Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NYr6BxJCCOHzQe_4HO21Lbx7zc8.roa
File: NYr6BxJCCOHzQe_4HO21Lbx7zc8.roa (raw, json)
Hash identifier: HmT7aeferifIXj0vX0GFyLh3eyZ3kjTC0KURktRD918=
Subject key identifier: 35:8A:FA:07:12:42:08:E1:F3:41:EF:F8:1C:ED:B5:2D:BC:7B:CD:CF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199657DC059B013A716FC3153FA8FB567D9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NYr6BxJCCOHzQe_4HO21Lbx7zc8.roa
Signing time: Sat 20 Sep 2025 04:59:24 +0000
ROA not before: Sat 20 Sep 2025 04:59:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214732
IP address blocks: 151.244.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:65:7d:c0:59:b0:13:a7:16:fc:31:53:fa:8f:b5:67:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 20 04:59:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=358afa07124208e1f341eff81cedb52dbc7bcdcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8d:77:17:e3:8c:6f:9b:39:cc:22:8e:f3:35:
48:bf:af:1e:0c:c3:f6:81:6d:ac:bf:80:79:65:09:
3d:08:21:d9:68:95:3d:a4:a1:ea:f9:93:36:55:b6:
ec:fa:e9:7f:57:66:2c:ee:7b:84:25:e6:e4:c1:10:
26:35:91:f4:8d:be:c5:a9:a9:97:26:b3:38:0e:59:
3f:a9:26:9c:36:4b:47:65:2c:88:c2:48:95:88:ae:
92:a5:4e:50:96:9d:be:df:f5:7c:13:21:f7:53:aa:
99:95:21:65:7e:e0:49:46:4c:65:15:bc:44:27:d7:
a3:f4:f5:e5:e4:a6:b8:f1:48:64:5d:58:81:83:51:
15:7a:02:ea:21:fb:f7:42:14:d3:da:f0:92:f4:cc:
de:bd:37:8d:19:ef:38:6e:60:c4:a1:13:3e:13:96:
e1:c7:c1:5b:fd:de:e7:3c:b3:be:66:a4:d3:68:3d:
b1:3d:d4:7a:1e:10:40:9c:95:ee:d1:d3:5e:c1:c2:
6b:a7:c2:4d:9e:cb:22:3c:3a:4d:48:a8:29:ad:c6:
ec:7b:16:14:e9:a1:3b:e8:b0:a3:05:be:b1:dc:52:
0e:ed:f6:d5:34:f2:20:c5:b3:92:b7:56:7c:69:bd:
13:6e:bd:44:86:bd:31:ed:2f:1e:4f:79:a9:f7:2a:
07:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8A:FA:07:12:42:08:E1:F3:41:EF:F8:1C:ED:B5:2D:BC:7B:CD:CF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NYr6BxJCCOHzQe_4HO21Lbx7zc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.244.0/24
Signature Algorithm: sha256WithRSAEncryption
90:46:c9:00:fc:e8:57:5a:d1:69:dd:00:de:2a:ff:a2:82:08:
8c:96:29:eb:8e:d5:ad:11:81:e4:09:26:f7:d1:fa:ef:63:83:
78:b0:87:80:0d:4f:14:46:4a:a6:75:32:07:94:cc:5b:7d:8f:
be:8b:80:1f:a7:6b:28:c8:9d:77:e2:1f:e0:51:ed:26:66:ab:
97:f8:78:a3:49:21:aa:49:c1:af:4d:85:1f:98:01:95:c3:5a:
14:28:f0:07:2d:e1:eb:aa:6f:2d:bd:94:7d:70:a2:e9:58:d1:
09:93:b9:cc:8e:c0:04:5d:07:36:c0:78:30:81:db:25:94:33:
7f:32:67:2b:d8:69:2f:6d:87:b6:ad:28:40:17:05:da:db:36:
b3:2c:95:f7:65:45:00:5d:8b:8f:e9:7a:e1:1e:55:c0:23:ae:
e4:ed:6c:51:5d:c4:41:01:3e:25:2e:a4:7d:59:d8:fc:a8:6b:
c9:a8:b7:ea:33:7c:f0:cb:03:06:9c:49:52:63:a2:1d:b0:7f:
6d:5e:74:7c:b3:fb:6c:32:46:88:82:24:ea:6f:a7:9c:a4:ac:
28:f0:3a:b6:e9:d8:84:80:7d:5c:ab:b4:be:1c:97:5f:22:3b:
6c:f4:d2:e6:59:82:d7:86:b7:7c:e9:a2:2f:6f:75:b5:10:93:
14:89:89:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZllfcBZsBOnFvwxU/qPtWfZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwOTIwMDQ1OTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNThhZmEwNzEyNDIwOGUxZjM0MWVmZjgxY2VkYjUyZGJjN2JjZGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1413F+OMb5s5zCKO8zVIv68eDMP2
gW2sv4B5ZQk9CCHZaJU9pKHq+ZM2Vbbs+ul/V2Ys7nuEJebkwRAmNZH0jb7FqamX
JrM4Dlk/qSacNktHZSyIwkiViK6SpU5Qlp2+3/V8EyH3U6qZlSFlfuBJRkxlFbxE
J9ej9PXl5Ka48UhkXViBg1EVegLqIfv3QhTT2vCS9MzevTeNGe84bmDEoRM+E5bh
x8Fb/d7nPLO+ZqTTaD2xPdR6HhBAnJXu0dNewcJrp8JNnssiPDpNSKgprcbsexYU
6aE76LCjBb6x3FIO7fbVNPIgxbOSt1Z8ab0Tbr1Ehr0x7S8eT3mp9yoHnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDWK+gcSQgjh80Hv+BzttS28e83PMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvTllyNkJ4SkNDT0h6UWVfNEhPMjFMYng3emM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/T0MA0G
CSqGSIb3DQEBCwUAA4IBAQCQRskA/OhXWtFp3QDeKv+iggiMlinrjtWtEYHkCSb3
0frvY4N4sIeADU8URkqmdTIHlMxbfY++i4Afp2soyJ134h/gUe0mZquX+HijSSGq
ScGvTYUfmAGVw1oUKPAHLeHrqm8tvZR9cKLpWNEJk7nMjsAEXQc2wHgwgdsllDN/
Mmcr2GkvbYe2rShAFwXa2zazLJX3ZUUAXYuP6XrhHlXAI67k7WxRXcRBAT4lLqR9
Wdj8qGvJqLfqM3zwywMGnElSY6IdsH9tXnR8s/tsMkaIgiTqb6ecpKwo8Dq26diE
gH1cq7S+HJdfIjts9NLmWYLXhrd86aIvb3W1EJMUiYlt
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:38 2025 by rpki-client