Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ToYv7E0F9W-03o0rzoDdfNK9u_I.roa
File: ToYv7E0F9W-03o0rzoDdfNK9u_I.roa (raw, json)
Hash identifier: 93S/3sX75Pf+KSJC8FNedZkiVArssXPFgL+GhtxBniM=
Subject key identifier: 4E:86:2F:EC:4D:05:F5:6F:B4:DE:8D:2B:CE:80:DD:7C:D2:BD:BB:F2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198AE31F233E8E42643FD94FC4A4AFEBF76
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ToYv7E0F9W-03o0rzoDdfNK9u_I.roa
Signing time: Fri 15 Aug 2025 14:46:05 +0000
ROA not before: Fri 15 Aug 2025 14:46:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212980
IP address blocks: 151.245.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ae:31:f2:33:e8:e4:26:43:fd:94:fc:4a:4a:fe:bf:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 15 14:46:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e862fec4d05f56fb4de8d2bce80dd7cd2bdbbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:3b:12:69:7c:c2:01:af:4a:10:ed:f4:df:f2:
4f:1a:37:e4:3b:80:b0:05:46:d3:7f:30:ac:bb:ea:
f4:dc:5d:6f:3e:85:ad:3d:43:78:4f:d6:83:c0:c9:
0b:d7:08:01:fd:36:ca:8f:0a:26:a4:fb:8b:a0:0b:
ae:31:30:d3:e0:9c:9c:72:39:15:5c:7e:d9:9a:1b:
4d:fa:8f:0a:64:6b:35:1f:fe:2a:6f:d0:c7:93:ca:
f7:bd:d2:30:33:51:d6:84:02:49:a5:2a:a7:64:56:
88:e2:42:14:ac:54:36:60:3e:e8:2d:1a:fa:6f:96:
5d:39:ca:27:11:98:1b:ed:07:85:e6:b1:19:d5:c3:
b7:16:7f:23:4b:16:31:c9:c5:c2:0f:08:c3:50:59:
e8:98:76:9a:cb:5b:2e:c7:d9:fd:a2:f9:2a:f0:16:
07:1c:76:4c:cb:bc:80:1f:e6:ec:e9:d7:42:d5:50:
5f:bf:36:fa:57:34:c2:4c:ba:dd:e5:88:ab:31:f9:
26:21:f3:f7:05:56:d0:44:8c:27:83:fb:62:7f:b7:
be:ad:6b:c7:ca:dc:49:29:39:c6:5d:e3:5e:88:15:
3a:24:b8:b1:d4:ee:80:f4:c8:fc:90:75:4e:b8:5e:
71:7a:7c:5e:13:45:0c:58:33:04:80:5c:a5:2e:e6:
64:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:86:2F:EC:4D:05:F5:6F:B4:DE:8D:2B:CE:80:DD:7C:D2:BD:BB:F2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ToYv7E0F9W-03o0rzoDdfNK9u_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.214.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:69:58:11:a8:a6:08:a9:d4:61:02:44:da:4b:13:f9:d4:88:
6c:91:2b:72:1c:d8:c2:87:6c:1e:d9:54:41:b2:98:41:db:84:
91:79:ef:bc:72:a5:97:85:89:9a:65:8c:18:02:56:35:a4:a1:
9f:b0:ce:03:cd:e8:64:1d:b1:62:85:46:91:d1:d1:7b:98:d0:
d5:9b:2f:6a:d1:da:bc:d6:a9:6b:75:66:bb:7d:93:62:50:2e:
35:37:9b:73:e2:2f:36:cb:2a:49:1e:44:79:6a:ff:68:61:00:
72:41:10:42:5b:59:49:5c:64:de:cf:be:38:6d:c5:8e:04:0e:
a4:f2:23:7d:48:2b:a7:d0:a9:ca:14:ee:ea:ae:45:46:d3:5e:
42:93:94:63:e1:5c:37:33:5f:5c:c4:a9:8d:99:77:88:7e:b0:
76:91:43:8e:eb:66:ed:40:26:2d:ab:0c:49:3d:48:af:39:5d:
5c:99:fc:70:3d:1a:eb:4b:35:c6:47:76:fd:c0:03:8b:10:84:
72:d5:83:0f:36:8d:17:6c:19:bb:cd:15:2c:83:09:d5:cd:fe:
37:7d:bc:f9:a6:ae:65:ed:ef:da:e8:1d:1a:1a:b3:ab:1a:28:
d3:22:bc:0a:55:f4:77:49:83:c7:b6:02:d7:ec:d7:4e:04:d8:
0d:2b:0d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:36:56 2025 by rpki-client