Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/E6w5DSfdum30YDJTn8pFSUEl5fo.roa
File: E6w5DSfdum30YDJTn8pFSUEl5fo.roa (raw, json)
Hash identifier: l9rvTlp3EtfnLSOqqRoQZQD/9tudBcJUnI32nPx0BXI=
Subject key identifier: 13:AC:39:0D:27:DD:BA:6D:F4:60:32:53:9F:CA:45:49:41:25:E5:FA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199B2ED519E0AE0992FE3B0B4FCCF2DFF64
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/E6w5DSfdum30YDJTn8pFSUEl5fo.roa
Signing time: Sun 05 Oct 2025 05:52:01 +0000
ROA not before: Sun 05 Oct 2025 05:52:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400529
IP address blocks: 151.241.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b2:ed:51:9e:0a:e0:99:2f:e3:b0:b4:fc:cf:2d:ff:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 5 05:52:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13ac390d27ddba6df46032539fca45494125e5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fd:f5:a4:12:68:fa:59:5e:e2:b0:ea:51:ea:
a6:3e:2f:ab:ce:f7:e8:10:3b:62:56:f3:e3:c9:be:
7a:cf:55:21:2a:21:4c:ef:77:ef:49:66:74:47:7a:
61:00:fb:59:0b:de:3b:16:e0:be:f4:31:f2:33:86:
c4:18:6e:87:9e:37:40:39:66:03:7b:83:90:17:7a:
c9:6e:35:f6:8a:73:78:d8:46:39:3b:cc:94:a9:53:
c1:0f:c4:c3:03:10:6f:32:d2:1d:51:4d:aa:76:16:
1f:35:e5:01:04:06:f3:48:51:be:29:f1:93:b1:ab:
76:e0:b9:89:2f:2d:21:79:94:78:c5:51:e9:28:be:
4a:2c:1f:36:c3:27:ca:74:ec:85:c0:d4:39:e1:a4:
ac:31:b1:3f:c8:c0:b4:66:3a:06:3f:c1:97:26:e1:
19:d5:6e:f2:a6:ad:96:89:86:e1:50:79:57:11:0b:
f6:ec:cb:22:98:cf:34:98:c5:f2:0b:0b:cd:48:37:
19:9a:80:31:24:4c:d2:58:04:ac:59:27:dc:c4:29:
80:7a:e2:43:3a:38:a0:33:71:27:20:8d:f3:bb:55:
c8:17:0e:c8:3b:7f:9c:df:b9:24:f0:34:8a:e6:99:
a0:05:b3:cf:13:37:fe:1a:71:6f:bd:c0:85:70:41:
44:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AC:39:0D:27:DD:BA:6D:F4:60:32:53:9F:CA:45:49:41:25:E5:FA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/E6w5DSfdum30YDJTn8pFSUEl5fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.18.0/24
Signature Algorithm: sha256WithRSAEncryption
87:31:f8:28:ff:46:2a:8e:8c:89:c6:1f:73:53:f4:bd:8b:c6:
55:e8:e8:37:4d:1b:7e:60:5d:d4:44:00:e3:7d:c7:1c:4b:10:
bd:12:ec:32:b3:51:4c:73:93:55:5d:fc:18:04:b4:84:2f:b4:
3b:f8:7a:50:ec:93:a9:60:ff:b2:01:ca:df:85:80:82:8e:47:
3e:99:7b:57:b3:50:57:24:f5:60:47:7e:99:4e:94:c3:96:16:
fe:58:fc:34:74:32:6b:3c:3a:08:48:e0:9a:d8:dc:64:7c:ac:
ca:32:bc:ca:88:e0:d2:f2:ab:57:00:de:25:b6:72:aa:ab:52:
22:af:d2:65:d3:e6:29:d2:19:59:16:48:26:e3:e2:62:57:df:
dc:3e:31:d3:ed:42:7b:55:ac:4a:aa:19:36:d1:97:9f:8b:72:
3f:e4:e8:d7:bd:93:14:b2:61:ec:af:b2:79:b6:d6:e6:ca:d8:
9e:3d:21:97:ff:a9:f2:a0:8f:df:38:48:ed:f7:fd:13:8b:63:
68:26:a2:64:01:2e:ff:b3:90:09:0c:10:33:66:07:6b:ff:d6:
68:1c:05:50:1b:7d:98:1c:d6:78:e1:6a:46:e8:3c:8e:5e:24:
8a:66:3d:c9:9f:7b:3f:b2:a4:86:bd:3d:66:be:f9:ad:07:63:
cb:9e:9d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:39:54 2025 by rpki-client