Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0xgcH9fHY3zbKss5Syy4Lwl5teE.roa
File: 0xgcH9fHY3zbKss5Syy4Lwl5teE.roa (raw, json)
Hash identifier: JI8ZBqs+/GstKi+MXdvRcx/7bV5KoHea/5atCMjpelg=
Subject key identifier: D3:18:1C:1F:D7:C7:63:7C:DB:2A:CB:39:4B:2C:B8:2F:09:79:B5:E1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198D17E1EA5D4EA68CC81D711E3039E08BA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0xgcH9fHY3zbKss5Syy4Lwl5teE.roa
Signing time: Fri 22 Aug 2025 11:16:00 +0000
ROA not before: Fri 22 Aug 2025 11:16:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393942
IP address blocks: 151.242.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d1:7e:1e:a5:d4:ea:68:cc:81:d7:11:e3:03:9e:08:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 22 11:16:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3181c1fd7c7637cdb2acb394b2cb82f0979b5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:44:39:4e:2b:cd:41:24:58:21:cc:23:17:26:
a2:65:db:c5:d3:75:d4:8c:dc:cc:d8:66:0d:28:2f:
63:9a:21:59:ff:c3:1e:da:c6:e8:89:5d:f2:8d:37:
5c:3e:82:dd:f3:c5:a2:43:cb:e3:a5:c4:82:ed:9c:
c9:be:bc:b0:3c:3c:97:f4:fc:ac:bb:96:20:cc:1f:
cd:e2:d1:8c:86:82:b0:43:01:f5:05:d0:46:85:06:
bc:fc:c6:9d:d7:f1:8e:56:cc:74:91:b6:9a:d7:06:
b9:fa:b2:1b:90:80:5a:2d:79:59:51:e8:48:3a:8f:
17:5a:26:ca:23:5e:f1:82:d8:56:c9:c0:34:3d:5c:
64:9b:3f:ad:2c:3f:d1:cf:96:7a:6c:75:c6:c0:43:
91:87:9a:d2:b3:d7:07:84:a3:7a:3d:a2:88:a2:c9:
41:a6:98:5b:91:12:22:35:cc:b0:a1:48:99:7b:0d:
5e:36:dd:89:36:48:44:21:5a:90:64:70:70:bf:97:
e2:4b:2d:e9:3b:6a:bf:6f:91:15:de:9e:9c:8c:2c:
07:a4:69:30:b1:5e:9f:0a:eb:5c:0f:21:f6:02:a2:
84:2b:50:0e:2a:29:06:8a:c5:79:4e:77:78:cb:45:
63:d4:a9:e0:10:d8:27:5c:9a:97:b4:46:f9:49:e7:
b4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:18:1C:1F:D7:C7:63:7C:DB:2A:CB:39:4B:2C:B8:2F:09:79:B5:E1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0xgcH9fHY3zbKss5Syy4Lwl5teE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.89.0/24
Signature Algorithm: sha256WithRSAEncryption
43:c6:73:76:22:4d:af:93:75:44:2f:b6:9b:c8:38:65:69:2f:
4a:67:9c:f8:53:5c:01:70:71:cb:00:23:13:a9:21:b0:ec:aa:
f6:cf:d0:7a:2f:df:c5:91:0e:50:e2:64:20:cf:94:51:5a:00:
62:77:fb:8d:6e:50:8a:a3:fc:bc:5f:f3:f2:7d:2f:f5:d9:76:
c8:54:3d:8a:66:de:b5:44:6a:c9:f5:fb:7c:85:d3:a7:96:80:
dc:73:33:18:b2:97:52:60:31:7a:d0:8a:91:a6:bf:bc:ae:0a:
a1:d1:f9:da:85:1a:4a:1d:0b:1a:50:09:9a:2d:64:79:29:9d:
df:89:3c:af:da:84:dd:44:30:d7:6d:4d:dd:7e:f9:50:8d:0c:
15:cd:fb:9d:d7:de:3c:3a:c9:b6:cb:69:5a:eb:26:36:45:75:
74:14:f2:bd:ec:04:1e:56:23:b3:0e:3b:55:ba:b0:18:5b:1d:
4b:c8:b9:06:4c:86:2d:b2:a3:01:5a:20:21:f9:dc:b9:fc:cb:
97:2e:6e:18:a0:27:1b:ed:22:11:ae:61:f7:bd:f7:f4:d9:6a:
cb:90:b8:ac:cb:06:36:fb:55:ab:c5:72:f5:dd:73:4e:70:e8:
23:ca:bf:e4:78:b1:35:9d:91:4b:09:a1:84:4b:4b:7a:c3:42:
9b:f5:db:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:16:56 2025 by rpki-client