Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/83d-_aJeIG9kqmoVIjE8oeaY-yo.roa
File: 83d-_aJeIG9kqmoVIjE8oeaY-yo.roa (raw, json)
Hash identifier: H/UBNI07Nv6z/IdtkfWZb632nOyvMhxfMS7eofOdY5E=
Subject key identifier: F3:77:7E:FD:A2:5E:20:6F:64:AA:6A:15:22:31:3C:A1:E6:98:FB:2A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199DC78A6CD41E81DE5B38D57CA7ED6DE6B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/83d-_aJeIG9kqmoVIjE8oeaY-yo.roa
Signing time: Mon 13 Oct 2025 07:28:38 +0000
ROA not before: Mon 13 Oct 2025 07:28:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9
IP address blocks: 151.240.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dc:78:a6:cd:41:e8:1d:e5:b3:8d:57:ca:7e:d6:de:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 13 07:28:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3777efda25e206f64aa6a1522313ca1e698fb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8c:89:47:4e:0a:24:b9:ce:ec:ea:62:e3:e2:
0c:61:4f:f0:e3:7b:68:fe:87:65:2e:58:fa:b2:5d:
f1:f9:5e:9a:e4:35:a6:0f:ba:99:70:b2:bf:02:d0:
57:25:b1:98:d9:67:aa:65:10:8f:24:e4:ed:e8:75:
1a:67:b9:56:2c:30:1a:7f:06:58:ce:6b:ce:7d:ba:
b5:ce:dc:1e:36:43:75:5f:ac:d7:a7:7f:ae:fe:a1:
06:12:18:3e:bb:95:01:5a:e1:05:22:ca:06:6a:8b:
b0:2e:88:9f:7c:3b:45:66:4c:39:cc:19:20:97:9c:
7e:15:e9:04:2b:cc:db:ff:a9:44:d5:25:8c:2d:80:
2f:25:a5:25:02:23:00:8e:e5:e8:67:7d:e2:2c:2a:
2f:05:7f:6a:2f:c2:63:32:e1:8e:92:f2:ba:39:a2:
67:1f:0d:7f:a2:4e:b6:e4:cb:9e:10:09:6e:3f:bc:
28:df:2b:90:a3:9c:8a:77:1e:5f:5a:0b:7a:fb:9b:
19:3d:36:af:8d:ec:ed:19:72:b8:b7:75:cb:dd:96:
3d:b5:9a:d1:79:7f:4d:80:06:28:be:b8:b2:a2:0e:
41:b4:dd:96:c4:1a:91:60:26:5a:f3:32:bc:76:e6:
bd:35:95:d4:a7:ea:fc:96:a1:2c:3a:c2:a7:29:67:
47:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:77:7E:FD:A2:5E:20:6F:64:AA:6A:15:22:31:3C:A1:E6:98:FB:2A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/83d-_aJeIG9kqmoVIjE8oeaY-yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.82.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:f9:e4:3d:d5:e0:75:14:06:bd:e5:13:46:27:e6:41:c3:22:
ed:b1:ee:da:45:b7:7b:a7:8d:91:3a:23:7f:61:ad:6b:39:ff:
17:a0:02:3b:21:15:da:58:26:fe:9c:d3:a9:ae:57:66:90:97:
f2:97:43:ae:30:b6:3e:45:44:72:c9:1f:3c:a7:87:7b:64:75:
7e:46:1f:14:e9:e3:3b:fa:28:ae:40:be:5a:c4:a1:8f:21:a6:
b7:84:32:53:15:b9:fc:90:bb:c0:46:e3:90:56:8b:74:f8:73:
fc:0e:8c:c1:2a:61:5d:f4:8c:e0:02:73:cb:db:f5:ab:ea:18:
3b:2e:f7:c7:1b:92:98:57:9a:e4:c3:67:bb:bd:2b:e1:46:19:
28:6f:73:23:fe:8d:53:1a:20:54:82:29:db:3c:97:e1:49:e3:
e7:07:84:2f:33:bc:b2:ed:da:a4:34:18:a8:a5:e0:fb:9b:23:
ce:3a:43:bc:cc:c7:fa:27:cb:e6:0a:d1:e1:14:99:97:d9:f6:
53:3c:93:ae:7d:7c:0a:ad:9b:1a:39:5b:eb:d0:1a:f7:dd:6e:
3a:a3:eb:47:4b:d2:2c:8c:9b:f5:09:9b:65:69:d0:f1:d1:23:
73:5c:1a:f9:17:28:8e:fa:d1:04:c8:87:6b:b5:1a:f4:71:c7:
6a:29:85:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:07:00 2025 by rpki-client