Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FjCXVVoY36PUCzS4Qyu3KyOelH4.roa
File: FjCXVVoY36PUCzS4Qyu3KyOelH4.roa (raw, json)
Hash identifier: 8/lzhOoTRKaKu3PkgFalyoCEP7OeuZ+8XZ+k5gK9n8A=
Subject key identifier: 16:30:97:55:5A:18:DF:A3:D4:0B:34:B8:43:2B:B7:2B:23:9E:94:7E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198A381BD61B5BF5AA10D7BF7739275A9EA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FjCXVVoY36PUCzS4Qyu3KyOelH4.roa
Signing time: Wed 13 Aug 2025 12:57:25 +0000
ROA not before: Wed 13 Aug 2025 12:57:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206489
IP address blocks: 151.241.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a3:81:bd:61:b5:bf:5a:a1:0d:7b:f7:73:92:75:a9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 13 12:57:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=163097555a18dfa3d40b34b8432bb72b239e947e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9a:92:2e:b3:47:99:28:02:e5:56:f4:2f:23:
58:07:eb:15:a4:9b:e3:24:80:8a:c8:09:1d:9f:55:
02:b8:e1:af:20:bb:a0:52:87:1a:1f:49:93:b0:62:
4a:70:46:9c:b0:3c:dc:1d:a8:75:3e:57:57:a8:11:
96:f1:30:b3:d8:fe:5a:28:4f:db:88:5f:38:5f:99:
6d:dd:60:57:6b:60:a4:4b:2d:f3:bb:9b:36:1f:c1:
59:52:8e:0e:80:22:25:e6:d5:e5:77:5d:70:a1:a5:
80:fe:f0:4f:0b:81:8e:cd:a0:c6:b2:68:46:be:b2:
1a:d6:53:4c:04:36:d5:75:cb:be:ef:46:4e:16:47:
79:a0:07:ef:66:0e:e2:ce:39:36:90:21:69:bb:39:
20:2c:3d:27:59:d8:cf:3d:f8:5c:6c:1a:0f:e8:5e:
48:2c:cb:e8:93:2a:b8:ae:2a:1b:40:b1:1e:cc:3f:
47:eb:cf:49:20:7d:d9:29:7e:92:39:4d:f0:6a:dc:
b5:7b:65:82:46:47:96:6a:0f:2c:c3:c6:b2:c6:68:
73:ea:9d:b3:7c:3b:9c:72:48:10:4d:00:81:10:ec:
5f:a3:6a:f9:c2:97:85:09:7e:78:72:2f:24:6e:04:
25:56:b8:ac:af:68:27:f6:50:b9:a3:36:45:eb:30:
0f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:30:97:55:5A:18:DF:A3:D4:0B:34:B8:43:2B:B7:2B:23:9E:94:7E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FjCXVVoY36PUCzS4Qyu3KyOelH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.1.0/24
Signature Algorithm: sha256WithRSAEncryption
74:bb:7d:fd:6c:a7:a9:02:5f:46:71:30:98:ad:99:93:83:13:
ea:32:f9:bb:6e:05:f3:26:ea:69:28:81:ee:95:26:18:4b:8b:
0c:16:d2:a1:87:70:f7:f8:20:ff:f4:3b:74:24:94:67:b8:a6:
77:df:24:bd:f1:0b:c0:f7:b0:e7:56:99:cd:84:5b:02:c4:a6:
41:a8:be:4b:f2:cb:76:de:fa:00:6f:45:2c:2e:bb:dd:4f:a7:
c4:15:1b:a9:27:6b:ce:1d:6d:d3:98:22:72:d6:4f:4c:e6:2e:
14:26:82:68:c0:59:c5:d0:f2:17:81:55:8e:fb:d0:69:1c:d3:
69:de:45:31:7f:3e:a2:7d:ed:ae:12:08:65:e6:98:32:d6:d7:
61:d9:01:ac:ee:25:dc:64:a2:1e:77:de:d3:8d:41:e6:5d:3f:
7d:54:bc:1e:d9:51:bd:86:04:2c:70:dc:05:c7:97:c2:05:ec:
06:eb:68:c5:47:d5:64:c1:23:5e:42:f7:91:90:8c:fd:b4:b5:
81:28:ee:de:74:3a:64:d7:77:74:87:d2:58:17:20:cf:65:0e:
1d:96:ff:52:b8:60:91:d2:30:51:5a:67:83:4e:26:45:5e:8c:
e3:8d:ea:99:7b:b7:a4:c3:ab:44:cd:4c:d1:25:5b:cc:59:af:
ad:f6:bd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:19:50 2025 by rpki-client