Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bQbHQYll5RmMPMpsj2_QQu-P9eg.roa
File: bQbHQYll5RmMPMpsj2_QQu-P9eg.roa (raw, json)
Hash identifier: Wag3Ge1+7Tij0J5iRcIhG4LIX89enLFt3WQ/pGoMOAc=
Subject key identifier: 6D:06:C7:41:89:65:E5:19:8C:3C:CA:6C:8F:6F:D0:42:EF:8F:F5:E8
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199F5988E85DD4A7B7955E9671416741842
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bQbHQYll5RmMPMpsj2_QQu-P9eg.roa
Signing time: Sat 18 Oct 2025 04:33:59 +0000
ROA not before: Sat 18 Oct 2025 04:33:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216022
IP address blocks: 151.243.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f5:98:8e:85:dd:4a:7b:79:55:e9:67:14:16:74:18:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 18 04:33:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d06c7418965e5198c3cca6c8f6fd042ef8ff5e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c8:e2:24:c4:0e:80:c2:88:5e:bf:a2:a8:f6:
31:08:bd:6b:bb:b0:83:93:8e:cb:84:b7:f5:b4:fa:
7c:46:83:44:db:aa:cb:11:d9:ee:ef:bb:72:e9:f6:
e9:74:89:b6:76:f7:95:df:1d:fa:3c:43:0d:a5:98:
94:01:04:77:6d:95:ef:70:a7:78:37:d1:71:90:8c:
70:58:45:a8:95:6b:71:19:93:65:9d:26:b1:7d:86:
93:a5:92:d1:d7:a9:52:c7:6d:bf:de:fb:9b:e5:e0:
c3:09:0a:2a:fb:fb:c9:92:d7:d8:b4:53:cd:14:11:
00:39:3a:bd:af:46:72:e1:2d:86:5a:86:85:07:34:
40:6c:84:eb:ca:1e:44:34:fb:c0:12:3d:ba:19:83:
1c:a9:b7:59:13:13:45:4f:c2:38:80:43:81:d2:2f:
fa:be:87:9a:7d:10:84:20:3a:d4:1a:fb:10:f6:9f:
4f:05:5d:28:71:41:15:25:02:94:0d:97:25:2d:9f:
e9:29:55:62:83:16:99:80:34:6f:ce:ca:ad:39:06:
d1:81:10:68:1b:d3:e5:2f:a4:44:a3:a3:57:53:be:
f5:02:44:f5:f8:27:ce:7c:9d:91:84:ac:26:41:53:
ff:c4:16:d7:77:5c:9b:cf:ad:65:be:c4:ea:2d:25:
6f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:06:C7:41:89:65:E5:19:8C:3C:CA:6C:8F:6F:D0:42:EF:8F:F5:E8
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bQbHQYll5RmMPMpsj2_QQu-P9eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.43.0/24
Signature Algorithm: sha256WithRSAEncryption
74:bf:e7:98:94:c2:32:e4:78:99:36:b1:9d:04:51:e2:77:97:
d8:f2:63:ca:a3:5c:77:02:9b:a7:30:e8:44:66:51:5e:2e:d4:
d5:f5:2e:05:d2:34:d2:9d:00:ea:8c:c3:27:5e:7a:28:da:4a:
f5:f6:3e:19:05:f1:a5:a4:67:58:71:a8:22:c3:2b:6a:81:2a:
56:d3:6a:f2:63:ee:ad:ff:dd:3c:9c:e9:4a:13:ca:4e:5f:e4:
c1:71:fa:1b:1f:75:f9:4f:bc:f3:e1:71:8e:42:1a:6e:97:b5:
4b:a2:90:75:f8:e0:69:61:26:bf:6a:a0:09:da:17:70:47:b3:
50:0a:98:96:29:21:5c:7f:d3:61:c1:d4:87:f8:27:96:35:2c:
8e:43:45:f5:d4:f0:1f:9d:97:05:6a:99:9b:5c:2a:69:9f:97:
21:d4:66:35:a4:40:1b:17:3f:30:70:34:c8:fd:e3:f2:fe:b9:
b8:08:6c:3b:10:2b:9d:82:5e:00:52:0a:35:b1:0a:fd:fa:f9:
8d:d7:28:75:b2:a1:d2:b6:dc:74:ec:79:4f:cf:e6:25:bb:c1:
a5:44:f1:5b:43:05:c2:41:43:6c:94:4f:4d:64:03:4d:9d:0c:
3c:45:5e:30:ac:fc:37:bc:a0:1c:de:73:f1:ef:ec:4d:e8:23:
6d:3c:b6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:07:12 2025 by rpki-client