Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/REXE3d5_7lXFCutmIDCXA4yNlCQ.roa
File: REXE3d5_7lXFCutmIDCXA4yNlCQ.roa (raw, json)
Hash identifier: iPGWvcqBkqcw646LS0ah6HItY0sMEiOcNS730ASjiYQ=
Subject key identifier: 44:45:C4:DD:DE:7F:EE:55:C5:0A:EB:66:20:30:97:03:8C:8D:94:24
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198BCB8D0AD7900CA716D3544430FCE2E29
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/REXE3d5_7lXFCutmIDCXA4yNlCQ.roa
Signing time: Mon 18 Aug 2025 10:28:05 +0000
ROA not before: Mon 18 Aug 2025 10:28:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9302
IP address blocks: 151.246.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bc:b8:d0:ad:79:00:ca:71:6d:35:44:43:0f:ce:2e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 18 10:28:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4445c4ddde7fee55c50aeb66203097038c8d9424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c0:f4:98:6e:00:a6:39:b8:fa:13:de:86:fc:
19:3c:b9:af:98:d8:95:a3:b4:85:e5:b0:ba:07:d8:
fe:fb:c1:49:cc:37:14:70:3e:1c:0a:9c:4a:02:96:
41:3b:71:51:ea:09:a2:c6:6d:e0:81:6b:de:62:4e:
19:58:93:ae:7c:05:61:2a:21:41:2c:46:6b:4a:c6:
cf:b4:4b:e5:d8:17:1e:a9:7c:2b:03:07:ed:a0:ac:
79:e9:96:ad:03:de:6d:a1:1c:01:d0:e2:84:02:fd:
ce:b0:b3:c6:41:ff:66:31:4c:6c:11:6f:5f:23:b1:
62:f9:96:ec:0a:5a:16:aa:5f:fa:14:85:13:ea:b3:
f9:9c:6d:fc:0b:8a:30:f1:c0:f4:84:84:0e:8d:f1:
02:d1:48:4f:7e:75:93:b5:7d:f0:c1:81:fe:e5:18:
3d:44:04:5f:53:d1:69:e4:e5:51:06:86:e5:3c:78:
7e:dd:ec:ae:ae:0b:38:6c:9d:c5:b5:15:f1:83:5a:
ba:97:3c:d6:d3:ae:e8:1f:0e:2b:90:9d:5f:61:c5:
9b:d1:91:b8:8b:b8:7c:cc:92:c4:de:f8:2e:87:bd:
3a:fa:65:04:73:ee:15:72:01:90:90:c1:a4:1c:74:
90:2d:6a:a6:3e:31:ee:d0:c8:18:4d:7f:6d:85:a2:
b7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:45:C4:DD:DE:7F:EE:55:C5:0A:EB:66:20:30:97:03:8C:8D:94:24
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/REXE3d5_7lXFCutmIDCXA4yNlCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.188.0/24
Signature Algorithm: sha256WithRSAEncryption
34:57:17:c1:3b:a7:6c:79:00:92:35:84:0e:e2:7d:3a:df:14:
18:f0:9b:50:38:b9:cf:15:e0:d8:dd:a7:dd:5e:42:6b:5f:0d:
0a:f5:f9:b9:8c:fc:d3:a7:64:f8:85:6f:3b:d8:2c:1a:e5:71:
aa:9a:25:ac:ea:75:28:c0:90:24:e1:09:7f:59:80:c5:f1:35:
e2:47:3f:f5:7f:e0:55:cb:21:5c:a0:a5:85:28:1e:87:5b:e1:
b2:f6:de:7b:03:8d:78:14:49:5f:d7:10:f8:a7:f8:77:b4:99:
b7:cc:62:e9:46:e9:52:ee:f8:e4:39:26:44:4b:38:0e:ea:f6:
40:04:46:08:dd:dc:41:35:94:0f:cc:6e:9d:f4:42:89:b2:4f:
30:50:eb:f2:16:15:75:c9:07:3e:b1:37:c6:c8:5e:66:f8:f2:
14:c0:24:31:b1:5e:75:3d:80:11:2b:c9:a8:47:0a:bf:66:d0:
a7:ff:43:12:82:cd:5d:bb:13:a4:e1:f0:d4:3a:0e:c1:a4:01:
e3:34:10:bb:bf:df:d2:91:11:4b:73:25:5c:75:b6:3d:9e:8e:
d4:8b:42:0c:0a:0b:e2:0c:43:69:5f:63:bc:61:d1:87:5c:5d:
45:4b:73:30:d6:a5:fa:f1:a6:07:92:1e:cc:90:fd:88:3d:42:
d8:24:bd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:16:14 2025 by rpki-client