Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SN_YVUCGLcrbQZYriMCnI86ottQ.roa
File: SN_YVUCGLcrbQZYriMCnI86ottQ.roa (raw, json)
Hash identifier: 7XSTifN0Sxdd6ksOyhLVwMpP75rorRuUf4vbZkMMMlQ=
Subject key identifier: 48:DF:D8:55:40:86:2D:CA:DB:41:96:2B:88:C0:A7:23:CE:A8:B6:D4
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01991DAFCF7772BC46481A1E509E2972E765
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SN_YVUCGLcrbQZYriMCnI86ottQ.roa
Signing time: Sat 06 Sep 2025 06:21:25 +0000
ROA not before: Sat 06 Sep 2025 06:21:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137235
IP address blocks: 151.243.15.0/24 maxlen: 24
151.243.255.0/24 maxlen: 24
151.244.243.0/24 maxlen: 24
151.244.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:af:cf:77:72:bc:46:48:1a:1e:50:9e:29:72:e7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 6 06:21:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48dfd85540862dcadb41962b88c0a723cea8b6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:82:b4:1b:60:bb:de:97:43:3c:8f:ef:c3:de:
37:11:cb:bf:03:e6:01:37:a6:38:ad:da:a0:9d:48:
2b:77:bc:a9:e2:14:d4:d5:54:fb:07:95:8e:51:55:
b7:ff:90:b4:59:b0:27:0f:22:8f:08:6f:6e:93:12:
b1:d1:aa:1f:d3:89:b2:a1:7d:88:f0:82:79:c6:ea:
cc:64:ae:01:22:43:33:5b:05:46:96:ae:39:3b:4a:
d4:1b:4a:88:34:10:d6:5e:9b:07:27:7f:d4:15:ab:
f4:7c:8d:76:81:6e:03:02:76:85:e4:0d:44:21:61:
cb:70:e8:ab:78:fd:89:55:b7:f8:32:8f:70:b0:7a:
32:40:16:15:78:86:8a:f4:90:d1:bc:fa:2b:36:59:
ca:e1:43:f3:8a:dc:72:37:65:76:b9:cc:49:f8:09:
78:6c:31:5d:e2:ae:aa:6e:44:36:7f:c7:f4:f2:49:
84:a2:81:99:c4:57:ff:d7:82:b9:95:42:ad:c5:55:
0b:5b:18:a9:59:46:36:a7:b9:47:50:5f:23:15:42:
ff:27:61:c6:e8:e7:dc:98:c1:c5:5c:29:85:0b:fa:
e7:8f:e9:02:fd:f3:15:fb:44:e5:09:83:40:b8:08:
8c:13:2e:93:58:80:72:0f:68:ce:90:22:dd:d5:f1:
f8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DF:D8:55:40:86:2D:CA:DB:41:96:2B:88:C0:A7:23:CE:A8:B6:D4
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SN_YVUCGLcrbQZYriMCnI86ottQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.15.0/24
151.243.255.0/24
151.244.243.0/24
151.244.247.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:f1:77:ed:5f:09:e0:5e:8c:7d:80:b7:0a:17:a7:fe:89:c0:
17:78:38:fb:79:50:a2:f9:6b:77:7d:11:91:6c:53:1d:29:17:
a6:df:8c:ac:91:9d:5e:6d:3d:ea:19:75:be:93:58:f4:8c:68:
c5:5e:15:5b:3d:af:e5:bd:b0:70:07:14:4a:b1:89:7a:57:18:
c7:ab:c3:47:aa:d6:8a:36:fd:9f:7b:89:76:56:5f:c8:46:cc:
6d:c2:b4:f5:9d:4c:8b:7c:51:e7:4f:f0:24:62:d8:3c:b4:99:
14:dc:1f:59:4e:0d:25:a8:23:af:62:3c:94:b3:87:b2:92:41:
5c:2f:ca:52:43:2d:9c:6c:66:1c:03:4e:43:c5:a9:69:49:5c:
06:0b:07:d7:52:70:59:93:3d:db:0d:b0:db:cc:0c:ff:49:d2:
0f:ed:93:35:ef:1e:55:cd:c7:c9:b0:45:08:67:dc:c7:56:ae:
28:82:87:30:9b:b9:58:78:3e:57:89:bc:e2:cf:44:a1:82:0b:
fb:fb:c7:28:83:3c:91:45:67:2c:80:9f:84:95:39:94:8a:2d:
91:b6:0f:7f:af:4c:3b:11:7d:f4:61:32:1e:ae:fe:5e:30:bf:
77:fa:75:b7:a1:5b:4b:15:88:55:fc:16:75:56:c9:a6:2b:67:
74:e1:d1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:44 2025 by rpki-client