Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ABo35iSL24hScpgznCKisIAkQC8.roa
File: ABo35iSL24hScpgznCKisIAkQC8.roa (raw, json)
Hash identifier: jOUuFvzb+vx38RNsxcWvjL41jXvDM6jEimDT4pM+1ok=
Subject key identifier: 00:1A:37:E6:24:8B:DB:88:52:72:98:33:9C:22:A2:B0:80:24:40:2F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198BD4FE050239C983EB1430FCC4A19A69D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ABo35iSL24hScpgznCKisIAkQC8.roa
Signing time: Mon 18 Aug 2025 13:13:05 +0000
ROA not before: Mon 18 Aug 2025 13:13:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214563
IP address blocks: 151.241.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bd:4f:e0:50:23:9c:98:3e:b1:43:0f:cc:4a:19:a6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 18 13:13:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=001a37e6248bdb88527298339c22a2b08024402f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:7a:bc:10:a9:ac:de:b4:36:86:72:ab:69:04:
c3:7b:72:3d:f6:3e:ef:d7:05:66:56:f9:7b:4e:b2:
e3:17:46:4e:81:7c:8d:ce:6b:a3:b1:03:99:93:16:
77:ec:5e:d8:a8:14:1c:91:62:9e:5c:aa:8e:18:27:
11:38:a1:c6:ed:bb:60:e2:1a:a2:74:e4:23:39:e3:
b1:9d:83:d6:8c:9b:9d:c2:0a:65:19:6e:c4:ce:28:
68:b9:2f:2a:a7:95:47:0a:da:c0:c7:0a:a9:77:81:
fb:0a:cc:70:d7:be:11:b1:d0:a7:f5:f5:02:64:78:
93:12:7b:96:6a:69:92:08:77:af:e3:a4:72:4e:a9:
17:b7:e6:16:9d:3c:c1:1b:21:94:27:8d:05:17:8f:
6f:19:55:e3:76:ac:6e:fc:3a:81:31:c3:27:3a:58:
ff:81:a4:32:99:f2:6a:1b:8d:1b:16:3f:8a:07:7e:
cf:e2:39:ba:88:02:00:c5:53:70:b0:18:a7:7c:e3:
08:e6:30:dc:f7:31:ed:e3:3a:ec:ca:fa:f3:62:51:
fc:c7:24:15:04:de:25:99:67:b8:7c:25:10:6a:fb:
e9:97:79:92:2a:e7:90:9f:12:4a:87:be:ab:74:cc:
59:f2:94:e7:00:8c:44:35:97:b8:66:fd:e5:9f:dc:
08:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1A:37:E6:24:8B:DB:88:52:72:98:33:9C:22:A2:B0:80:24:40:2F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ABo35iSL24hScpgznCKisIAkQC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.23.0/24
Signature Algorithm: sha256WithRSAEncryption
83:39:8a:21:5c:d6:e7:cd:09:66:06:6c:fd:e1:e1:91:1b:0e:
f7:f2:bf:1f:3e:40:3d:aa:37:c1:ec:77:37:f0:02:0e:2f:7f:
19:09:f8:ef:24:fe:59:e0:40:13:e4:14:40:c3:90:f0:3e:e0:
50:2d:b0:b5:65:af:81:93:db:72:31:99:98:83:65:7a:4c:7d:
42:eb:a0:2b:90:98:95:58:7d:25:39:5f:34:d5:c8:78:b7:6e:
a7:7e:03:cc:a0:35:83:1b:76:36:3d:9e:f4:0c:96:41:53:a8:
67:26:6d:ff:1c:41:0c:e7:3f:24:3e:d4:39:dd:df:3f:ef:df:
41:4c:71:24:9b:e8:79:61:b1:5f:58:cc:05:e3:55:aa:4e:ce:
6d:3a:31:c4:5b:b0:2a:c4:43:3e:3f:96:10:c0:2e:ac:c4:34:
ed:bf:88:44:fc:ec:3d:27:4b:ae:88:c4:f7:83:10:6c:2d:c5:
8e:07:2c:d4:e8:d1:56:47:3b:da:07:12:c6:cf:a6:57:df:ff:
d6:ef:ae:64:de:32:99:cd:1e:b4:5a:7c:09:80:dc:df:a3:28:
8e:7e:db:13:99:81:26:51:68:40:77:97:c7:ec:f8:71:f3:34:
99:df:84:a6:cc:d4:5d:0f:2b:88:30:d5:fa:53:21:cc:29:3a:
4f:32:b6:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZi9T+BQI5yYPrFDD8xKGaadMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwODE4MTMxMzA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDFhMzdlNjI0OGJkYjg4NTI3Mjk4MzM5YzIyYTJiMDgwMjQ0MDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+nq8EKms3rQ2hnKraQTDe3I99j7v
1wVmVvl7TrLjF0ZOgXyNzmujsQOZkxZ37F7YqBQckWKeXKqOGCcROKHG7btg4hqi
dOQjOeOxnYPWjJudwgplGW7EzihouS8qp5VHCtrAxwqpd4H7Csxw174RsdCn9fUC
ZHiTEnuWammSCHev46RyTqkXt+YWnTzBGyGUJ40FF49vGVXjdqxu/DqBMcMnOlj/
gaQymfJqG40bFj+KB37P4jm6iAIAxVNwsBinfOMI5jDc9zHt4zrsyvrzYlH8xyQV
BN4lmWe4fCUQavvpl3mSKueQnxJKh76rdMxZ8pTnAIxENZe4Zv3ln9wIBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAAaN+Yki9uIUnKYM5wiorCAJEAvMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvQUJvMzVpU0wyNGhTY3Bnem5DS2lzSUFrUUM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/EXMA0G
CSqGSIb3DQEBCwUAA4IBAQCDOYohXNbnzQlmBmz94eGRGw738r8fPkA9qjfB7Hc3
8AIOL38ZCfjvJP5Z4EAT5BRAw5DwPuBQLbC1Za+Bk9tyMZmYg2V6TH1C66ArkJiV
WH0lOV801ch4t26nfgPMoDWDG3Y2PZ70DJZBU6hnJm3/HEEM5z8kPtQ53d8/799B
THEkm+h5YbFfWMwF41WqTs5tOjHEW7AqxEM+P5YQwC6sxDTtv4hE/Ow9J0uuiMT3
gxBsLcWOByzU6NFWRzvaBxLGz6ZX3//W765k3jKZzR60WnwJgNzfoyiOftsTmYEm
UWhAd5fH7Phx8zSZ34SmzNRdDyuIMNX6UyHMKTpPMrZ3
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:08:46 2025 by rpki-client