Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8X9UMn2YWN4m1hBTFTwfq6BWBk8.roa
File: 8X9UMn2YWN4m1hBTFTwfq6BWBk8.roa (raw, json)
Hash identifier: 3QAxAkPIlpdLPn71bV2Hkfksi7PmX3sxxoBbrbvcCk4=
Subject key identifier: F1:7F:54:32:7D:98:58:DE:26:D6:10:53:15:3C:1F:AB:A0:56:06:4F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01999F25922C78CD90D01CF1E2081B47B2A9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8X9UMn2YWN4m1hBTFTwfq6BWBk8.roa
Signing time: Wed 01 Oct 2025 09:41:03 +0000
ROA not before: Wed 01 Oct 2025 09:41:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 398256
IP address blocks: 151.241.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9f:25:92:2c:78:cd:90:d0:1c:f1:e2:08:1b:47:b2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 1 09:41:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f17f54327d9858de26d61053153c1faba056064f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:37:1e:7c:7b:11:b2:1c:8b:db:b8:ec:be:fc:
a4:b7:d3:bf:78:f5:b6:2f:cb:54:4e:34:03:54:23:
f0:94:aa:8e:30:38:51:95:24:61:dc:c5:1a:05:49:
d4:44:38:c4:e2:77:dd:8c:0b:27:d0:02:19:e1:91:
da:0f:5d:f8:64:d3:59:e5:02:6b:5f:50:b4:a5:2e:
15:f9:5e:92:cd:0a:ff:59:e0:20:a0:7f:9f:cb:ad:
99:d4:7d:cb:be:e1:c2:37:4f:4e:0d:4f:d8:18:97:
7c:b3:a3:90:bb:eb:47:08:35:a9:b2:db:cf:59:32:
e3:3f:35:c7:49:74:a4:d4:c2:af:a7:93:67:8e:bf:
57:aa:61:bc:11:a9:92:a2:d4:5b:27:78:ee:69:51:
51:d0:94:01:4c:15:a0:79:f9:24:09:8c:b7:d7:e7:
31:f2:a2:08:ff:94:4a:76:0b:59:fb:55:b0:b0:61:
e9:78:1f:7f:01:b0:32:fc:94:be:9d:a4:49:80:25:
e9:80:2e:03:7e:77:87:d9:f8:a1:14:48:2c:b9:18:
96:81:4b:76:92:d6:84:db:7c:83:bd:92:c5:a5:01:
38:e1:12:72:41:d5:19:30:73:d5:e9:89:98:fe:83:
2b:cc:18:1e:7d:50:c2:45:07:ca:5f:66:41:59:e5:
07:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7F:54:32:7D:98:58:DE:26:D6:10:53:15:3C:1F:AB:A0:56:06:4F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8X9UMn2YWN4m1hBTFTwfq6BWBk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.117.0/24
Signature Algorithm: sha256WithRSAEncryption
53:3a:7d:71:17:3f:fc:c6:58:b9:b6:78:ac:04:46:6f:18:b6:
28:93:ca:58:2c:fc:40:72:e9:2c:b7:ea:ae:ec:12:13:84:a3:
0d:3d:db:7d:28:6d:9a:b5:0e:6f:90:fd:2d:d5:d5:bf:61:d8:
a5:20:85:12:f2:5e:fb:0b:9b:3e:57:ec:a8:81:55:9d:47:1a:
b4:dc:09:bc:2c:b1:1f:81:1a:f3:33:d5:66:88:9f:a3:31:b6:
95:9b:b8:1d:ed:71:24:b1:ff:2a:e0:b5:7c:90:0b:d6:b5:78:
37:35:99:3f:de:d7:e7:9c:96:ab:67:8b:da:8c:c6:0e:72:9a:
c8:5c:a1:14:e4:11:cd:5a:c3:22:24:dc:13:35:e1:29:7b:8c:
4a:61:2c:a1:32:93:c8:5a:a8:fe:bf:01:b4:6d:83:79:46:03:
ef:5b:80:c4:42:bf:17:85:a3:90:2d:98:3f:c1:a1:b1:08:a9:
58:56:94:b8:91:79:c6:f4:2f:4c:e8:6a:83:1d:3e:07:0f:d8:
58:d4:47:93:6d:d8:29:37:07:0c:55:1c:64:f7:11:8c:1a:63:
59:99:a9:c0:4c:21:a2:83:2e:15:d1:ff:1b:b3:30:d2:3f:f2:
03:41:29:2d:1a:de:83:54:dd:7b:11:16:33:95:2b:f2:d6:bf:
34:b8:a8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:07:04 2025 by rpki-client