Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8CM-KptuYh5uqyb4Ne_ayy41lSI.roa
File: 8CM-KptuYh5uqyb4Ne_ayy41lSI.roa (raw, json)
Hash identifier: AKh/uHVuIfm09ZHnaJMYh1Egs9XNM+waS5FnWS/jBD4=
Subject key identifier: F0:23:3E:2A:9B:6E:62:1E:6E:AB:26:F8:35:EF:DA:CB:2E:35:95:22
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197AB7B719B272FF49A4EC5A65EDE67979C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8CM-KptuYh5uqyb4Ne_ayy41lSI.roa
Signing time: Thu 26 Jun 2025 09:04:43 +0000
ROA not before: Thu 26 Jun 2025 09:04:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51082
IP address blocks: 151.240.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ab:7b:71:9b:27:2f:f4:9a:4e:c5:a6:5e:de:67:97:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 26 09:04:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0233e2a9b6e621e6eab26f835efdacb2e359522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:d0:f7:80:28:35:63:a0:9c:e9:cc:30:e1:
7e:e3:34:d9:b3:08:69:81:a8:a8:8f:b7:77:e9:a3:
ac:4a:5e:09:9f:cd:65:c9:8a:1b:29:13:26:b5:f6:
6c:05:a6:2c:cb:e4:34:8d:ef:14:8b:36:4b:45:b0:
13:29:27:10:54:d2:a5:4e:5d:c1:42:4f:13:e0:b2:
57:bf:b3:ab:a8:7b:90:77:fe:b3:a9:85:76:d6:63:
76:82:64:33:34:21:78:91:fd:53:0c:ee:4d:fd:d0:
a7:ab:fb:0d:67:86:61:1f:49:e1:73:d2:54:27:f7:
2a:21:ef:53:73:45:e2:82:a3:ae:35:86:e9:18:a2:
e4:53:a3:9e:31:b5:ee:83:46:bf:86:cf:d0:82:f4:
90:1c:cf:f6:c7:e3:e7:89:55:26:ee:dc:fc:41:ab:
d6:b3:6a:fe:d4:4e:f7:f4:78:a4:c2:0f:82:c2:37:
44:39:e3:a5:08:b4:69:85:ee:a9:07:2f:87:bd:36:
be:31:6b:f0:75:57:ae:be:0c:63:eb:50:b4:08:d6:
9e:04:ef:46:00:8a:ed:e5:cc:f9:32:9a:a9:2a:d1:
34:e5:22:52:df:5b:43:3c:02:a0:74:c7:cf:b8:93:
aa:b8:c3:77:1a:14:05:9b:f0:7f:de:0b:19:30:76:
27:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:23:3E:2A:9B:6E:62:1E:6E:AB:26:F8:35:EF:DA:CB:2E:35:95:22
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8CM-KptuYh5uqyb4Ne_ayy41lSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.115.0/24
Signature Algorithm: sha256WithRSAEncryption
94:a9:45:9a:b1:b3:7a:2a:94:d5:12:27:40:10:84:7a:4e:2d:
34:00:8d:25:3a:38:a6:61:a2:f0:3a:9e:d6:4a:bf:33:90:91:
d8:d3:98:29:52:4d:ef:17:3b:7d:d9:a4:e4:6a:c7:fc:a8:49:
71:9e:fb:f0:61:f5:95:7f:b2:5c:0d:d6:35:d5:47:bb:b1:bd:
88:7c:72:57:52:b2:af:5f:ba:87:06:83:a1:43:0e:f0:08:b4:
64:fa:bc:79:31:5e:6d:56:5c:51:48:84:ec:29:09:28:5f:59:
92:9c:f3:75:2d:37:2b:7c:ef:20:2f:e7:fa:a8:cf:df:28:f4:
85:2b:46:20:b3:53:a0:aa:dd:92:a3:ca:5e:55:93:f6:9c:3e:
5c:a1:dd:3d:3c:55:c3:52:a7:a5:10:f1:94:45:a0:53:5a:85:
30:87:67:50:76:dc:e5:3e:98:79:3b:07:11:ef:e1:61:17:59:
1c:29:05:39:ce:70:1a:0a:57:b5:aa:88:35:8a:37:df:ee:6a:
48:66:82:66:1c:67:9b:eb:13:1a:1e:59:c1:c3:be:1d:e9:44:
88:20:87:1c:79:27:f6:47:9b:b0:a7:aa:c9:3c:39:d4:59:ce:
d5:f4:8d:e3:04:0f:d3:77:c2:23:3b:12:69:b5:44:18:44:e8:
7a:07:fb:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZere3GbJy/0mk7Fpl7eZ5ecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNjI2MDkwNDQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDIzM2UyYTliNmU2MjFlNmVhYjI2ZjgzNWVmZGFjYjJlMzU5NTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnorQ94AoNWOgnOnMMOF+4zTZswhp
gaioj7d36aOsSl4Jn81lyYobKRMmtfZsBaYsy+Q0je8UizZLRbATKScQVNKlTl3B
Qk8T4LJXv7OrqHuQd/6zqYV21mN2gmQzNCF4kf1TDO5N/dCnq/sNZ4ZhH0nhc9JU
J/cqIe9Tc0XigqOuNYbpGKLkU6OeMbXug0a/hs/QgvSQHM/2x+PniVUm7tz8QavW
s2r+1E739Hikwg+CwjdEOeOlCLRphe6pBy+HvTa+MWvwdVeuvgxj61C0CNaeBO9G
AIrt5cz5MpqpKtE05SJS31tDPAKgdMfPuJOquMN3GhQFm/B/3gsZMHYncQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPAjPiqbbmIebqsm+DXv2ssuNZUiMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvOENNLUtwdHVZaDV1cXliNE5lX2F5eTQxbFNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/BzMA0G
CSqGSIb3DQEBCwUAA4IBAQCUqUWasbN6KpTVEidAEIR6Ti00AI0lOjimYaLwOp7W
Sr8zkJHY05gpUk3vFzt92aTkasf8qElxnvvwYfWVf7JcDdY11Ue7sb2IfHJXUrKv
X7qHBoOhQw7wCLRk+rx5MV5tVlxRSITsKQkoX1mSnPN1LTcrfO8gL+f6qM/fKPSF
K0Ygs1Ogqt2So8peVZP2nD5cod09PFXDUqelEPGURaBTWoUwh2dQdtzlPph5OwcR
7+FhF1kcKQU5znAaCle1qog1ijff7mpIZoJmHGeb6xMaHlnBw74d6USIIIcceSf2
R5uwp6rJPDnUWc7V9I3jBA/Td8IjOxJptUQYROh6B/sU
-----END CERTIFICATE-----
Generated at Wed Jul 2 16:29:08 2025 by rpki-client