Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5eLe7ogyQmuucfmpBFVhwmhKdDY.roa
File: 5eLe7ogyQmuucfmpBFVhwmhKdDY.roa (raw, json)
Hash identifier: Z895pusmsu9F9kxWNgDXinvUhSGBGhFSDPNWHJEbdlM=
Subject key identifier: E5:E2:DE:EE:88:32:42:6B:AE:71:F9:A9:04:55:61:C2:68:4A:74:36
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01988D2E1A124F14A8D172A0A36E49E1411D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5eLe7ogyQmuucfmpBFVhwmhKdDY.roa
Signing time: Sat 09 Aug 2025 04:54:25 +0000
ROA not before: Sat 09 Aug 2025 04:54:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153868
IP address blocks: 151.244.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:2e:1a:12:4f:14:a8:d1:72:a0:a3:6e:49:e1:41:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 9 04:54:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5e2deee8832426bae71f9a9045561c2684a7436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:20:a9:0b:4c:22:7d:09:25:29:7a:2b:b7:9d:
1b:1e:33:a5:c5:4e:bc:ba:ad:e8:53:a9:e2:db:88:
09:c8:a9:0a:60:4d:fc:16:7c:82:fb:c6:e8:e6:5a:
d2:bd:ca:68:3a:84:d2:c8:26:e4:d3:78:23:3c:6c:
d7:1a:b9:a7:7b:31:12:88:14:cb:19:18:c4:b1:19:
e1:d4:ed:9b:18:4d:06:5e:b9:16:fa:1e:a4:37:09:
02:49:53:39:18:5a:24:2a:98:44:a2:86:54:a0:b1:
52:0c:52:29:bb:6f:3d:bf:53:b9:8e:55:0a:76:64:
39:b1:cc:c4:34:e8:23:eb:35:0d:15:a0:fd:dd:11:
5f:27:77:61:f4:1f:51:ed:49:7d:67:36:96:22:c1:
ca:15:1b:f4:b9:d1:fd:7d:6d:72:b8:aa:e5:aa:b2:
44:90:ef:c1:82:00:84:cc:b9:1d:7e:be:0f:05:35:
66:6b:09:c4:44:97:15:ea:aa:21:7d:79:de:7e:a1:
82:f9:0d:7f:f3:03:5f:8a:23:dc:d2:6c:54:1a:38:
5c:e5:96:eb:6a:f6:d4:b2:fd:28:77:a6:6d:19:02:
94:83:1a:dd:2a:dc:c9:92:40:4a:31:74:ab:0d:b8:
4b:03:cd:f3:79:13:63:0d:42:3c:4f:03:9c:c0:ae:
d9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E2:DE:EE:88:32:42:6B:AE:71:F9:A9:04:55:61:C2:68:4A:74:36
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5eLe7ogyQmuucfmpBFVhwmhKdDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.254.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b1:c4:33:1f:ba:7f:e7:0f:0e:03:f6:5d:da:8f:2d:f0:a0:
af:48:90:5d:d9:a2:d4:ab:6b:f0:c7:ce:89:3d:3b:db:07:3c:
1f:90:1a:f7:cb:3f:22:ce:3a:5f:87:8b:ce:54:83:71:5c:5c:
a0:da:c7:b2:0f:b1:06:c6:d0:3d:93:a4:35:c1:81:e9:9b:d7:
90:d5:aa:f0:af:7f:15:a2:56:d4:8d:0b:0b:cb:c7:ff:b7:3d:
48:61:06:38:a6:01:82:2b:7f:e2:62:12:19:7b:da:e4:c9:f4:
3e:6e:39:1e:5b:c8:e6:20:54:7a:3c:aa:4b:3b:d3:27:51:d0:
ec:21:a4:5c:bb:89:53:6a:40:56:00:10:c3:a4:40:d3:ff:6a:
0f:ac:c9:e0:27:75:8e:f3:4d:fc:57:8b:2c:e1:30:b7:04:a8:
2d:7a:ba:e8:37:55:03:17:64:19:ca:34:e1:53:85:1b:7f:c1:
e3:ae:e1:35:46:ff:3b:48:4c:34:33:1f:c7:ae:3b:89:0a:78:
74:4f:db:de:45:b1:02:e3:13:4a:6d:39:98:ac:9b:43:7f:bd:
d8:66:10:22:8e:95:9e:8c:05:23:5b:0b:7e:8c:12:12:03:44:
85:db:2c:8d:ae:3b:48:da:fd:53:88:9f:50:2d:80:d0:94:18:
f1:94:05:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:27:58 2025 by rpki-client