Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QANwOtjVRWubZf8OiJqNTG6DqX8.roa
File: QANwOtjVRWubZf8OiJqNTG6DqX8.roa (raw, json)
Hash identifier: v2tIVrH9FH7LwMuOq05hBejy3ozhvQ1D9945QuWfVCI=
Subject key identifier: 40:03:70:3A:D8:D5:45:6B:9B:65:FF:0E:88:9A:8D:4C:6E:83:A9:7F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198D1799EC1B3D7705ADDB424E4C7E8D6BD
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QANwOtjVRWubZf8OiJqNTG6DqX8.roa
Signing time: Fri 22 Aug 2025 11:11:05 +0000
ROA not before: Fri 22 Aug 2025 11:11:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 151.243.54.0/24 maxlen: 24
151.246.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d1:79:9e:c1:b3:d7:70:5a:dd:b4:24:e4:c7:e8:d6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 22 11:11:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4003703ad8d5456b9b65ff0e889a8d4c6e83a97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:6c:dd:44:0f:c8:88:71:05:83:d3:f0:5a:
98:e9:16:6f:ad:7d:2a:03:25:67:e1:fa:f1:59:3b:
f6:17:20:42:c3:36:08:ea:c4:21:7d:4b:e8:76:c0:
6f:ff:d7:a2:48:a7:d2:3e:95:6b:fa:b1:de:6f:38:
b1:95:b0:f2:13:44:e3:08:51:a0:51:47:e7:0e:a0:
8e:82:96:02:97:05:3e:38:d8:3b:74:41:4f:9b:f8:
ab:d1:a6:ed:6e:28:87:13:44:3d:ee:7d:36:05:28:
91:66:ec:5f:ee:40:2f:da:20:21:f8:79:6d:61:f7:
fb:a9:66:7d:42:bc:32:80:ba:09:a8:4b:9f:3e:18:
39:f4:b1:d4:a7:90:49:c0:cb:16:3e:b5:3d:c4:cf:
35:45:9c:7b:80:9d:02:a7:b8:cd:12:54:0b:ab:9d:
b7:30:92:82:2a:c2:c9:69:19:ea:21:6c:7b:05:a1:
93:14:3f:32:26:51:07:58:a3:e3:71:40:e2:39:87:
a9:86:f5:5c:04:6c:48:78:ea:b5:05:63:a5:9b:aa:
3e:a6:37:10:5c:76:ae:8a:7e:a5:82:b0:0d:2e:32:
ab:95:d2:e5:0a:9f:a1:26:75:9e:f8:cd:38:39:88:
d2:a5:19:df:97:8e:5b:a8:0e:f4:2f:25:d3:60:63:
38:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:03:70:3A:D8:D5:45:6B:9B:65:FF:0E:88:9A:8D:4C:6E:83:A9:7F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QANwOtjVRWubZf8OiJqNTG6DqX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.54.0/24
151.246.64.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:dc:bc:16:f7:c5:e8:f0:5b:46:bc:b6:a7:ac:7a:c2:30:82:
bd:1a:f3:7b:24:bf:71:d0:43:26:45:a2:cf:0e:fb:f4:09:29:
43:8a:1d:00:f9:d4:06:f8:c2:bd:b5:20:66:58:5a:50:16:ee:
e7:01:41:47:ce:d8:8b:e1:a1:ae:bd:6b:ef:99:e9:14:57:9a:
34:4e:2b:ca:58:99:64:83:e4:c2:63:6e:fe:ab:92:23:bb:c2:
b8:d5:ee:1f:b2:f2:0c:f8:c6:f7:67:bc:12:1f:62:7d:ec:07:
e5:93:f3:52:d8:00:86:e0:d0:cd:f0:da:ae:63:af:fe:44:e0:
93:46:27:41:c2:b8:a1:3a:9f:b2:f8:ac:22:f2:14:cd:65:31:
cb:a0:2d:f8:df:ca:7e:6a:19:53:92:67:7d:7e:5d:1e:5f:c2:
e2:62:7b:b5:b8:9e:a0:e1:56:fd:84:45:22:f8:5d:f1:25:ea:
4e:4f:e1:ea:32:79:5c:3d:53:25:10:da:0f:5c:ce:b3:d4:37:
34:1a:1d:e6:a7:07:98:0f:4e:f2:76:8f:a3:b6:c6:56:e4:fc:
f6:bd:f3:f7:96:2f:ac:85:08:92:01:fe:60:8f:67:5b:d1:01:
61:26:c5:c8:36:03:73:f4:aa:3d:25:48:45:c8:96:26:be:f8:
69:e5:71:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:02:41 2025 by rpki-client