Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1UDry4Yc_PiLMRzX6ELOUZ6dWgQ.roa
File: 1UDry4Yc_PiLMRzX6ELOUZ6dWgQ.roa (raw, json)
Hash identifier: m3F90cYFhXkvBF1PRC1v/32HHtS6sG0hOdxk9Fts6Eo=
Subject key identifier: D5:40:EB:CB:86:1C:FC:F8:8B:31:1C:D7:E8:42:CE:51:9E:9D:5A:04
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198B68AC990A466327200C2A36BBB485F59
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1UDry4Yc_PiLMRzX6ELOUZ6dWgQ.roa
Signing time: Sun 17 Aug 2025 05:40:05 +0000
ROA not before: Sun 17 Aug 2025 05:40:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205441
IP address blocks: 151.247.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b6:8a:c9:90:a4:66:32:72:00:c2:a3:6b:bb:48:5f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 17 05:40:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d540ebcb861cfcf88b311cd7e842ce519e9d5a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5a:67:0b:44:74:f4:a8:f2:94:54:1f:50:c6:
3a:42:16:a5:6c:98:01:a0:71:64:5d:21:cc:a7:94:
36:0c:e9:cd:94:a1:4e:a8:9d:29:cd:7f:46:6c:2c:
4a:f0:04:e3:a0:db:9b:74:9f:5a:c1:2f:44:62:b2:
fc:6b:25:df:44:16:cf:9b:83:49:71:6e:3e:c6:6c:
74:92:2a:9d:3b:16:89:c8:49:78:f6:57:cd:4d:35:
5e:35:3e:8e:4d:c8:97:a6:8d:89:de:4d:35:ee:71:
b0:66:f6:6d:6c:19:60:20:b9:1d:3f:14:9e:4d:38:
6f:2f:e5:02:7b:00:d2:82:58:4d:50:10:04:d1:c0:
96:b1:7b:76:03:29:94:e5:16:5a:d8:51:7e:8e:50:
5b:5d:5c:01:27:84:82:5f:cb:de:cc:72:38:67:22:
3e:fb:0b:b9:db:36:f7:4a:a4:e9:b5:59:f2:f1:4f:
2d:75:9b:4c:10:91:65:da:19:d5:20:4f:08:d5:cd:
c3:7d:fd:09:91:c3:f9:23:51:32:da:bf:99:79:41:
ad:48:c8:4d:94:83:4c:fb:0e:1a:18:27:13:27:f4:
0e:ee:b7:2a:5d:90:bd:34:85:68:db:10:ca:21:b0:
c8:3b:d0:ac:0e:b9:99:21:7d:05:4b:c3:8c:fa:05:
2c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:40:EB:CB:86:1C:FC:F8:8B:31:1C:D7:E8:42:CE:51:9E:9D:5A:04
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1UDry4Yc_PiLMRzX6ELOUZ6dWgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.210.0/24
Signature Algorithm: sha256WithRSAEncryption
41:ee:46:82:e1:42:5e:be:6b:74:49:f3:d7:f7:f9:2c:b8:b8:
d7:38:9c:f4:f1:7a:18:21:40:e6:8e:da:9a:a4:6c:20:80:73:
8c:99:6f:7c:31:cf:90:4c:b7:63:c7:5e:62:c6:15:74:ff:eb:
6e:5e:37:73:e9:97:a9:59:e9:90:b9:04:5b:7a:56:b3:cb:2a:
ec:57:2d:08:62:04:0e:18:1b:35:b2:40:3d:8e:5a:ab:d2:bb:
8e:96:64:2e:48:18:d3:b5:98:b5:18:8b:8f:34:58:7d:77:f8:
79:0d:a2:ea:f7:38:6f:0a:e7:7b:f4:9d:96:26:cb:0e:04:02:
eb:1d:fe:80:b1:f1:82:94:e0:81:6b:a8:b7:f3:4e:1c:3d:51:
9d:ea:96:dd:06:78:e4:86:7f:07:e8:15:7d:dc:6a:25:e4:fa:
4c:b1:b0:a9:ad:3d:d9:60:f5:dc:a4:d5:4d:54:3f:00:8e:97:
3d:05:c7:0f:7d:a7:cb:3c:77:07:16:e4:cd:0e:14:d8:ee:08:
3b:24:20:69:c4:f4:f6:f5:b9:90:f1:dc:32:0f:7f:8e:c3:a2:
16:e1:74:68:e4:81:2e:db:ea:e3:95:d6:a1:04:f2:cc:e6:6f:
f1:ea:b8:1c:0d:3a:c4:56:60:f1:cb:ed:60:73:94:a4:89:e7:
e2:62:d7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:29:09 2025 by rpki-client