Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/81qXzPxUJRg1AvUUDZSL4d4YLSU.roa
File: 81qXzPxUJRg1AvUUDZSL4d4YLSU.roa (raw, json)
Hash identifier: Od/Fj8uqEHkWQDXmekdbhDJNkfz9GE2COUgV+Rm+Hwk=
Subject key identifier: F3:5A:97:CC:FC:54:25:18:35:02:F5:14:0D:94:8B:E1:DE:18:2D:25
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0198F737A7816BB7C8565944567A320AFDDB
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/81qXzPxUJRg1AvUUDZSL4d4YLSU.roa
Signing time: Fri 29 Aug 2025 19:04:36 +0000
ROA not before: Fri 29 Aug 2025 19:04:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15083
IP address blocks: 150.241.100.0/24 maxlen: 24
150.241.101.0/24 maxlen: 24
150.241.102.0/24 maxlen: 24
150.241.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f7:37:a7:81:6b:b7:c8:56:59:44:56:7a:32:0a:fd:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 29 19:04:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f35a97ccfc5425183502f5140d948be1de182d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4b:a7:02:6e:67:a7:c0:62:0f:b6:fc:44:64:
4f:92:b8:f6:94:05:ca:0b:ed:eb:15:3b:be:43:db:
f7:1b:d2:e0:23:74:25:00:45:06:0f:3f:eb:8e:5a:
40:f5:40:f1:f4:5b:41:45:55:fd:67:79:4a:c7:11:
2f:4e:99:86:79:64:df:e8:0c:8e:f7:87:7a:40:21:
13:c2:09:4a:59:88:9a:5a:8e:a5:47:87:84:4e:a3:
ed:4d:0e:47:7a:7f:7a:ce:01:88:38:b2:5f:01:9c:
cb:8a:e2:bb:dd:7d:1f:34:60:cc:19:27:95:0e:c1:
1e:77:29:19:7c:4f:33:5d:40:22:13:9a:7d:02:43:
32:fc:ca:a5:5b:31:63:34:8b:1d:1b:4d:f9:b0:4f:
2a:b6:51:c4:2e:3c:e1:9c:a9:84:68:d2:13:c8:10:
60:8f:6c:41:4e:05:bb:db:8d:b3:52:f3:25:73:99:
f2:8f:d0:2e:57:68:54:b5:c4:57:7f:56:1e:d9:d7:
34:2a:02:60:e6:2e:10:bf:0a:e5:97:60:02:46:09:
60:ba:c6:0e:df:81:4d:0c:9f:02:ee:86:c7:26:6d:
0c:d8:02:6d:12:ec:36:39:0a:25:8e:7f:23:11:45:
d1:33:08:17:5c:95:71:98:3e:a0:39:8c:94:f5:1d:
35:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5A:97:CC:FC:54:25:18:35:02:F5:14:0D:94:8B:E1:DE:18:2D:25
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/81qXzPxUJRg1AvUUDZSL4d4YLSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.100.0/22
Signature Algorithm: sha256WithRSAEncryption
11:eb:13:2a:3b:f5:38:73:29:eb:19:44:62:8a:b2:1f:54:5b:
ee:6b:9a:9a:4d:3c:f4:01:ae:08:e3:15:18:bc:5a:80:79:2f:
59:08:21:e4:82:99:b1:3a:56:67:21:59:ad:1e:f5:e0:84:76:
85:88:31:dc:ac:a5:d9:8f:c7:75:87:c9:65:f7:30:07:86:78:
46:b1:db:d0:54:63:3e:d9:22:df:eb:c8:3c:da:3f:e1:99:8c:
cd:4d:a4:a4:cb:d4:37:98:17:8a:37:40:31:b5:ad:f3:26:54:
43:1b:0d:5a:e4:fd:d9:a2:79:83:91:04:65:64:15:1e:fd:47:
ca:df:d4:cc:7a:d0:e3:31:f8:ed:39:df:80:0c:67:c7:07:5b:
29:0e:b6:5a:63:22:86:b4:4e:48:09:cd:6a:80:8b:a3:e8:c2:
60:7e:46:a8:4e:f9:fa:2f:ee:5c:b4:50:e3:4b:86:c2:4f:09:
64:65:87:1e:b8:da:78:91:d7:f6:99:64:57:9d:98:75:f2:65:
e7:dd:a8:db:d5:a0:11:9e:00:14:eb:74:7b:8f:7e:28:e1:1c:
bd:f1:21:41:8d:00:65:6e:7b:8b:d8:0c:eb:21:ba:0c:4f:c9:
2d:50:d6:d1:ca:2f:7f:31:62:02:8a:21:dc:12:ff:ca:e2:c7:
5d:33:2f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 21:56:53 2025 by rpki-client