ef:b0:b4:ed:9e:1a:88:5f:8f:eb:e6:de:78:49:
fb:a5:96:1a:79:ef:4b:98:6b:0f:5a:d7:52:4c:e9:69:61:b8:
df:f1:29:22:00:5e:84:dd:fd:a4:5b:33:0d:9b:f5:9e:a5:4d:
f9:57:07:da:35:6f:a5:4e:75:f0:86:8e:05:09:32:71:14:3b:
3f:66:8d:b2:9c:b7:2a:ef:17:30:41:88:5d:e2:f9:d8:17:f7:
bc:7d:6c:de:1d:de:e8:13:10:2d:24:b7:85:bf:85:a3:21:1e:
d2:5e:56:4c:92:ee:6a:48:4b:90:49:8a:3c:7f:44:63:99:2a:
33:b5:e5:76:f2:40:05:77:fe:95:cd:9e:5e:c5:aa:3b:d0:34:
1e:50:87:6c:5c:94:84:e2:dc:4b:c5:52:fa:b5:56:13:cd:cf:
99:c4:70:14:e9:89:55:84:b2:ab:9f:4e:18:31:6e:8e:6f:59:
10:ef:30:06:9b:0a:02:eb:2f:5a:e0:72:a3:0c:de:6a:1b:9a:
f6:d6:7a:98:c1:f3:c1:7b:43:0b:3a:94:ed:5b:39:64:4b:6e:
7d:8d:8d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:42:26 2025 by rpki-client