Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0uTZkD1iEFFoDosbXvWjIGztsBo.roa
File: 0uTZkD1iEFFoDosbXvWjIGztsBo.roa (raw, json)
Hash identifier: +7X6Evmu661zDivFfhRl/02/nBDQb9kqJvax2yWEEhY=
Subject key identifier: D2:E4:D9:90:3D:62:10:51:68:0E:8B:1B:5E:F5:A3:20:6C:ED:B0:1A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198A3914F10D0BF5DBD9726FDED44AF6B8E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0uTZkD1iEFFoDosbXvWjIGztsBo.roa
Signing time: Wed 13 Aug 2025 13:14:25 +0000
ROA not before: Wed 13 Aug 2025 13:14:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 262287
IP address blocks: 151.245.244.0/24 maxlen: 24
151.245.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a3:91:4f:10:d0:bf:5d:bd:97:26:fd:ed:44:af:6b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 13 13:14:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2e4d9903d621051680e8b1b5ef5a3206cedb01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3e:d5:5c:7b:87:10:71:66:1a:ed:96:eb:f4:
35:7d:70:51:05:a3:d5:0c:60:81:a4:64:09:75:f8:
5e:7c:0e:c1:5f:e7:33:fa:0e:b9:24:9e:14:61:99:
9a:a5:4f:6b:de:99:8d:99:88:e2:33:c0:d9:d6:f8:
32:3a:6c:29:14:43:8c:ce:63:d8:dc:b6:83:13:ec:
33:88:65:59:30:2e:2d:84:b7:1b:42:2e:db:0c:b4:
dd:a4:68:19:ee:04:4a:93:2c:b9:72:f1:05:4f:f3:
33:2e:f7:c7:55:f2:c3:41:e5:ca:25:fc:ba:7a:f5:
ed:55:92:ab:6b:05:e7:d6:78:5b:44:b5:cb:43:95:
3f:0d:ee:29:13:88:87:a3:be:76:68:2b:90:78:01:
66:42:6d:75:c6:70:20:26:82:2e:75:a2:3d:3e:79:
80:3a:9a:dc:72:72:49:e6:91:41:9a:31:5e:8d:f7:
af:9c:3b:41:20:70:e2:64:1e:d3:59:18:27:f6:fe:
1b:7b:d1:51:cc:0d:25:c8:12:b3:30:8f:7f:a4:f6:
c1:bf:ba:89:89:10:aa:66:db:14:9e:15:1a:2f:bc:
2f:4b:eb:82:8f:ed:35:8c:9d:dc:b0:26:83:6e:ea:
69:d4:28:9e:11:fa:70:9d:02:c7:49:af:74:1c:cd:
1f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E4:D9:90:3D:62:10:51:68:0E:8B:1B:5E:F5:A3:20:6C:ED:B0:1A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0uTZkD1iEFFoDosbXvWjIGztsBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.244.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:1c:5c:8c:4b:a2:b9:0f:7a:51:98:7c:4b:59:b2:9a:ff:66:
ac:22:c7:81:f2:3e:7e:2c:27:0e:09:0b:2e:21:ad:b7:44:7e:
eb:70:62:6a:92:8e:62:cf:07:59:a1:50:22:ea:9e:b4:5d:39:
6f:81:b7:45:8e:d0:b9:ec:51:0b:e9:df:7c:a5:22:a2:7e:65:
0a:0d:c1:17:ce:d9:9d:ea:05:e8:ad:6f:6a:71:c9:bb:bd:f5:
15:17:2c:97:44:51:23:08:43:22:06:fe:d1:8c:3d:dd:d3:5d:
3d:93:b5:b4:c0:c7:9b:bc:d5:a7:b0:55:86:22:8c:64:8e:e4:
cc:99:39:2a:4e:2e:80:83:14:ae:af:99:58:f4:6a:e1:e0:2d:
7d:71:97:b3:63:9d:8a:75:cd:b2:2c:9c:c1:94:58:6d:a6:9e:
50:b4:ab:9a:d6:bf:16:43:1d:fd:03:f7:0d:df:fa:ce:e9:e9:
29:24:61:15:23:b4:f2:bf:75:06:77:44:30:45:c4:05:3b:0c:
87:e6:7b:6a:2f:a8:8b:59:bf:ff:23:58:bb:c6:53:fe:aa:0f:
d0:7f:10:5c:29:7b:12:fe:64:64:2b:8b:72:52:69:11:f4:8f:
c0:fb:41:d9:2f:8c:e1:f2:04:4f:6d:f6:94:3a:0d:52:ae:8f:
af:2f:b9:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZijkU8Q0L9dvZcm/e1Er2uOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwODEzMTMxNDI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmU0ZDk5MDNkNjIxMDUxNjgwZThiMWI1ZWY1YTMyMDZjZWRiMDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT7VXHuHEHFmGu2W6/Q1fXBRBaPV
DGCBpGQJdfhefA7BX+cz+g65JJ4UYZmapU9r3pmNmYjiM8DZ1vgyOmwpFEOMzmPY
3LaDE+wziGVZMC4thLcbQi7bDLTdpGgZ7gRKkyy5cvEFT/MzLvfHVfLDQeXKJfy6
evXtVZKrawXn1nhbRLXLQ5U/De4pE4iHo752aCuQeAFmQm11xnAgJoIudaI9PnmA
OprccnJJ5pFBmjFejfevnDtBIHDiZB7TWRgn9v4be9FRzA0lyBKzMI9/pPbBv7qJ
iRCqZtsUnhUaL7wvS+uCj+01jJ3csCaDbupp1CieEfpwnQLHSa90HM0fSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNLk2ZA9YhBRaA6LG171oyBs7bAaMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvMHVUWmtEMWlFRkZvRG9zYlh2V2pJR3p0c0JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl/X0MA0G
CSqGSIb3DQEBCwUAA4IBAQAsHFyMS6K5D3pRmHxLWbKa/2asIseB8j5+LCcOCQsu
Ia23RH7rcGJqko5izwdZoVAi6p60XTlvgbdFjtC57FEL6d98pSKifmUKDcEXztmd
6gXorW9qccm7vfUVFyyXRFEjCEMiBv7RjD3d0109k7W0wMebvNWnsFWGIoxkjuTM
mTkqTi6AgxSur5lY9Grh4C19cZezY52Kdc2yLJzBlFhtpp5QtKua1r8WQx39A/cN
3/rO6ekpJGEVI7Tyv3UGd0QwRcQFOwyH5ntqL6iLWb//I1i7xlP+qg/QfxBcKXsS
/mRkK4tyUmkR9I/A+0HZL4zh8gRPbfaUOg1Sro+vL7mG
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:38:17 2025 by rpki-client