Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nStNzl49yjhE232Hg6LpoJJJSj8.roa
File: nStNzl49yjhE232Hg6LpoJJJSj8.roa (raw, json)
Hash identifier: xEAj3wwY58keEKhjkJPigoEk8ShzBDSUlCLNkULhgKY=
Subject key identifier: 9D:2B:4D:CE:5E:3D:CA:38:44:DB:7D:87:83:A2:E9:A0:92:49:4A:3F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198E4CC3758776B0CB1804FDD3904D19BC3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nStNzl49yjhE232Hg6LpoJJJSj8.roa
Signing time: Tue 26 Aug 2025 05:14:05 +0000
ROA not before: Tue 26 Aug 2025 05:14:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150249
IP address blocks: 151.242.24.0/24 maxlen: 24
151.242.133.0/24 maxlen: 24
151.242.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 13:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e4:cc:37:58:77:6b:0c:b1:80:4f:dd:39:04:d1:9b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 26 05:14:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d2b4dce5e3dca3844db7d8783a2e9a092494a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:db:ed:bd:1a:13:f9:9c:9c:f7:7d:07:61:f5:
ba:9b:0a:78:52:2f:5d:67:43:83:f1:91:86:40:01:
42:01:b3:b4:8f:1b:0a:b4:6e:97:35:9b:06:54:56:
bf:16:58:65:ce:c9:08:12:1a:02:e6:72:1a:e1:20:
92:6d:96:d9:93:49:bf:1b:00:bf:d8:b8:64:04:6b:
6d:18:86:ea:a0:fd:25:19:6a:68:e5:68:09:76:8e:
88:ab:1d:37:b2:42:3d:d3:8a:9c:3c:f3:33:00:ae:
dd:7d:53:da:e9:63:5f:7a:c8:98:5b:ab:6a:5e:56:
51:35:da:6c:49:e0:06:68:8c:92:53:40:c4:d7:3c:
8f:f6:c5:51:d5:cc:96:31:65:52:6f:6f:46:69:5f:
7a:88:a1:38:1f:bc:81:b6:2c:ad:8c:7e:ca:6d:93:
0b:6d:ba:62:d2:ea:c4:38:f5:c2:b1:ac:9d:d7:58:
36:92:40:25:82:62:3d:58:a9:85:30:b5:89:ed:fd:
49:49:37:dd:aa:38:d9:d4:ba:08:9f:d1:42:d7:e7:
84:df:c7:7d:34:b1:8f:82:c3:df:b2:48:b6:01:7d:
8e:41:d0:49:cf:d5:53:66:26:6e:79:92:53:fb:21:
8c:72:13:a0:20:2f:25:01:28:eb:3e:0d:9e:35:35:
fa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2B:4D:CE:5E:3D:CA:38:44:DB:7D:87:83:A2:E9:A0:92:49:4A:3F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nStNzl49yjhE232Hg6LpoJJJSj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.24.0/24
151.242.133.0/24
151.242.204.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:a8:e8:a7:2b:94:aa:64:ce:59:08:a4:32:48:4f:db:2d:01:
b0:a1:46:ca:69:d3:9e:ed:2d:80:34:09:d9:f7:22:67:78:ae:
2f:6f:80:6d:5e:55:96:65:a7:bd:e0:64:bf:b4:04:87:7e:35:
68:ed:ba:61:24:f9:78:01:72:10:cf:e1:fd:3b:d0:b9:09:a2:
ed:1c:be:7d:d2:e4:67:4a:cb:5b:01:25:60:75:92:12:4b:76:
76:be:fd:82:cc:f3:bf:21:83:c8:8f:aa:87:21:10:cf:2d:14:
f8:4b:05:1d:e5:89:0a:92:d4:09:bc:e0:16:00:84:f0:97:77:
ca:a0:19:0d:c3:28:12:e4:71:ae:ea:e2:7a:8d:5e:f2:c3:2b:
12:e7:12:a2:54:82:8c:90:28:a2:97:22:dd:b1:96:05:0a:f0:
fb:d0:ba:58:c5:19:b4:e3:ed:5c:64:bc:da:19:8a:7e:f5:77:
99:2f:8f:e6:2b:f6:47:4d:5a:5b:38:13:1f:e6:52:86:67:09:
1c:cb:98:39:2a:66:b0:10:d4:79:ff:2a:81:6a:6d:50:4f:47:
09:19:49:2a:38:1c:c0:5d:c2:19:76:2c:bb:3b:ef:9f:58:ee:
21:9d:18:87:0c:86:ab:59:1f:fc:74:1c:02:63:53:3e:52:49:
20:d8:43:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:21 2025 by rpki-client