Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DXlEWk0MgMIgCMQ7NtqHM1p6JHs.roa
File: DXlEWk0MgMIgCMQ7NtqHM1p6JHs.roa (raw, json)
Hash identifier: juHXvBL97cH7mLnCT3uhOzNXS4OUmt1EJXiSz1UxtCs=
Subject key identifier: 0D:79:44:5A:4D:0C:80:C2:20:08:C4:3B:36:DA:87:33:5A:7A:24:7B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199B9925EC5DE49002AB4406B53A8359226
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DXlEWk0MgMIgCMQ7NtqHM1p6JHs.roa
Signing time: Mon 06 Oct 2025 12:50:01 +0000
ROA not before: Mon 06 Oct 2025 12:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49592
IP address blocks: 151.241.17.0/24 maxlen: 24
151.242.111.0/24 maxlen: 24
151.243.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b9:92:5e:c5:de:49:00:2a:b4:40:6b:53:a8:35:92:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 6 12:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d79445a4d0c80c22008c43b36da87335a7a247b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:24:25:11:0e:ab:c9:a6:4e:99:05:b1:4c:
0a:d2:98:19:fb:df:ce:59:ba:78:dd:87:5f:71:22:
2a:7d:71:d0:75:bc:3f:55:96:65:3b:33:67:3a:2f:
25:95:a3:bf:21:35:82:31:a3:d0:63:2b:a8:c6:fb:
98:a3:ad:ef:8d:55:ba:f9:c0:bd:9d:ab:82:a1:05:
71:bb:75:0a:41:84:76:80:ff:b4:f3:b4:08:20:84:
95:f6:06:b3:8f:c9:9e:23:14:b1:61:d2:e9:19:51:
a2:5b:0c:cd:1d:ee:92:d9:2a:1a:9a:08:40:f8:7a:
cb:e3:19:72:5f:76:4f:2e:29:9e:18:2a:bb:08:6f:
d9:59:d1:83:03:98:6f:58:cc:ec:5a:38:4d:a2:d6:
39:d7:40:7f:bf:3d:25:17:24:e6:38:97:95:6b:0c:
9f:a0:19:89:f1:2a:40:c6:72:d8:62:42:0f:0d:91:
99:be:be:c4:16:c5:64:86:b1:6e:82:65:e0:97:ee:
83:64:6f:1f:cf:78:5d:41:48:8d:af:db:26:8f:ea:
cf:bd:24:68:b6:2f:d8:bf:64:45:e9:86:c0:b9:35:
09:8d:f7:31:fa:b1:ed:46:d3:e0:62:b7:f0:47:b6:
fc:6d:07:15:0c:72:31:3b:f1:95:3b:2f:ea:e8:5b:
68:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:79:44:5A:4D:0C:80:C2:20:08:C4:3B:36:DA:87:33:5A:7A:24:7B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DXlEWk0MgMIgCMQ7NtqHM1p6JHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.17.0/24
151.242.111.0/24
151.243.253.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:78:0c:46:8e:3e:23:f6:2c:a7:65:60:e1:16:0e:5a:16:f9:
55:23:8f:86:d6:d6:a9:84:ff:3b:0c:31:ea:c3:42:96:47:2d:
d5:62:29:ec:82:77:67:e7:69:79:d9:8f:d1:b4:5c:e8:26:67:
c8:45:cc:eb:c5:48:34:3f:4b:37:a5:33:7c:5d:40:38:11:65:
66:f6:70:bd:d4:56:02:86:5b:2c:57:99:44:44:3c:bd:86:92:
6b:0a:2e:9f:39:5b:65:df:4c:bf:b2:03:60:16:8e:f2:5c:d6:
41:e7:77:7e:fb:0b:1a:e6:99:ce:05:34:22:b7:68:77:03:21:
63:9e:58:c6:0f:a8:1d:e4:e7:de:45:2b:fe:63:2b:0f:9e:14:
73:2d:67:48:5c:a1:34:64:8e:34:69:fb:e8:2d:49:88:9f:ad:
24:b7:1d:37:ac:ee:24:2a:91:b2:b3:8d:bf:e3:2d:db:09:58:
c4:1d:ca:71:da:3c:80:03:21:5b:fd:9a:48:f1:57:92:16:a0:
d4:1d:e3:0f:25:5f:21:04:b9:0f:aa:90:be:56:c9:98:34:ad:
5c:16:69:f0:ab:91:c5:17:e2:36:d9:51:b5:dc:18:de:94:ce:
9b:fd:05:9e:3f:3e:77:6c:92:85:f9:67:a7:c1:3a:08:9a:9b:
ce:72:2f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:39:52 2025 by rpki-client