Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HZO4dDzTI2EyCTH2vfCnl-XPt9g.roa
File: HZO4dDzTI2EyCTH2vfCnl-XPt9g.roa (raw, json)
Hash identifier: lBqlt3E1V44aND8BlbS1kz29GcTmRojCas50XBAwxg8=
Subject key identifier: 1D:93:B8:74:3C:D3:23:61:32:09:31:F6:BD:F0:A7:97:E5:CF:B7:D8
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198D19258EBDDAF4E339AFB36FA69793178
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HZO4dDzTI2EyCTH2vfCnl-XPt9g.roa
Signing time: Fri 22 Aug 2025 11:38:05 +0000
ROA not before: Fri 22 Aug 2025 11:38:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 151.241.47.0/24 maxlen: 24
151.241.171.0/24 maxlen: 24
151.241.179.0/24 maxlen: 24
151.244.69.0/24 maxlen: 24
151.244.76.0/24 maxlen: 24
151.244.90.0/24 maxlen: 24
151.244.199.0/24 maxlen: 24
151.245.69.0/24 maxlen: 24
151.245.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d1:92:58:eb:dd:af:4e:33:9a:fb:36:fa:69:79:31:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 22 11:38:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d93b8743cd32361320931f6bdf0a797e5cfb7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e3:fa:6a:02:20:09:d2:e0:9c:27:7e:54:07:
51:9b:98:2c:aa:5c:81:61:b1:bd:39:ef:4d:6a:91:
ad:04:11:21:bf:7d:18:8a:ff:a2:40:58:f8:40:46:
18:f6:6e:56:f9:73:72:b3:59:ab:fa:8f:32:7a:bf:
07:28:2c:c6:4c:d0:60:ef:e7:ee:63:3b:c1:d7:c6:
47:72:43:49:45:d1:ab:c6:22:20:e5:f7:33:92:08:
06:86:11:61:45:10:b4:be:dd:d9:5c:65:4f:c4:e0:
8f:73:eb:d6:38:b5:83:9b:3c:51:c4:c0:c8:81:67:
6a:7a:01:95:56:90:db:48:d6:e3:79:f6:4e:de:2c:
40:54:fd:b0:e6:eb:da:fb:1f:43:03:e6:6b:41:04:
b4:f1:f0:0c:f3:12:62:39:1c:26:be:a7:9e:cf:51:
0e:9e:04:66:22:fa:21:74:3b:1d:a4:7d:63:29:3d:
45:56:69:fa:12:7f:26:86:85:9d:ff:7c:8d:ad:55:
a5:ba:b7:73:cf:3d:62:03:41:b9:d5:87:f9:75:6d:
56:56:f7:7e:74:01:db:aa:1f:5f:ec:8e:f7:01:39:
d5:c9:15:6b:5d:89:9d:2d:cb:f4:2c:45:a6:27:e8:
63:9c:5b:7d:75:36:f0:05:66:be:a1:1e:75:d1:ae:
40:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:93:B8:74:3C:D3:23:61:32:09:31:F6:BD:F0:A7:97:E5:CF:B7:D8
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HZO4dDzTI2EyCTH2vfCnl-XPt9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.47.0/24
151.241.171.0/24
151.241.179.0/24
151.244.69.0/24
151.244.76.0/24
151.244.90.0/24
151.244.199.0/24
151.245.69.0/24
151.245.199.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:2a:b3:e8:20:8d:75:88:94:82:78:93:d1:b5:4b:1c:71:47:
9c:8d:c1:8d:57:33:05:82:9f:8b:d1:91:c5:e1:bf:ea:34:c5:
1e:b6:3a:85:55:da:27:a3:d4:60:71:bb:59:33:49:93:35:52:
96:f8:ad:12:f4:55:3c:07:3a:94:38:40:80:cc:31:ae:90:80:
3b:2b:19:e5:40:43:54:84:a4:12:f0:8d:d9:00:95:fe:1b:2b:
6e:ff:52:e5:6f:ae:cf:59:dc:0d:21:b5:66:f5:94:87:5e:ae:
a6:26:f3:c4:73:36:91:01:7a:b8:08:15:47:93:b5:56:c9:a0:
3e:8c:06:50:1b:53:04:e1:56:a9:04:87:52:1a:9f:a8:4d:86:
58:d1:c8:3e:07:02:89:71:ad:a6:e2:6e:04:7c:0c:1d:4d:54:
87:1f:9f:50:73:24:2a:5c:d3:d7:05:40:77:33:9a:d0:3f:4c:
3d:7d:9b:25:68:38:f3:d9:d6:d1:48:d8:ab:24:cb:e2:dd:cc:
55:bd:2d:8d:43:32:16:da:7f:06:42:64:6c:55:80:27:ee:7a:
b3:33:ef:36:29:a2:1b:60:c2:a3:13:1d:f1:50:62:b1:7e:a7:
29:f9:1f:7a:07:b8:5c:0c:0e:4b:97:f9:da:9c:4d:bf:37:55:
db:fc:29:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:33:56 2025 by rpki-client