
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TVrTBXLr48SGLtDuWZfma4dY808.roa
File: TVrTBXLr48SGLtDuWZfma4dY808.roa (raw, json)
Hash identifier: KajZU7jmhtGmhTE9ujR3tDfFJXC6PLEJidpgNUTbTU4=
Subject key identifier: 4D:5A:D3:05:72:EB:E3:C4:86:2E:D0:EE:59:97:E6:6B:87:58:F3:4F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019989A73FF40BEF68746EF8F4E35A141B11
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TVrTBXLr48SGLtDuWZfma4dY808.roa
Signing time: Sat 27 Sep 2025 05:31:03 +0000
ROA not before: Sat 27 Sep 2025 05:31:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211759
IP address blocks: 151.243.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:89:a7:3f:f4:0b:ef:68:74:6e:f8:f4:e3:5a:14:1b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 27 05:31:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d5ad30572ebe3c4862ed0ee5997e66b8758f34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:03:53:0e:2a:bb:8e:f0:99:f6:66:2f:db:
64:4f:73:cf:13:f5:5f:d5:fc:e6:ad:fa:76:73:e8:
e7:f8:30:51:92:e9:13:62:ef:92:04:22:91:58:eb:
9a:c5:38:f7:b0:44:7a:0f:46:cf:76:e2:9b:dd:fc:
21:9d:3e:5e:cd:f0:8f:1b:51:b0:62:9a:6f:62:8f:
54:df:cd:1f:35:92:d0:57:90:07:17:b0:49:82:e8:
d1:ad:84:5f:20:36:6b:4f:cf:17:0a:7e:59:e8:d2:
b7:fa:52:28:bd:6f:64:ab:02:05:63:2c:db:1f:c2:
67:bd:b0:25:a1:94:ad:a2:a7:79:23:03:05:3a:0c:
0a:e3:e1:7e:96:e2:ce:bd:aa:7a:24:3a:1e:fb:91:
43:1f:8c:53:8e:27:34:f2:c1:83:61:61:a2:77:31:
f7:56:2b:74:49:02:a7:60:a9:a4:b1:24:cb:c0:94:
40:12:8d:9e:b9:b7:ec:dd:f8:3e:ae:7c:01:b2:9f:
80:0b:31:72:63:4a:bb:50:ae:37:ee:8e:e5:17:b8:
d7:cb:0a:be:ef:cb:a6:96:63:eb:03:68:db:55:c2:
8b:ca:b7:36:c1:66:82:7b:79:d4:ec:d6:7c:c3:e6:
5c:80:95:71:4b:b9:71:5b:61:ed:52:e4:84:88:3b:
4a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5A:D3:05:72:EB:E3:C4:86:2E:D0:EE:59:97:E6:6B:87:58:F3:4F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TVrTBXLr48SGLtDuWZfma4dY808.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.38.0/24
Signature Algorithm: sha256WithRSAEncryption
55:20:43:58:84:cd:66:e0:a0:65:ec:98:3a:f7:9e:d4:74:0c:
cb:6b:fa:91:f8:4f:82:16:b8:ac:bf:c7:3d:d5:6f:b5:59:02:
89:f7:2d:6c:ec:d6:de:5c:9c:44:09:cc:6f:0f:09:f1:42:20:
24:4d:c9:d3:69:e5:75:c9:38:e0:90:cf:e2:65:e3:ad:e0:f7:
dd:38:7f:7d:2d:83:26:dc:9d:b6:d5:2d:bf:de:38:c5:78:9a:
f1:9e:97:f1:ff:12:d3:e7:6e:3a:90:f1:ac:0b:ef:74:a4:8e:
54:d9:cd:2a:6e:07:6d:e1:64:0b:26:e2:6f:7a:22:89:1b:56:
96:9a:a8:69:8a:54:c9:bc:a7:c2:4d:87:47:c5:86:7a:1a:c3:
d3:b2:21:5a:4a:34:de:c5:5a:55:85:7a:c7:9d:1e:c0:1f:24:
81:3c:44:dd:95:5a:6b:d7:49:f5:33:85:ed:84:b2:be:3f:d3:
c2:0a:2f:e1:72:26:b7:7f:90:85:e3:44:68:ce:dc:33:2b:e5:
c7:81:1f:f3:cd:57:d6:5e:85:42:78:6f:7a:05:88:78:f2:5c:
fc:fb:24:4f:a8:c1:a5:2d:40:b3:5f:66:77:14:76:ff:f6:92:
b5:3e:2f:41:b6:fe:77:fe:9e:f1:7f:c4:97:46:cf:45:97:be:
58:86:6a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:17 2025 by rpki-client