Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3lOoz2xiZKin2pKGPljdrksAagw.roa
File: 3lOoz2xiZKin2pKGPljdrksAagw.roa (raw, json)
Hash identifier: OrHCSIFfd1JXiBoVi47rQp7W857pHlqAiqtnskQRluU=
Subject key identifier: DE:53:A8:CF:6C:62:64:A8:A7:DA:92:86:3E:58:DD:AE:4B:00:6A:0C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01998EA0BD7FB1CD6E1B0D63AE9EB1CA36CE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3lOoz2xiZKin2pKGPljdrksAagw.roa
Signing time: Sun 28 Sep 2025 04:42:02 +0000
ROA not before: Sun 28 Sep 2025 04:42:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152626
IP address blocks: 151.243.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:8e:a0:bd:7f:b1:cd:6e:1b:0d:63:ae:9e:b1:ca:36:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 28 04:42:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de53a8cf6c6264a8a7da92863e58ddae4b006a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:87:b3:0c:22:ef:4d:64:2c:0b:ba:24:a3:
bb:9c:9f:a6:02:3e:55:ed:0e:68:95:20:19:5b:ad:
c0:8e:3d:7c:31:3a:ca:27:81:ea:71:16:4a:88:d8:
e3:01:23:1f:d6:ae:fc:13:4c:53:1d:7d:fa:9a:91:
f5:f6:dd:76:b5:86:ff:46:4e:77:61:a4:84:76:44:
5b:b6:84:93:e7:03:53:d0:ae:2f:cc:14:e4:49:ca:
40:b7:c7:e7:c6:f5:20:39:3d:b5:10:73:92:1d:72:
c9:ca:16:19:a7:eb:ab:f1:4c:ac:e7:70:b3:44:61:
ef:01:ba:76:7c:97:19:c8:f5:d5:93:d9:e0:86:a8:
76:bb:c8:17:b5:26:a7:39:fe:ed:02:d0:4f:ea:4a:
6b:d2:ba:74:7d:82:63:82:30:e6:8e:61:50:b9:37:
1b:48:3f:03:b6:cd:61:20:2d:d4:08:fe:7e:cf:ab:
4a:c9:a3:5c:ed:42:66:70:86:87:bd:4f:e6:af:d6:
1f:7c:df:92:09:77:ff:af:4a:49:be:1f:90:bd:5c:
4c:82:9c:8d:19:e4:34:6f:2c:01:33:6f:95:19:84:
3c:f2:6a:55:43:ca:14:b6:fe:db:34:57:c5:07:86:
93:09:00:48:07:96:a2:0f:50:46:ff:d3:db:e0:2b:
17:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:53:A8:CF:6C:62:64:A8:A7:DA:92:86:3E:58:DD:AE:4B:00:6A:0C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3lOoz2xiZKin2pKGPljdrksAagw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.34.0/24
Signature Algorithm: sha256WithRSAEncryption
51:72:73:af:51:48:bf:f6:5a:a2:b2:ab:58:a0:2c:95:d8:54:
21:26:e7:45:d6:82:d1:ee:f4:0f:4a:6f:c1:3c:a9:c1:85:26:
76:90:1f:5d:59:6b:e2:b3:9d:18:5a:d2:b2:6b:40:5a:9c:21:
e1:29:3b:f7:32:fd:b8:6f:26:87:46:e9:d6:b5:19:ab:89:26:
24:f7:b3:f4:c6:4b:c3:7d:9e:16:db:79:a8:83:f7:86:85:eb:
cc:29:04:26:d6:27:41:67:4e:4b:ea:e3:f1:a5:bf:f0:56:c4:
8b:5e:e4:43:96:e9:1f:62:71:54:cb:66:f6:d0:60:09:6a:5d:
32:76:fb:de:21:71:3f:3b:0d:58:0f:2b:28:2c:ec:df:f6:98:
7d:5b:44:7a:0e:4c:03:01:d0:77:c3:b4:ee:a3:e3:3f:54:ee:
fb:aa:22:89:50:e0:48:1d:55:59:45:83:36:11:57:f1:17:bb:
d7:50:b1:4f:7b:4f:b0:87:8a:06:d2:68:b3:2f:0b:d7:b8:02:
de:36:64:11:76:de:60:4f:00:ab:a8:62:7c:82:a7:73:e0:55:
2d:fa:46:99:0e:88:44:78:9d:08:e7:fe:98:53:a7:49:de:a2:
cc:52:1d:82:96:43:f8:2c:d4:d0:23:48:86:c7:52:a9:bd:d2:
3d:d6:96:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:55 2025 by rpki-client