Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wQdC7XAYZq_vAlXDFHWGTeWh3rM.roa
File: wQdC7XAYZq_vAlXDFHWGTeWh3rM.roa (raw, json)
Hash identifier: /+OXCtEZDgkHXzHvayTO3wQlUhXWvtKEqqm2F+Mp4LU=
Subject key identifier: C1:07:42:ED:70:18:66:AF:EF:02:55:C3:14:75:86:4D:E5:A1:DE:B3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019908C3433B8CB4BFBCCA896E57AA043393
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wQdC7XAYZq_vAlXDFHWGTeWh3rM.roa
Signing time: Tue 02 Sep 2025 04:50:38 +0000
ROA not before: Tue 02 Sep 2025 04:50:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214693
IP address blocks: 151.242.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 13:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:08:c3:43:3b:8c:b4:bf:bc:ca:89:6e:57:aa:04:33:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 2 04:50:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c10742ed701866afef0255c31475864de5a1deb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:40:7f:54:48:7e:9a:3e:79:d7:dc:37:de:3b:
20:3c:d8:83:1f:98:e6:33:e6:0b:3e:b8:eb:df:22:
04:ba:24:ce:b1:c4:1e:94:5c:38:0e:7b:89:be:6f:
f6:08:f1:53:6c:7a:80:f6:00:ec:af:8c:d6:64:d6:
9c:57:05:7b:b2:6a:77:68:84:00:32:86:cd:cd:36:
b5:f2:11:8b:21:20:eb:e7:d9:e3:b5:a6:db:5d:53:
19:53:74:55:2a:e4:0d:cb:3e:c7:83:51:b0:5d:5a:
37:ce:3d:aa:69:01:84:f6:65:e3:3f:5b:4c:21:d9:
a8:be:8b:cb:f1:66:a3:bf:7d:76:4e:3f:d7:e6:2c:
d0:69:06:d2:87:61:c6:c8:8c:13:36:8f:e3:db:0f:
fd:cb:17:ed:ed:42:59:15:93:57:32:67:bc:61:c6:
ce:34:7e:5e:e9:ad:05:72:d8:b0:59:9c:60:30:3e:
41:e6:ad:ea:77:d3:12:b4:ac:ec:25:16:ad:4c:db:
bd:fd:86:4a:fa:ea:18:4b:0c:b3:3a:49:b0:d4:dc:
b3:fc:98:1f:da:f4:88:ab:38:22:92:7e:7e:65:58:
61:93:73:94:f6:56:54:49:ff:5a:b9:a1:68:60:93:
18:88:66:3a:c2:4f:8a:ab:66:99:1d:94:8d:fe:be:
aa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:07:42:ED:70:18:66:AF:EF:02:55:C3:14:75:86:4D:E5:A1:DE:B3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wQdC7XAYZq_vAlXDFHWGTeWh3rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.194.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:2c:df:69:77:36:41:86:9d:84:52:39:2c:9c:5b:a1:40:86:
39:aa:32:3f:64:a6:25:26:4b:23:9b:28:ec:f6:52:d4:8d:2e:
bd:bb:16:8f:b3:ba:0f:bd:3a:b0:88:9d:5c:8e:35:56:4a:42:
bf:ae:2f:a0:fb:24:a7:2e:f3:8f:5f:f2:4e:aa:4e:55:6c:1b:
5b:80:f3:d6:a0:2a:1b:92:02:0b:36:3b:6b:18:cd:fb:98:5a:
f9:d5:3f:c4:d6:7c:9c:18:42:5e:b4:75:8a:f7:b5:9f:67:34:
c8:5b:d5:cd:20:5e:31:47:10:c9:4a:bf:02:bf:08:e1:fd:7b:
96:6f:71:37:5c:3c:75:aa:b6:43:b4:9b:6b:f0:a1:7f:1d:a5:
93:ae:34:f6:2b:13:9c:4f:f0:15:12:0e:c3:d6:8c:ce:aa:d5:
d8:e5:0b:15:e4:e4:4e:5a:34:dd:de:5c:e6:db:c2:71:8e:ed:
81:36:33:ad:29:f3:0f:f1:bc:a7:81:4e:5c:c1:0b:22:92:10:
d3:ee:e0:8c:2a:9a:fe:6d:18:4f:d7:64:70:1b:3a:38:cb:3b:
0b:30:48:57:e6:45:85:e3:76:87:64:26:ed:7b:b4:00:a5:46:
f7:9b:d5:1f:9a:40:3d:43:29:f1:64:a4:b4:3d:59:a8:fb:6d:
bb:a0:4b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:41:41 2025 by rpki-client