Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/APXv0rB5qhvg1FqjPm9UuZFNmJQ.roa
File: APXv0rB5qhvg1FqjPm9UuZFNmJQ.roa (raw, json)
Hash identifier: 3+ZAzQQV+APSEApgqJdZMD5b4IvGSrj+SaX6VdJrwlY=
Subject key identifier: 00:F5:EF:D2:B0:79:AA:1B:E0:D4:5A:A3:3E:6F:54:B9:91:4D:98:94
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199523D5F784E64DF925917F476DEF9F9A5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/APXv0rB5qhvg1FqjPm9UuZFNmJQ.roa
Signing time: Tue 16 Sep 2025 11:16:17 +0000
ROA not before: Tue 16 Sep 2025 11:16:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205942
IP address blocks: 151.244.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:3d:5f:78:4e:64:df:92:59:17:f4:76:de:f9:f9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 16 11:16:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00f5efd2b079aa1be0d45aa33e6f54b9914d9894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:1b:2c:cc:d6:34:10:1b:b0:86:fd:23:2d:
15:a9:12:24:e5:9e:71:c8:84:a1:6a:5c:e1:d3:48:
c4:78:e6:27:3e:90:29:7b:ed:80:ec:62:4c:0a:9d:
43:03:a9:09:71:82:80:aa:eb:94:fd:53:90:0a:56:
e4:c7:12:ce:82:aa:d6:f0:05:18:19:7e:a6:f0:8e:
04:aa:52:b4:d8:f5:02:ba:94:4e:c2:a2:52:71:99:
1a:0c:9a:5c:7e:6d:b0:e5:67:41:0e:b6:0f:3c:7b:
5c:bd:27:e1:4d:54:6a:68:4a:4e:70:70:b4:cd:8a:
6d:5c:5c:8d:aa:ec:b5:31:5c:b1:d8:db:bb:45:58:
b1:12:41:ef:86:5a:5e:91:7b:29:30:c3:e1:5a:35:
19:2f:5b:81:ba:66:d1:6a:6d:5d:02:c3:3c:e9:8d:
e8:a4:19:6e:d4:9c:bd:a9:90:ff:53:4d:a8:36:43:
fe:e8:47:9b:e4:ec:ca:fa:75:6a:c1:65:6e:22:f0:
10:a2:b8:54:26:a6:10:5f:a9:66:83:94:85:c4:5d:
bf:6d:d2:0e:81:b2:5a:9d:8a:55:da:d2:60:de:42:
a2:4e:a7:89:e8:1f:9b:b0:e1:45:d3:b3:5b:64:cf:
c9:d2:3d:24:94:9c:5e:e1:ca:28:2e:0b:bc:75:41:
2a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F5:EF:D2:B0:79:AA:1B:E0:D4:5A:A3:3E:6F:54:B9:91:4D:98:94
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/APXv0rB5qhvg1FqjPm9UuZFNmJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.93.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:44:b5:27:02:70:9b:13:60:fd:c2:ee:56:42:c4:3e:38:90:
5c:59:1e:fb:ae:e4:95:fb:f2:30:ed:27:b9:59:da:13:84:2a:
04:c3:de:a5:c4:65:23:98:04:4f:99:55:08:a8:71:2e:30:a9:
c2:97:73:c8:d4:65:82:5b:b0:1c:4e:c2:9e:e7:7c:8e:97:b0:
f9:50:f8:92:de:5f:f0:d6:70:0c:9a:01:6a:cd:4a:68:ea:35:
3b:ec:ab:51:2b:7b:bd:2e:f6:64:ee:53:04:9e:e5:d3:9b:0e:
23:13:1a:ea:25:17:e9:09:5c:d5:3f:8d:90:21:e6:89:1c:83:
38:06:84:e7:c0:d4:23:99:93:4c:f1:a4:29:a6:d6:da:8f:40:
54:4f:e8:7b:a9:3b:74:7a:ec:08:bf:03:bf:5d:18:ec:6f:16:
d1:9a:57:51:9c:cf:b4:7a:9d:5f:cd:d2:d5:ff:9e:a5:c8:71:
aa:ae:1c:d1:e6:82:6c:53:85:ca:9e:3c:f2:b5:f7:f4:23:70:
8f:85:c0:7c:8b:4e:72:ca:8e:f8:b4:e8:3e:91:6e:a5:4e:f8:
c9:0e:0a:09:08:d2:30:4e:e2:58:91:90:b1:8e:c7:66:c8:76:
2e:5b:ce:aa:eb:fd:4a:79:a4:a1:53:7c:24:cb:5c:4e:51:96:
20:c8:0e:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZlSPV94TmTfklkX9Hbe+fmlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwOTE2MTExNjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGY1ZWZkMmIwNzlhYTFiZTBkNDVhYTMzZTZmNTRiOTkxNGQ5ODk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMgbLMzWNBAbsIb9Iy0VqRIk5Z5x
yIShalzh00jEeOYnPpApe+2A7GJMCp1DA6kJcYKAquuU/VOQClbkxxLOgqrW8AUY
GX6m8I4EqlK02PUCupROwqJScZkaDJpcfm2w5WdBDrYPPHtcvSfhTVRqaEpOcHC0
zYptXFyNquy1MVyx2Nu7RVixEkHvhlpekXspMMPhWjUZL1uBumbRam1dAsM86Y3o
pBlu1Jy9qZD/U02oNkP+6Eeb5OzK+nVqwWVuIvAQorhUJqYQX6lmg5SFxF2/bdIO
gbJanYpV2tJg3kKiTqeJ6B+bsOFF07NbZM/J0j0klJxe4cooLgu8dUEqwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAD179Kweaob4NRaoz5vVLmRTZiUMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvQVBYdjByQjVxaHZnMUZxalBtOVV1WkZObUpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/RdMA0G
CSqGSIb3DQEBCwUAA4IBAQBKRLUnAnCbE2D9wu5WQsQ+OJBcWR77ruSV+/Iw7Se5
WdoThCoEw96lxGUjmARPmVUIqHEuMKnCl3PI1GWCW7AcTsKe53yOl7D5UPiS3l/w
1nAMmgFqzUpo6jU77KtRK3u9LvZk7lMEnuXTmw4jExrqJRfpCVzVP42QIeaJHIM4
BoTnwNQjmZNM8aQpptbaj0BUT+h7qTt0euwIvwO/XRjsbxbRmldRnM+0ep1fzdLV
/56lyHGqrhzR5oJsU4XKnjzytff0I3CPhcB8i05yyo74tOg+kW6lTvjJDgoJCNIw
TuJYkZCxjsdmyHYuW86q6/1KeaShU3wky1xOUZYgyA5Y
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:08:51 2025 by rpki-client