Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CS4Qu8VWayIjuTVQeK2oF5o0b7g.roa
File: CS4Qu8VWayIjuTVQeK2oF5o0b7g.roa (raw, json)
Hash identifier: XQsWIyLkIV95+F1dRtBI3xE+XTnk+7FPpaR4o1OCegA=
Subject key identifier: 09:2E:10:BB:C5:56:6B:22:23:B9:35:50:78:AD:A8:17:9A:34:6F:B8
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01991D527231C8A14E686754EA930E303242
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CS4Qu8VWayIjuTVQeK2oF5o0b7g.roa
Signing time: Sat 06 Sep 2025 04:39:26 +0000
ROA not before: Sat 06 Sep 2025 04:39:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207043
IP address blocks: 151.243.18.0/24 maxlen: 24
151.243.28.0/24 maxlen: 24
151.243.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:52:72:31:c8:a1:4e:68:67:54:ea:93:0e:30:32:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 6 04:39:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=092e10bbc5566b2223b9355078ada8179a346fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:e3:7b:4f:df:b7:f9:de:3e:6d:96:f0:b3:
e5:c4:55:10:e7:c2:4f:bb:5e:dc:39:24:54:ad:e7:
88:cb:f9:33:89:60:cb:3a:af:e2:f0:67:a6:f4:92:
1f:84:4a:e8:ad:ec:5a:1d:17:2e:61:47:7d:fb:22:
cf:ac:2c:ee:be:b0:83:14:aa:e3:6e:0a:22:9d:e9:
36:82:61:95:22:e0:4f:ab:56:4f:fa:27:78:57:39:
a3:40:22:12:d9:85:1a:b8:03:d9:af:36:51:0d:c0:
37:b4:ab:15:96:91:63:80:05:67:34:4b:c4:d2:80:
e2:e2:74:94:95:30:f0:b4:af:3d:3e:03:54:4a:9c:
d6:b9:60:41:63:66:8b:7d:4a:f3:69:8c:3f:79:1f:
94:f5:c0:af:58:55:76:51:e7:1d:db:8d:9d:63:9a:
ef:ed:8a:ac:d6:d3:80:2a:f9:72:16:e9:78:27:d9:
d9:91:d2:d9:41:8b:77:ce:29:d2:6d:8b:8e:d6:56:
0f:4d:26:5b:4f:c4:f6:cb:04:22:26:2e:60:27:aa:
4b:45:a2:a9:8b:af:c1:7f:15:48:c3:c1:ea:fa:6c:
f7:62:90:b4:9d:72:d7:09:58:f7:3a:3e:05:09:b1:
d7:81:e9:7a:c4:7d:5c:dc:c3:18:f9:3d:33:a7:0b:
3a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2E:10:BB:C5:56:6B:22:23:B9:35:50:78:AD:A8:17:9A:34:6F:B8
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CS4Qu8VWayIjuTVQeK2oF5o0b7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.18.0/24
151.243.28.0/24
151.243.113.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:80:93:8d:28:02:09:a9:96:d7:fd:fd:42:bb:7f:3f:f1:c1:
73:39:71:de:3e:5e:82:1f:58:82:80:28:c6:fc:8e:d0:f8:46:
cb:e4:4d:de:aa:51:fd:66:21:62:c4:50:1b:43:94:7e:21:16:
89:56:4c:91:26:c2:c7:52:3e:d8:5b:f3:de:f7:61:aa:68:76:
52:6b:cc:0e:8f:95:8b:d6:d4:f1:3b:c1:cf:12:83:9b:af:28:
6f:b6:31:d4:b3:ad:c3:c0:c7:98:09:f6:fd:3c:0c:35:8b:39:
13:9b:16:87:7c:c4:94:71:d9:54:43:e3:5b:58:58:26:e9:cf:
7d:be:86:83:07:a7:32:4b:b9:00:e4:62:bd:9f:a1:52:50:a4:
fa:77:84:ba:3c:28:a0:7e:ce:7b:1f:c0:c2:ef:99:5a:5e:c1:
2e:ad:b0:34:4c:c6:ee:e6:9b:23:cf:cf:d1:08:cb:68:22:b4:
bb:e9:b5:2e:b1:2f:60:55:1a:d9:5c:4c:a2:48:98:16:eb:40:
4a:91:36:2a:c9:f8:30:33:b3:f0:85:09:69:f9:2d:e2:f5:b2:
48:e8:15:25:73:cd:c2:50:1d:a3:b7:2e:5b:62:af:90:54:87:
ab:12:bc:95:0f:75:16:f9:9d:5f:e0:60:d3:b6:d0:bd:d7:1c:
aa:2a:66:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:39:59 2025 by rpki-client