Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Zb5JTyYiiOmWym8I2Fy81_XAe-c.roa
File: Zb5JTyYiiOmWym8I2Fy81_XAe-c.roa (raw, json)
Hash identifier: d+wX4njmhKG0fXPPNJxKObOX/e+8ZAfYmbtsv44QfVw=
Subject key identifier: 65:BE:49:4F:26:22:88:E9:96:CA:6F:08:D8:5C:BC:D7:F5:C0:7B:E7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019957466BF8DCAB276BBF0E93D4EB7685A6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Zb5JTyYiiOmWym8I2Fy81_XAe-c.roa
Signing time: Wed 17 Sep 2025 10:44:16 +0000
ROA not before: Wed 17 Sep 2025 10:44:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400810
IP address blocks: 151.243.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:46:6b:f8:dc:ab:27:6b:bf:0e:93:d4:eb:76:85:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 17 10:44:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65be494f262288e996ca6f08d85cbcd7f5c07be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a1:11:0a:3d:2d:48:b0:84:3b:56:3b:be:d2:
2f:50:ba:2f:5b:33:a4:e3:8a:ae:d3:5e:84:ec:dc:
9c:1c:eb:20:59:22:0b:84:18:ab:66:a5:3f:88:fa:
60:14:85:bf:6e:29:7c:b3:5c:78:c6:d5:fe:8e:37:
3e:df:51:be:1d:74:73:11:e8:e5:7d:c0:cd:d5:f6:
14:ac:64:47:df:d7:56:5c:81:a7:d8:96:7a:b5:59:
58:18:ba:56:8d:30:bc:a5:3d:01:62:93:72:ee:25:
db:ef:ba:ac:f3:94:68:a7:40:d2:de:ba:b4:17:cc:
83:d9:d7:83:bf:36:2b:37:8e:c1:34:da:da:da:04:
da:ca:5c:22:da:ca:9b:d9:80:16:e4:07:3b:21:7a:
06:c6:62:05:73:05:af:67:e8:58:ff:78:4c:5e:00:
0f:f5:05:67:5b:db:2b:3a:e1:89:f0:1b:16:32:65:
fc:8f:8a:fa:47:1b:bf:3c:77:b6:93:8b:5c:b8:f4:
71:07:1e:97:73:ad:ad:a4:3c:db:f7:e8:c3:9a:1d:
44:fa:b1:2d:6a:d0:a4:0a:8d:fd:58:bf:ba:9d:e9:
a1:47:0a:08:59:34:b5:93:e9:6a:a9:25:d0:74:8b:
14:73:13:36:da:ba:af:b8:3f:35:40:49:50:a5:8c:
e3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BE:49:4F:26:22:88:E9:96:CA:6F:08:D8:5C:BC:D7:F5:C0:7B:E7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Zb5JTyYiiOmWym8I2Fy81_XAe-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.143.0/24
Signature Algorithm: sha256WithRSAEncryption
71:03:62:d2:44:e6:7d:15:b7:de:c2:2d:4d:9e:f7:15:78:ed:
c8:16:c7:e3:d5:01:65:66:2f:0b:23:ca:7f:5b:0a:b3:d1:87:
43:44:93:ec:70:a2:0e:46:f1:f9:f0:bb:7d:26:1c:fe:2e:ee:
c8:b2:5e:2b:2f:93:7b:29:a3:b2:c6:8d:1a:22:15:4d:bf:e1:
67:16:2a:4a:2b:eb:74:eb:38:e8:5b:8c:4d:23:9f:39:c3:67:
d8:46:99:d1:97:91:0d:1e:b6:75:a6:bc:12:ab:d2:71:a0:98:
c3:ae:d7:0a:f2:8c:94:7c:f2:06:93:78:da:8a:e2:c9:78:42:
24:fc:f2:cb:7b:01:44:b9:72:f0:fa:09:ee:0f:df:d1:e5:e2:
90:fe:82:7d:8c:98:12:71:9f:fa:51:ab:eb:1e:bd:fc:16:1f:
29:60:a4:67:8d:60:50:a6:e5:0c:e2:bd:04:80:bd:e8:9d:3d:
f4:4c:03:4e:99:84:59:f6:f8:f9:8e:ed:6a:1a:bb:db:9f:28:
56:0f:38:0a:4d:89:31:52:99:06:25:06:31:a3:6e:99:83:58:
7d:62:ba:63:d6:f2:39:df:e6:14:0f:26:7d:15:97:de:59:97:
6d:95:e6:7e:1d:61:e8:e4:31:78:d4:95:ae:ef:8a:4d:8a:54:
29:50:08:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:36 2025 by rpki-client