Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9fPytVQntu4P3d9BgYfla2ucenk.roa
File: 9fPytVQntu4P3d9BgYfla2ucenk.roa (raw, json)
Hash identifier: UT75t8sb9pzlL6uSTPm/P0rLWpKL9ouE9G85Vx3Qjhk=
Subject key identifier: F5:F3:F2:B5:54:27:B6:EE:0F:DD:DF:41:81:87:E5:6B:6B:9C:7A:79
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019869397755153660E61C615192D892602A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9fPytVQntu4P3d9BgYfla2ucenk.roa
Signing time: Sat 02 Aug 2025 05:20:30 +0000
ROA not before: Sat 02 Aug 2025 05:20:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53616
IP address blocks: 151.242.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:69:39:77:55:15:36:60:e6:1c:61:51:92:d8:92:60:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 2 05:20:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5f3f2b55427b6ee0fdddf418187e56b6b9c7a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:17:1b:c8:5e:f2:78:16:94:fd:8c:57:31:68:
84:22:92:b6:68:bc:d1:b0:eb:9f:89:22:c8:48:1f:
3d:9a:6e:6f:9e:5c:f4:4f:fe:81:fb:b3:08:c5:cf:
a2:77:b5:97:ad:55:f1:76:b2:d8:7d:18:7f:60:9f:
d7:f7:ea:96:e1:85:fd:a1:b4:18:7d:29:67:dc:0e:
09:86:da:a8:24:ac:23:16:ca:dd:fd:3e:c4:46:09:
02:94:70:dd:09:05:79:89:b1:a5:4d:0b:59:1d:e9:
c8:bd:35:93:a4:4f:06:25:5d:3f:12:66:26:d9:27:
73:c2:2b:e1:64:02:ed:8c:af:e8:31:a5:ff:ef:f5:
94:32:da:45:b3:c4:5f:fb:16:cc:77:99:71:34:c9:
f0:df:b5:ef:68:dd:3a:b2:88:c4:fc:bf:6b:1d:08:
46:3a:4a:d1:8c:30:f4:7a:06:2f:34:1d:90:06:4f:
d4:8b:0e:59:09:1b:9c:58:66:71:c6:60:75:84:fd:
cd:6d:fb:25:66:66:38:68:20:86:59:36:0e:61:1e:
59:ef:45:b6:f8:0c:da:dc:eb:5a:31:25:df:39:0a:
a3:77:73:c4:2b:5f:28:29:5b:e6:e7:35:9b:96:d5:
f9:8a:c6:6b:db:eb:42:2d:c3:f6:ac:01:8e:2b:e3:
20:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F3:F2:B5:54:27:B6:EE:0F:DD:DF:41:81:87:E5:6B:6B:9C:7A:79
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9fPytVQntu4P3d9BgYfla2ucenk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.64.0/24
Signature Algorithm: sha256WithRSAEncryption
38:aa:2d:0c:35:58:01:7e:36:38:7b:40:1a:80:cd:12:dc:df:
e6:4c:f3:c7:69:08:3f:bd:07:24:5c:9c:dc:01:a1:2d:76:aa:
b8:90:56:a8:82:7d:5f:20:ba:c7:18:de:12:5e:7b:83:61:7a:
51:ff:ab:cc:8d:50:04:6c:95:c4:90:0c:8a:83:22:f4:7a:4b:
df:ce:c3:ce:b9:bd:44:ad:cb:1f:d8:bc:6c:a3:11:5b:f7:04:
5e:1b:70:07:88:29:56:1f:22:b3:c2:06:d8:a9:20:1d:fb:64:
4b:d0:5e:83:96:44:c1:1a:75:12:c3:93:3e:4d:7f:ed:8c:e6:
7d:57:ac:33:fb:cb:b7:59:83:4e:ae:7b:43:a1:90:a8:67:cb:
36:23:d7:72:77:e8:ec:06:b2:2f:a2:90:0d:c8:f0:2b:c9:b7:
e1:d5:e4:24:3a:21:fb:7f:07:d6:46:41:cd:7a:8b:dd:3f:b5:
21:23:bb:c3:71:6c:83:bd:b6:44:b2:eb:4f:e1:f7:14:b3:8c:
1e:b4:e0:51:eb:8b:d0:76:93:43:57:06:84:d2:e3:3a:ff:3d:
80:1a:43:48:92:bd:21:21:c7:ba:d3:be:44:ae:b6:f9:41:82:
bf:bd:bf:f6:fc:3d:40:8e:a9:92:94:aa:5f:29:73:2b:a6:68:
0b:e7:6d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:17:01 2025 by rpki-client