Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ADJFtdSGuaoA8elNS0skync12oc.roa
File: ADJFtdSGuaoA8elNS0skync12oc.roa (raw, json)
Hash identifier: OdnN9HxbfpNHnxjkTxmWt1Wcw402i2V2WmtMcKEjT68=
Subject key identifier: 00:32:45:B5:D4:86:B9:AA:00:F1:E9:4D:4B:4B:24:CA:77:35:DA:87
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199E27F500B49D28738FC49D2D5D57822F5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ADJFtdSGuaoA8elNS0skync12oc.roa
Signing time: Tue 14 Oct 2025 11:33:38 +0000
ROA not before: Tue 14 Oct 2025 11:33:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133337
IP address blocks: 151.242.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e2:7f:50:0b:49:d2:87:38:fc:49:d2:d5:d5:78:22:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 14 11:33:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=003245b5d486b9aa00f1e94d4b4b24ca7735da87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b6:3d:96:17:78:14:e5:17:b7:61:3f:3e:e1:
9e:ba:b4:72:a5:bf:4e:67:5a:d7:37:c4:ed:fe:b6:
6e:b4:00:24:b6:94:fa:05:db:b5:75:11:9d:7c:5a:
a0:a7:9c:1a:bb:14:a4:95:eb:b3:11:fd:9c:97:48:
db:a0:ff:d9:ac:ff:88:55:f7:b2:38:07:8a:2a:37:
96:57:db:60:f8:7b:cb:39:a5:0c:1c:e6:e5:e7:52:
35:2e:d1:79:62:b3:c6:c3:d1:13:85:d7:69:d9:f0:
d3:ac:9d:ca:da:4b:57:8a:22:1e:6a:6b:66:25:aa:
7c:03:39:fd:07:06:c6:10:e7:84:97:57:be:a0:0c:
08:83:b9:5f:2f:b2:86:f4:86:8d:1c:83:2b:6f:b4:
53:c7:81:21:d9:75:ce:1f:b0:74:28:71:7b:21:fb:
c0:11:35:64:1e:44:05:e8:70:77:20:e4:97:03:05:
d7:c0:75:22:3c:4f:8e:f9:62:3a:23:40:c5:cb:44:
69:d8:e2:32:fa:ee:a1:42:ef:78:4a:ef:98:ce:e0:
ad:ed:a9:75:a4:96:44:b9:38:1c:b5:36:0b:08:da:
1b:92:c9:ab:0b:55:d0:9f:ea:69:ef:ad:11:20:a9:
08:e5:5f:dd:4b:1e:0e:8b:e9:12:44:03:0e:c2:5d:
6a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:32:45:B5:D4:86:B9:AA:00:F1:E9:4D:4B:4B:24:CA:77:35:DA:87
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ADJFtdSGuaoA8elNS0skync12oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.204.0/24
Signature Algorithm: sha256WithRSAEncryption
55:00:62:a9:37:3a:ae:c1:34:4e:f1:75:91:03:cd:db:0d:9a:
8b:b1:96:d9:19:08:df:da:76:b8:87:3c:20:2a:a4:3f:b4:1f:
e3:e5:34:16:9b:99:9c:ad:13:e6:62:a2:a9:8b:bc:08:db:52:
84:6b:76:30:cc:7a:89:89:63:51:5a:a3:11:02:cf:f0:49:50:
3a:a2:86:11:7b:83:69:eb:71:75:ad:c7:80:2d:e1:c3:4e:db:
dd:cd:02:42:99:09:eb:62:65:2d:2f:0e:ea:4a:84:fd:01:dc:
66:81:75:b5:58:7f:24:fa:8e:25:4f:f9:98:5d:46:52:cb:92:
ec:e5:f0:39:1c:68:98:ab:39:72:16:e0:5e:b1:a4:8f:e1:38:
34:4c:ac:ef:db:60:ac:ff:90:ab:96:81:32:af:d6:22:05:b7:
ce:ea:af:ef:89:4d:bf:ac:5a:07:e9:63:55:7f:7b:6b:76:c1:
2a:03:3e:b4:63:ff:e8:ec:17:ab:70:97:ca:da:98:f2:3c:d9:
ac:5f:ff:4b:cb:8d:aa:c2:44:f3:4d:9b:9b:4c:f3:60:d2:9e:
21:a5:df:b8:13:df:4e:93:ff:30:58:f8:c5:1e:4f:52:74:4a:
fe:14:e8:c1:d9:e8:9a:03:c7:b5:e9:f7:db:a3:52:bf:af:93:
d6:b8:02:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:26 2025 by rpki-client