Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8yH8mzakbqWphUZE6Rfa05a6j_4.roa
File: 8yH8mzakbqWphUZE6Rfa05a6j_4.roa (raw, json)
Hash identifier: Y+x97qPe+DUN4sW1HB6Ok4F3eIGvXUuy7ShL/akB2ig=
Subject key identifier: F3:21:FC:9B:36:A4:6E:A5:A9:85:46:44:E9:17:DA:D3:96:BA:8F:FE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199DD2A43CB3DDFBCD9B92CB1543EB801EA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8yH8mzakbqWphUZE6Rfa05a6j_4.roa
Signing time: Mon 13 Oct 2025 10:42:38 +0000
ROA not before: Mon 13 Oct 2025 10:42:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21840
IP address blocks: 151.240.76.0/24 maxlen: 24
151.243.31.0/24 maxlen: 24
151.244.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Oct 2025 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dd:2a:43:cb:3d:df:bc:d9:b9:2c:b1:54:3e:b8:01:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 13 10:42:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f321fc9b36a46ea5a9854644e917dad396ba8ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:91:30:c4:66:6d:13:8c:54:5c:95:be:95:5d:
c1:60:dd:90:c5:00:95:c0:13:6e:30:24:32:64:be:
12:0c:8a:b8:16:f5:30:f3:56:c1:92:b0:db:72:aa:
fc:bb:4c:9e:64:78:a2:e7:3a:3e:4e:69:b3:22:78:
3d:6f:2d:6d:8c:5b:27:9d:57:a4:5d:94:11:ff:cf:
29:12:33:e2:13:dc:af:9e:f1:65:9b:d8:0a:31:a3:
d5:ca:17:0f:79:f5:cc:f1:b6:35:2b:a6:19:1b:14:
5e:d2:c5:27:b9:66:80:74:4b:07:1c:94:64:44:6c:
14:91:7e:97:33:f8:89:d8:d0:d5:f1:ab:8e:97:a9:
ae:b2:4e:b3:95:50:53:cd:5d:86:0d:7a:2b:79:d7:
34:d4:57:1a:0d:1e:e8:84:b5:3c:fa:c1:68:d9:14:
82:be:1f:91:f8:ca:8a:04:16:fb:d2:00:c0:11:5f:
e0:90:9f:bf:9f:63:25:b3:42:59:46:5f:65:ba:49:
60:1e:f9:10:45:eb:95:6e:c3:66:60:da:b5:7d:de:
01:f1:d3:e9:53:fb:49:c2:4c:50:b5:af:ab:37:58:
3b:df:02:c6:41:dd:ab:35:a8:24:6d:db:e3:a0:c8:
b2:d1:45:76:b0:36:6e:07:f2:9e:d5:b6:04:b3:11:
7e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:21:FC:9B:36:A4:6E:A5:A9:85:46:44:E9:17:DA:D3:96:BA:8F:FE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8yH8mzakbqWphUZE6Rfa05a6j_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.76.0/24
151.243.31.0/24
151.244.213.0/24
Signature Algorithm: sha256WithRSAEncryption
91:ed:41:86:e0:3f:0a:16:43:04:b0:2b:72:dd:d1:5f:25:00:
cd:cf:e2:a8:34:e0:61:6e:75:34:02:d7:5b:04:3a:06:94:05:
8d:b0:a9:cd:dd:02:ef:83:e1:43:c8:59:ec:27:1c:81:e8:f8:
5e:a3:83:d3:96:8d:c2:4d:c5:fd:99:df:16:f4:86:70:b4:64:
45:0d:f7:52:d0:20:55:0f:ac:07:7e:73:df:38:b9:fd:68:38:
05:08:03:05:88:23:4c:55:01:da:54:4a:1f:b8:21:cf:29:58:
ab:fa:4b:c0:c1:af:57:96:ca:c3:ef:0a:8f:87:5a:53:38:7e:
03:5e:b2:03:87:72:db:d7:7f:4d:58:e5:f4:aa:46:c7:10:61:
a4:fa:f8:fb:69:f9:97:da:90:b7:44:76:7b:c5:d7:45:64:c8:
5b:ff:e0:36:86:45:19:67:f2:71:5b:cb:46:dd:d4:32:3f:2d:
c6:bb:a3:60:a7:0d:d9:c9:7d:47:31:7d:38:00:42:55:97:97:
ba:2b:b5:79:a8:55:18:ca:83:d8:9e:b4:c4:2f:c1:b2:c0:e6:
bd:be:91:11:2b:d0:e9:d2:41:ed:ee:fb:99:5d:75:e4:bf:fa:
c5:13:8f:c1:43:e6:51:54:bb:34:2b:9b:ac:ed:88:37:42:7c:
96:f1:93:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 05:05:38 2025 by rpki-client