Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/02WSwxk-Jb-3-vrF8Lknj6cty9E.roa
File: 02WSwxk-Jb-3-vrF8Lknj6cty9E.roa (raw, json)
Hash identifier: GgdBggJrNAVXAvfZpAjjUohCOc/h2/yYBMF4Splbly4=
Subject key identifier: D3:65:92:C3:19:3E:25:BF:B7:FA:FA:C5:F0:B9:27:8F:A7:2D:CB:D1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01998638838BF8BF40625F34BB66D555475B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/02WSwxk-Jb-3-vrF8Lknj6cty9E.roa
Signing time: Fri 26 Sep 2025 13:31:14 +0000
ROA not before: Fri 26 Sep 2025 13:31:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52041
IP address blocks: 151.244.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:86:38:83:8b:f8:bf:40:62:5f:34:bb:66:d5:55:47:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 26 13:31:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d36592c3193e25bfb7fafac5f0b9278fa72dcbd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:88:99:00:93:91:a2:23:f3:0f:37:18:bb:d9:
47:a0:7b:ac:ac:af:2b:63:3c:4d:51:bf:88:d6:7e:
b4:d2:b5:fa:dc:25:c5:d7:05:a2:ba:57:84:61:b4:
09:d3:f5:ab:d8:be:b1:68:7f:f7:79:e2:3e:cc:86:
94:d9:d2:9c:b1:63:5c:96:39:dd:ef:ba:ff:ae:ea:
7d:bf:5b:47:79:ae:0c:66:34:16:4f:a2:86:c8:0c:
a9:3f:5e:9a:c9:2c:48:ae:84:7c:17:52:a1:58:25:
12:94:07:4c:74:25:db:1b:30:24:aa:e2:f1:82:09:
3d:a5:ea:aa:c5:14:18:b0:3a:47:8e:db:39:32:4c:
53:0e:96:48:5f:02:80:9f:d8:13:6a:50:40:d0:cc:
15:ae:24:fc:53:6a:43:5a:49:9b:da:74:65:d5:b7:
b6:fd:a1:dc:e2:4b:79:a9:24:87:6f:e8:bb:18:46:
2b:e8:cd:33:c3:8b:1c:ad:e5:54:63:86:d3:fe:4b:
99:aa:1e:f9:8d:fd:fe:3e:ba:6d:89:39:b0:e5:96:
7c:16:e4:df:c5:65:71:b5:a5:9d:8f:9f:e4:0d:7c:
1f:49:00:d1:46:eb:63:9b:44:2f:01:71:89:34:46:
57:86:31:36:86:69:25:fd:18:bc:82:26:3e:09:70:
f8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:65:92:C3:19:3E:25:BF:B7:FA:FA:C5:F0:B9:27:8F:A7:2D:CB:D1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/02WSwxk-Jb-3-vrF8Lknj6cty9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.46.0/24
Signature Algorithm: sha256WithRSAEncryption
80:f8:4b:2c:a9:51:f8:e8:11:1f:8f:46:95:3c:5f:6b:ab:84:
ca:91:3f:2e:6d:1e:35:46:cc:0e:f9:ed:70:37:5b:a1:1e:f5:
ec:60:4a:c9:47:8f:6d:90:f2:70:74:a5:d3:ec:af:e1:77:13:
85:65:d6:8b:f3:4c:82:8c:a8:95:2f:95:b5:11:10:fd:8f:d5:
40:ac:ae:cc:b2:ae:be:58:76:ec:81:2c:a2:52:ae:6f:ef:eb:
1a:27:45:a3:1d:3f:00:aa:d9:9a:1c:c5:a6:92:5f:96:ea:83:
db:fb:90:1b:d0:22:7c:fe:38:48:41:6c:18:53:36:64:4d:9f:
2a:61:84:71:eb:d1:e1:ed:e9:ac:09:8a:57:e0:2a:2c:36:90:
14:2e:73:b6:e4:10:d3:fb:06:ba:75:2c:aa:0b:44:bb:cd:a4:
37:f2:2a:d7:78:ff:ba:72:15:fe:fa:dd:60:13:c5:c0:9c:d2:
47:c8:7b:e9:95:b0:ee:06:ed:0c:44:31:69:b7:7e:bc:e7:ce:
84:3a:da:a0:42:b8:24:25:fc:fa:99:64:cd:4a:b3:db:01:5a:
ed:e6:ef:54:e0:9a:41:42:b2:f7:ad:a6:ab:5a:4f:e7:07:75:
bb:1e:5b:69:09:74:bf:bf:55:1d:80:49:fc:88:75:1e:12:9e:
bb:5c:23:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:04:33 2025 by rpki-client