Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TTnHN5Or3Axbfv29pR2gaVbAliA.roa
File: TTnHN5Or3Axbfv29pR2gaVbAliA.roa (raw, json)
Hash identifier: eD55P0Vx8fCsQqMyp/xaf6XCX8gIWgRN/ZLOYsITV2E=
Subject key identifier: 4D:39:C7:37:93:AB:DC:0C:5B:7E:FD:BD:A5:1D:A0:69:56:C0:96:20
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198BBB6A2A5659EE441D43F4B011DF728D4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TTnHN5Or3Axbfv29pR2gaVbAliA.roa
Signing time: Mon 18 Aug 2025 05:46:05 +0000
ROA not before: Mon 18 Aug 2025 05:46:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13335
IP address blocks: 151.240.3.0/24 maxlen: 24
151.242.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bb:b6:a2:a5:65:9e:e4:41:d4:3f:4b:01:1d:f7:28:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 18 05:46:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d39c73793abdc0c5b7efdbda51da06956c09620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ea:f4:d9:94:1d:f6:27:9c:bb:1c:63:6d:b1:
4b:d0:17:0f:26:c1:9b:d0:6f:0c:bb:78:7e:b0:52:
48:6d:49:3d:25:72:66:be:c7:04:b1:3f:51:c0:48:
e1:98:90:0c:2c:ec:6f:db:11:28:7b:b9:e4:55:9b:
ea:33:8b:f1:7f:98:35:80:39:4e:9e:17:e3:e3:b3:
4f:2a:0d:0e:57:9d:3c:dd:29:c3:66:38:48:6c:f6:
a0:31:0f:8c:0b:74:05:58:d6:59:8a:3f:a5:47:8c:
38:a5:f1:57:25:07:d1:b7:74:f1:71:be:cd:85:aa:
c2:d5:39:3b:e7:ab:f6:5b:e1:a7:a7:08:0f:ba:80:
fd:73:70:89:d2:d5:e2:d8:69:ea:26:7a:b7:38:ce:
63:c4:8a:67:06:ed:c1:31:a8:6d:dc:7f:d1:47:01:
1f:9b:6b:f8:06:36:8e:b3:61:a5:a2:52:44:92:f8:
95:54:9a:5a:26:89:f2:cb:8a:06:ac:3a:47:cf:38:
20:44:06:01:4e:c5:30:dc:2f:56:2a:18:63:22:1b:
87:7b:7f:97:f5:83:d5:e5:54:73:6c:35:e7:da:2f:
6b:df:ee:06:4d:e0:7c:1d:17:80:52:8c:bb:a3:d3:
4f:5b:82:31:06:14:f2:2a:f6:54:8f:26:b7:2b:14:
ed:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:39:C7:37:93:AB:DC:0C:5B:7E:FD:BD:A5:1D:A0:69:56:C0:96:20
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TTnHN5Or3Axbfv29pR2gaVbAliA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.3.0/24
151.242.227.0/24
Signature Algorithm: sha256WithRSAEncryption
96:de:39:fb:eb:23:0d:4f:40:38:b3:11:47:74:2c:4c:a8:5d:
2c:fc:16:ec:4d:da:e0:ef:47:a8:dd:09:c9:21:ca:2c:ae:2c:
1a:c1:96:4f:9b:a2:50:99:9f:fc:a3:fc:55:e5:a2:8f:68:33:
1a:8e:cc:8d:15:57:a7:cc:84:07:15:b5:5d:b5:29:b2:03:00:
40:23:53:7f:36:16:3a:a8:be:90:a3:7c:9e:57:b3:b1:f5:b2:
24:71:12:44:29:ea:58:c5:4b:c9:97:a8:4d:d5:32:d4:7d:fc:
a5:40:87:01:95:ac:ba:de:ea:e3:85:c3:2a:ef:dd:59:5b:18:
4c:2c:0c:85:da:65:06:dc:37:ca:f9:8a:13:26:f1:68:40:e4:
75:56:fa:d0:92:3c:af:9e:8d:58:a1:73:04:1f:01:8d:5b:83:
1d:01:89:82:75:91:02:68:04:39:93:aa:5e:29:20:6f:7e:20:
25:65:8d:08:0b:07:37:db:e8:cf:f4:43:8c:e4:b1:ef:71:02:
c4:41:cd:f6:2a:d2:e1:96:2f:95:3a:7c:89:1b:4e:c3:f0:ef:
18:67:95:08:06:e0:86:ed:da:41:db:1c:26:35:e4:87:ad:51:
42:c4:bc:78:1e:b1:0b:aa:27:ec:c7:9a:af:f1:a8:15:47:9b:
89:22:ce:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:15:11 2025 by rpki-client