Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Kprsfc91Yg37YesqHdvTUtQkBNA.roa
File: Kprsfc91Yg37YesqHdvTUtQkBNA.roa (raw, json)
Hash identifier: jFOLfEOKftULpMF+Ibv8W9HQxw0goGxSjXiGai4aL0s=
Subject key identifier: 2A:9A:EC:7D:CF:75:62:0D:FB:61:EB:2A:1D:DB:D3:52:D4:24:04:D0
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198B18E8A45FA10074799FC41D7B6B6EB0D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Kprsfc91Yg37YesqHdvTUtQkBNA.roa
Signing time: Sat 16 Aug 2025 06:26:05 +0000
ROA not before: Sat 16 Aug 2025 06:26:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48925
IP address blocks: 151.242.106.0/24 maxlen: 24
151.244.225.0/24 maxlen: 24
151.245.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b1:8e:8a:45:fa:10:07:47:99:fc:41:d7:b6:b6:eb:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 16 06:26:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a9aec7dcf75620dfb61eb2a1ddbd352d42404d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ec:2d:ed:04:19:97:32:c0:76:5f:e6:08:71:
18:d3:29:6d:8a:4d:2e:85:b1:bf:bf:97:20:2c:36:
86:c4:a6:1e:80:60:a2:4a:90:50:14:f5:3b:81:83:
56:dc:4c:ef:f7:93:87:df:48:37:f0:ad:3d:85:3d:
1c:e3:84:46:61:ba:01:48:f1:c8:51:67:fc:41:60:
09:b7:e3:ee:c6:d7:91:bd:ec:89:bc:c6:6e:0b:f9:
75:90:fc:3c:47:53:d3:d5:2f:42:cb:63:58:12:16:
6f:c3:0e:ee:8a:18:bd:4e:eb:0a:16:95:e9:de:48:
83:a2:b4:84:69:14:ec:61:24:a6:fe:40:51:d1:06:
85:b8:18:ac:3e:ad:0a:73:eb:e4:59:1c:aa:43:92:
98:f9:27:c4:19:1a:ae:53:56:d7:d8:93:27:17:7f:
b8:8d:07:3c:f8:bf:06:5f:47:5c:e8:20:be:56:93:
3a:f9:24:ca:4d:b1:a2:4a:ce:f1:ec:03:b6:f4:8c:
04:bb:86:e1:8e:4b:9d:e3:ed:da:02:9e:5f:71:ac:
f4:2a:0b:c6:94:1e:70:b4:af:8c:2b:97:ce:92:5c:
1b:40:4c:da:18:4f:4b:ff:3b:2a:30:d8:0d:3c:ba:
d7:b7:00:5d:cb:d2:bd:e5:16:50:f7:0b:af:c9:9e:
e2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9A:EC:7D:CF:75:62:0D:FB:61:EB:2A:1D:DB:D3:52:D4:24:04:D0
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Kprsfc91Yg37YesqHdvTUtQkBNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.106.0/24
151.244.225.0/24
151.245.24.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:e1:f5:81:aa:37:5a:64:a1:01:21:21:bc:95:24:a3:51:cb:
b4:d4:21:75:36:0f:40:a0:e2:c6:13:25:9b:f2:18:d3:9a:c6:
88:59:a4:93:5b:7a:16:66:1f:45:de:ab:8b:a3:c3:d5:27:36:
3b:7c:3c:08:03:8b:e9:4d:b7:8e:42:b7:2b:b1:b5:ae:d4:2f:
78:11:92:61:0d:68:eb:bd:cd:08:4f:c4:0e:8f:94:bf:d1:40:
bf:21:c5:12:81:e6:68:c3:75:36:42:9d:84:54:9d:ee:e0:bc:
92:8c:a1:85:ed:e4:83:26:ee:6d:32:42:30:3f:b7:63:ce:35:
56:9e:89:01:f9:e8:a7:85:4d:f6:3c:5d:f0:ee:62:a2:6f:2a:
da:ef:7f:c8:59:2e:b0:87:b9:eb:93:ae:d6:7a:54:e1:f5:29:
53:c1:5a:d6:6f:2e:9f:fc:6d:ac:48:c9:ea:e5:85:73:38:58:
c5:82:26:7d:f2:12:f8:1b:99:72:37:fa:18:2e:2a:61:6b:12:
16:e2:ba:ca:02:4b:18:db:45:cc:79:38:f4:43:92:ed:c0:84:
15:42:04:3e:aa:75:0e:30:98:54:b9:ee:e4:15:c0:4d:16:89:
da:20:19:31:56:ad:35:3d:8a:1a:9f:94:e4:67:14:e6:ac:78:
c2:a7:da:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:58:41 2025 by rpki-client