Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SQeo1tjAwXxExl8HUicbqLalL7g.roa
File: SQeo1tjAwXxExl8HUicbqLalL7g.roa (raw, json)
Hash identifier: i5GJRBpjSevnhy20SDY+CGxeePNFMdCaY/o8IBdIV7s=
Subject key identifier: 49:07:A8:D6:D8:C0:C1:7C:44:C6:5F:07:52:27:1B:A8:B6:A5:2F:B8
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198D13D329811493D07F91FBAB601F48674
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SQeo1tjAwXxExl8HUicbqLalL7g.roa
Signing time: Fri 22 Aug 2025 10:05:05 +0000
ROA not before: Fri 22 Aug 2025 10:05:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4515
IP address blocks: 151.242.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d1:3d:32:98:11:49:3d:07:f9:1f:ba:b6:01:f4:86:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 22 10:05:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4907a8d6d8c0c17c44c65f0752271ba8b6a52fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e1:2b:9d:76:6a:26:2e:83:36:e6:d9:db:29:
59:fd:ba:88:d5:f8:09:b1:9d:1f:b1:03:2c:3f:0b:
e4:14:40:eb:75:63:50:d6:fb:0c:22:4a:ac:c6:2d:
57:a7:88:ab:bf:d6:37:58:f2:16:9a:75:99:30:92:
70:5f:2e:69:cb:45:94:6d:ca:8a:f1:53:82:79:f7:
10:37:11:4f:dd:19:b3:97:13:8a:ca:6e:30:9f:9a:
61:7f:4e:c3:b9:c7:5e:f8:f8:9f:52:bb:b5:32:56:
35:b4:98:79:65:f6:9e:a9:c7:7c:42:9e:ce:77:11:
4b:0f:6a:12:88:41:b1:b5:79:a2:9d:79:d1:14:f5:
24:d7:8d:4e:cc:c5:12:c2:86:30:eb:c6:77:f2:69:
30:24:53:c6:6c:d3:59:37:c3:80:a0:ed:8f:96:80:
7b:6b:c8:77:2d:30:cb:45:37:f9:f2:f7:93:21:58:
81:40:03:6b:93:cd:d4:fb:9d:53:1c:1d:a3:07:e6:
92:dd:60:a9:c6:4d:dd:af:f5:24:c6:1c:70:69:1b:
5e:22:be:c8:bc:fb:63:18:fb:e6:d6:c5:4a:ab:ec:
c0:9a:ff:72:c5:90:00:69:34:43:42:e4:51:b8:a0:
e6:37:28:f6:b2:4d:be:31:14:5c:89:21:17:f8:cd:
93:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:07:A8:D6:D8:C0:C1:7C:44:C6:5F:07:52:27:1B:A8:B6:A5:2F:B8
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SQeo1tjAwXxExl8HUicbqLalL7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.180.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:bf:a4:c8:ea:6e:a0:b5:c1:4f:d6:5c:01:e2:93:50:72:02:
75:c1:be:b7:fe:7c:90:14:36:19:04:e8:b9:df:5b:64:c0:e8:
85:38:1b:31:46:c0:8a:dc:bb:ed:38:f2:3e:07:2a:2b:b6:52:
d9:89:19:6c:df:94:1f:b7:ac:f0:b6:f8:5e:70:31:60:e2:b1:
b3:c0:9a:1f:c8:0a:27:48:10:1e:52:5f:4d:91:c6:bb:04:8b:
f1:0c:20:96:2c:de:53:9d:5b:84:be:01:04:71:5a:34:ea:4c:
ce:a7:93:1b:72:b5:3e:c8:53:10:f8:a2:00:41:82:73:ce:2c:
a4:f5:f4:ce:a9:4e:d5:4a:d6:b1:d6:53:b7:fd:8e:25:a0:16:
f5:87:5e:8e:ec:b7:01:ce:eb:c2:4e:8a:d8:bb:74:d9:96:84:
32:26:d3:a3:45:b2:c2:38:ed:fd:e5:0f:70:2d:6d:62:27:52:
87:15:3d:87:a1:c2:3e:ce:6f:75:29:57:47:7e:e0:91:18:62:
14:48:98:f7:60:8b:70:32:d3:71:b4:cc:f6:b4:cb:3f:61:13:
3e:5e:5e:b8:33:50:84:0a:d5:c0:eb:15:b5:2b:fb:86:6c:fb:
7f:f0:a1:03:99:31:e1:32:cd:5d:2b:fb:c8:ff:69:e5:ed:6f:
9b:ff:f4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:04:39 2025 by rpki-client