Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DbfF1SrDTmO45kTODmuX8InEPp4.roa
File: DbfF1SrDTmO45kTODmuX8InEPp4.roa (raw, json)
Hash identifier: 4aMWnMTdd0qwWfRvqkbh6lFK94/7knxh04dA73Oy7a4=
Subject key identifier: 0D:B7:C5:D5:2A:C3:4E:63:B8:E6:44:CE:0E:6B:97:F0:89:C4:3E:9E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199F5988D9298BB31698F8C5D66DB2FBE59
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DbfF1SrDTmO45kTODmuX8InEPp4.roa
Signing time: Sat 18 Oct 2025 04:33:59 +0000
ROA not before: Sat 18 Oct 2025 04:33:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34927
IP address blocks: 151.244.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f5:98:8d:92:98:bb:31:69:8f:8c:5d:66:db:2f:be:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 18 04:33:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0db7c5d52ac34e63b8e644ce0e6b97f089c43e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:3b:47:b4:de:58:39:ad:dc:a5:24:78:99:
47:eb:94:d8:6e:54:80:b1:bc:b2:e3:4c:be:49:75:
2b:a1:00:a1:ed:53:f6:2e:f1:00:2b:c4:4d:50:ab:
4f:54:5f:e3:10:92:34:ec:52:9e:fa:e2:b0:ec:bd:
1d:ce:0f:0d:72:fd:6b:02:c8:1f:da:30:c6:8f:1c:
28:d9:26:c5:04:27:5f:d6:bf:be:da:76:97:c0:d5:
f1:76:7d:7d:c0:59:6b:9a:39:dd:37:c6:85:68:a7:
c2:dd:3c:21:84:63:10:c6:fa:37:a5:b9:bc:ff:96:
6e:f7:04:74:8b:d6:f6:38:0c:ca:53:29:ae:c1:af:
cd:56:8e:dc:4b:07:17:77:bf:42:92:f6:03:ca:d3:
64:15:24:a6:b0:37:1b:b3:7c:1a:5b:20:9a:1d:ae:
3a:b7:8d:06:68:9c:c1:e7:b7:42:09:8d:3c:e5:2c:
d3:b8:74:61:fc:fd:ca:26:bb:83:2b:64:b3:00:2a:
cd:db:85:e6:ad:be:7b:0e:b2:d6:32:3b:84:11:28:
d0:44:d5:5d:29:b6:6c:bb:d9:65:95:08:e9:18:e0:
7e:21:ff:c6:17:88:1c:2a:3d:e3:b9:3c:0d:f2:f5:
4e:19:fa:15:fb:91:06:95:a9:01:84:51:41:e4:b7:
e0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B7:C5:D5:2A:C3:4E:63:B8:E6:44:CE:0E:6B:97:F0:89:C4:3E:9E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DbfF1SrDTmO45kTODmuX8InEPp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.126.0/24
Signature Algorithm: sha256WithRSAEncryption
37:a3:86:e9:12:dc:ca:4b:91:49:1d:6b:40:b3:cc:bd:e9:3d:
29:20:bd:25:63:ce:d1:60:1e:99:0e:bb:3c:f7:cc:67:19:38:
1d:79:6d:3f:07:cc:7c:7e:af:7f:e9:6c:52:4f:54:b0:2c:cf:
f6:7a:9f:ec:33:e0:59:4f:fa:b8:ae:54:06:86:0d:15:62:40:
7b:3a:13:a0:f5:fa:e3:04:9f:f6:fc:a5:4c:fb:1b:f6:c4:da:
05:b4:e9:c6:2b:2c:a1:01:68:ec:75:d6:f3:fa:68:df:fc:ff:
94:06:a5:7b:0e:be:77:e8:da:7a:ae:de:c1:6f:6a:f4:92:16:
b8:4a:71:53:a8:71:8e:c5:17:d6:a0:45:b7:e9:51:f0:a2:38:
7a:d7:1b:c9:b9:0d:b3:6a:3d:05:d7:81:bd:53:e9:a8:57:48:
e0:da:ab:86:80:8a:1b:c4:b0:d4:92:ae:6a:4e:13:d0:61:35:
16:e3:fa:a2:55:d2:ea:53:51:ce:a8:ab:50:27:bf:b0:1f:42:
20:27:bd:3c:72:a3:f1:f1:22:f3:8f:bc:d5:14:5f:d4:d5:8b:
11:e0:ff:1d:eb:0e:18:0d:5b:cc:1e:c1:24:ed:97:85:7b:9d:
ab:0f:ba:d7:21:b8:8f:af:fc:ac:ad:e1:15:32:0f:4b:e7:a4:
ba:b7:76:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZn1mI2SmLsxaY+MXWbbL75ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUxMDE4MDQzMzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGI3YzVkNTJhYzM0ZTYzYjhlNjQ0Y2UwZTZiOTdmMDg5YzQzZTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1E7R7TeWDmt3KUkeJlH65TYblSA
sbyy40y+SXUroQCh7VP2LvEAK8RNUKtPVF/jEJI07FKe+uKw7L0dzg8Ncv1rAsgf
2jDGjxwo2SbFBCdf1r++2naXwNXxdn19wFlrmjndN8aFaKfC3TwhhGMQxvo3pbm8
/5Zu9wR0i9b2OAzKUymuwa/NVo7cSwcXd79CkvYDytNkFSSmsDcbs3waWyCaHa46
t40GaJzB57dCCY085SzTuHRh/P3KJruDK2SzACrN24Xmrb57DrLWMjuEESjQRNVd
KbZsu9lllQjpGOB+If/GF4gcKj3juTwN8vVOGfoV+5EGlakBhFFB5Lfg+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA23xdUqw05juOZEzg5rl/CJxD6eMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvRGJmRjFTckRUbU80NWtUT0RtdVg4SW5FUHA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/R+MA0G
CSqGSIb3DQEBCwUAA4IBAQA3o4bpEtzKS5FJHWtAs8y96T0pIL0lY87RYB6ZDrs8
98xnGTgdeW0/B8x8fq9/6WxST1SwLM/2ep/sM+BZT/q4rlQGhg0VYkB7OhOg9frj
BJ/2/KVM+xv2xNoFtOnGKyyhAWjsddbz+mjf/P+UBqV7Dr536Np6rt7Bb2r0kha4
SnFTqHGOxRfWoEW36VHwojh61xvJuQ2zaj0F14G9U+moV0jg2quGgIobxLDUkq5q
ThPQYTUW4/qiVdLqU1HOqKtQJ7+wH0IgJ708cqPx8SLzj7zVFF/U1YsR4P8d6w4Y
DVvMHsEk7ZeFe52rD7rXIbiPr/ysreEVMg9L56S6t3Ze
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:12 2025 by rpki-client