Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/955slFYkB_E6TLfu28NSVJyAcgo.roa
File: 955slFYkB_E6TLfu28NSVJyAcgo.roa (raw, json)
Hash identifier: 3CiSEjOgMak/80exim6G+8aVRoO45a2HYL+al0edDq0=
Subject key identifier: F7:9E:6C:94:56:24:07:F1:3A:4C:B7:EE:DB:C3:52:54:9C:80:72:0A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198A395E2B4742E8F5FFF07EDA6F8E1F688
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/955slFYkB_E6TLfu28NSVJyAcgo.roa
Signing time: Wed 13 Aug 2025 13:19:25 +0000
ROA not before: Wed 13 Aug 2025 13:19:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208765
IP address blocks: 151.247.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a3:95:e2:b4:74:2e:8f:5f:ff:07:ed:a6:f8:e1:f6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 13 13:19:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f79e6c94562407f13a4cb7eedbc352549c80720a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:1f:3d:af:4a:d9:78:f1:dc:3b:e5:ca:92:
d1:20:f9:21:4d:b9:86:8e:ac:58:ff:54:8f:c8:31:
15:c7:9f:1c:50:e3:6e:1d:d0:70:9e:f1:f7:f3:25:
2e:66:65:05:ea:0f:64:93:cf:59:38:2a:3b:e5:f0:
a5:e4:7f:f4:ab:ca:12:98:3c:0d:33:f7:5e:ef:eb:
ae:bc:20:b4:a6:06:0a:61:8c:ed:18:72:a1:40:e8:
e6:c2:87:a2:ba:e7:ac:73:9d:13:a0:c5:03:0a:61:
5c:e0:f6:ff:b6:ad:e5:d3:dc:50:76:b0:e3:db:2c:
2e:52:c6:07:51:43:a2:06:1d:f9:e2:13:4a:a6:a9:
ae:ac:7f:4b:81:07:f6:1a:a9:bd:82:69:03:c9:20:
aa:f8:0c:43:d9:82:34:fb:3d:7c:93:58:cc:15:49:
e2:5b:16:f6:62:88:7e:e5:33:8a:16:c2:ca:45:75:
7f:a3:61:c1:39:bf:12:3d:23:e9:eb:f3:62:b4:fe:
1f:59:b0:af:33:8f:c1:93:4d:ee:be:52:5d:9d:bc:
f6:1f:71:91:64:81:42:15:04:3b:25:d2:21:2c:f1:
96:8d:e0:42:72:70:f8:d7:8d:b9:99:b1:fb:54:09:
88:78:6b:53:e7:d7:cb:af:d4:cb:a7:26:78:4c:98:
ed:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9E:6C:94:56:24:07:F1:3A:4C:B7:EE:DB:C3:52:54:9C:80:72:0A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/955slFYkB_E6TLfu28NSVJyAcgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.201.0/24
Signature Algorithm: sha256WithRSAEncryption
62:91:2e:6a:40:6d:3b:15:66:be:e7:be:46:10:87:34:f9:83:
ba:f3:ef:2c:08:0e:b2:05:f8:72:7f:7e:26:74:cb:97:cb:7e:
4c:2e:20:d1:7b:24:cf:0d:98:5c:82:7f:83:35:e1:8a:18:59:
1b:03:df:ac:2d:c5:b8:8f:45:ad:ea:77:c0:a6:60:ee:15:37:
7d:5d:5f:1e:22:6b:8e:33:18:40:55:1a:de:71:04:0f:ef:01:
78:9d:0c:da:98:7e:23:f2:82:86:96:9c:06:7d:20:9e:db:8b:
e9:96:8b:c0:d5:78:5f:c1:25:e1:58:13:ed:aa:5d:f9:11:6a:
9e:a1:11:32:49:d6:26:db:6a:9b:98:73:25:da:3f:0c:e9:0c:
f0:42:d2:5f:f9:dc:d9:60:76:83:c3:4c:86:e5:1f:be:5b:ee:
94:86:32:dd:d9:cf:0c:48:b3:03:33:47:74:bc:cf:05:0f:6e:
8b:6b:dc:fe:67:ad:37:b6:66:12:cb:b0:7f:2a:b0:15:0d:b2:
fd:25:3d:1d:c7:6a:e5:c4:09:b5:32:e6:a7:aa:9e:b9:c8:02:
1b:d6:34:54:ac:ef:5a:93:a8:c1:94:4f:76:6c:65:81:a8:ae:
73:7b:16:2e:38:78:39:a6:d6:68:70:90:df:ce:26:ab:d1:0b:
66:56:41:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZijleK0dC6PX/8H7ab44faIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwODEzMTMxOTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzllNmM5NDU2MjQwN2YxM2E0Y2I3ZWVkYmMzNTI1NDljODA3MjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6AfPa9K2Xjx3DvlypLRIPkhTbmG
jqxY/1SPyDEVx58cUONuHdBwnvH38yUuZmUF6g9kk89ZOCo75fCl5H/0q8oSmDwN
M/de7+uuvCC0pgYKYYztGHKhQOjmwoeiuuesc50ToMUDCmFc4Pb/tq3l09xQdrDj
2ywuUsYHUUOiBh354hNKpqmurH9LgQf2Gqm9gmkDySCq+AxD2YI0+z18k1jMFUni
Wxb2Yoh+5TOKFsLKRXV/o2HBOb8SPSPp6/NitP4fWbCvM4/Bk03uvlJdnbz2H3GR
ZIFCFQQ7JdIhLPGWjeBCcnD41425mbH7VAmIeGtT59fLr9TLpyZ4TJjthQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPeebJRWJAfxOky37tvDUlScgHIKMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvOTU1c2xGWWtCX0U2VExmdTI4TlNWSnlBY2dvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/fJMA0G
CSqGSIb3DQEBCwUAA4IBAQBikS5qQG07FWa+575GEIc0+YO68+8sCA6yBfhyf34m
dMuXy35MLiDReyTPDZhcgn+DNeGKGFkbA9+sLcW4j0Wt6nfApmDuFTd9XV8eImuO
MxhAVRrecQQP7wF4nQzamH4j8oKGlpwGfSCe24vplovA1XhfwSXhWBPtql35EWqe
oREySdYm22qbmHMl2j8M6QzwQtJf+dzZYHaDw0yG5R++W+6UhjLd2c8MSLMDM0d0
vM8FD26La9z+Z603tmYSy7B/KrAVDbL9JT0dx2rlxAm1Muanqp65yAIb1jRUrO9a
k6jBlE92bGWBqK5zexYuOHg5ptZocJDfziar0QtmVkG1
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:09:29 2025 by rpki-client