Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XOPjIjh1DY8du21xOh9vYCleqrw.roa
File: XOPjIjh1DY8du21xOh9vYCleqrw.roa (raw, json)
Hash identifier: yN7Wc5TdwZWIqAxmpC0K8s0WEo8UUEkLT73CKYxd0cA=
Subject key identifier: 5C:E3:E3:22:38:75:0D:8F:1D:BB:6D:71:3A:1F:6F:60:29:5E:AA:BC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198D57EAD6B0231EFE6BAD2D39AA6810DBB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XOPjIjh1DY8du21xOh9vYCleqrw.roa
Signing time: Sat 23 Aug 2025 05:55:05 +0000
ROA not before: Sat 23 Aug 2025 05:55:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 151.241.136.0/21 maxlen: 21
151.241.152.0/21 maxlen: 21
151.241.208.0/21 maxlen: 21
151.241.216.0/21 maxlen: 21
151.243.21.0/24 maxlen: 24
151.243.52.0/23 maxlen: 24
151.243.164.0/22 maxlen: 24
151.243.244.0/24 maxlen: 24
151.244.2.0/24 maxlen: 24
151.244.136.0/22 maxlen: 24
151.244.160.0/22 maxlen: 24
151.244.171.0/24 maxlen: 24
151.244.172.0/22 maxlen: 24
151.244.176.0/22 maxlen: 24
151.245.8.0/21 maxlen: 24
151.245.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:7e:ad:6b:02:31:ef:e6:ba:d2:d3:9a:a6:81:0d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 23 05:55:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ce3e32238750d8f1dbb6d713a1f6f60295eaabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0d:13:4b:a9:27:9c:f2:9a:bf:f1:bb:de:9f:
0e:4b:96:0e:e3:03:3f:2c:62:0e:69:f0:f8:b0:c9:
d2:55:43:d1:10:19:76:5b:a7:7c:4a:91:f6:25:69:
0d:39:2e:b3:2e:68:5a:91:fe:7f:89:5c:7f:c9:1c:
37:dd:53:a2:53:f9:06:d1:9e:1b:ae:e7:81:c1:9f:
aa:f3:ab:3c:87:10:14:fe:3c:21:b6:fb:86:37:de:
81:fb:11:ea:d5:72:70:14:2c:27:18:cd:7a:d3:c7:
a3:fc:a6:2d:a7:c2:6b:22:96:e2:26:a6:52:22:9f:
59:3a:12:09:1f:10:e9:3e:37:aa:a0:35:3f:57:e6:
cf:df:13:d7:b0:a0:99:e0:7c:5c:b4:52:e9:38:01:
16:ea:82:bb:cf:d8:df:6f:4f:8b:28:2d:75:be:aa:
f3:24:48:11:83:c1:d0:2e:a1:05:00:eb:4a:75:14:
4e:c1:1b:50:18:82:21:de:e9:e2:c2:f4:a0:de:45:
82:88:1a:3e:d3:b8:11:5a:17:c5:d1:e9:be:c4:98:
fb:6e:70:37:4f:86:81:76:3a:8c:dd:02:b4:2d:08:
ac:db:74:1c:4a:5e:89:2d:73:1e:d1:62:6f:07:e1:
3e:6b:a0:e0:32:8f:d1:1b:1a:f7:fd:d9:97:2e:92:
70:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E3:E3:22:38:75:0D:8F:1D:BB:6D:71:3A:1F:6F:60:29:5E:AA:BC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XOPjIjh1DY8du21xOh9vYCleqrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.136.0/21
151.241.152.0/21
151.241.208.0/20
151.243.21.0/24
151.243.52.0/23
151.243.164.0/22
151.243.244.0/24
151.244.2.0/24
151.244.136.0/22
151.244.160.0/22
151.244.171.0-151.244.179.255
151.245.8.0/21
151.245.168.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:74:9a:ca:fc:c1:86:40:99:9f:29:fb:c1:57:4b:de:95:6e:
af:5d:99:2e:78:89:c7:fa:c1:4f:7b:21:1f:e1:44:61:e8:ce:
dd:4e:11:9d:5f:93:cb:36:30:aa:5b:4f:5e:cc:ff:ff:60:f8:
83:89:99:f6:22:d4:72:4e:9b:fc:f5:9d:76:2b:13:6b:ed:75:
c5:6d:6d:f0:12:15:07:66:a5:f4:c6:f2:6c:ba:7f:27:e2:b0:
13:5e:9c:fc:9b:68:c2:dc:63:e4:e5:32:38:10:6f:48:e0:dc:
ab:07:e7:87:08:14:42:d0:c8:96:8b:25:ae:ac:1d:9b:94:53:
38:ea:59:c8:bc:0d:8f:c7:45:16:26:4a:d2:a7:1f:8a:e8:93:
cf:aa:8c:e2:3f:d2:fb:c7:ef:fd:61:f3:91:1d:a6:4d:58:81:
7a:4b:c3:53:d6:c1:44:d2:5f:2e:3a:a0:77:08:93:b1:4a:85:
24:a0:d4:7d:ec:62:c4:e5:5b:d8:7c:1e:d2:f4:9f:8b:df:65:
73:27:c2:88:f1:bb:02:04:cb:76:0c:7f:00:b5:b1:08:6f:65:
c3:b7:c5:90:a3:4e:f1:ad:44:27:67:9e:07:13:71:ee:78:df:
5d:5d:dc:23:98:f3:48:ed:e5:30:a5:27:b1:ad:98:65:8f:26:
8c:5a:35:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:32:53 2025 by rpki-client