Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bVGNUQkMvIGZbGWeMBnI_8PH8po.roa
File: bVGNUQkMvIGZbGWeMBnI_8PH8po.roa (raw, json)
Hash identifier: /WpTGLGrF/qQEn3p5ygt8wFKBmCfPdSqxxGLNJ+MHjo=
Subject key identifier: 6D:51:8D:51:09:0C:BC:81:99:6C:65:9E:30:19:C8:FF:C3:C7:F2:9A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01996565F7021786FAC30103D8FA54FD4492
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bVGNUQkMvIGZbGWeMBnI_8PH8po.roa
Signing time: Sat 20 Sep 2025 04:33:25 +0000
ROA not before: Sat 20 Sep 2025 04:33:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401163
IP address blocks: 151.245.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:65:65:f7:02:17:86:fa:c3:01:03:d8:fa:54:fd:44:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 20 04:33:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d518d51090cbc81996c659e3019c8ffc3c7f29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:30:4f:3e:78:8f:4a:75:4b:93:5d:82:41:c7:
15:7a:77:96:70:61:35:19:34:31:f7:61:35:d2:ab:
ad:bb:72:03:f4:ba:d0:89:43:b1:45:e8:21:e7:5a:
27:60:6c:be:e4:4a:49:a9:10:52:7e:96:d7:64:0a:
5a:ca:99:99:3b:aa:71:6c:42:f4:b1:09:6f:8c:48:
df:ce:c9:11:33:97:7b:ae:ae:8a:50:a8:53:85:6b:
1e:6a:c8:3c:de:5f:57:a8:c0:6d:ac:b2:4a:00:7b:
b3:a8:3e:33:a1:26:52:e6:cb:b3:23:51:3a:d4:02:
03:3c:c8:15:3e:56:15:25:a4:82:20:90:76:5e:99:
fa:33:23:07:97:b1:00:db:5d:64:9e:a3:03:24:1b:
7b:d2:53:60:0c:66:80:25:93:21:73:a8:95:d3:89:
aa:89:1b:fc:93:3c:95:03:47:2a:b6:07:3f:7a:1b:
63:e3:07:6c:a3:72:2a:34:5f:da:34:da:13:8b:21:
b4:b0:f6:84:7f:94:0a:8e:82:8f:89:99:76:e7:14:
da:21:60:41:f7:86:70:75:4f:6c:17:f6:76:40:01:
76:30:b7:f9:d6:08:e3:27:89:04:7c:5e:b4:0e:e8:
58:ed:d4:97:91:69:a9:55:c4:7d:e9:62:5b:be:5d:
a4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:51:8D:51:09:0C:BC:81:99:6C:65:9E:30:19:C8:FF:C3:C7:F2:9A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bVGNUQkMvIGZbGWeMBnI_8PH8po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.50.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:ae:b9:43:27:ce:16:7d:94:3c:f7:97:aa:85:de:61:c1:83:
95:9a:73:77:77:38:53:41:a5:59:cd:d9:ea:26:78:1a:aa:a8:
a3:70:8a:5e:c9:1b:d5:b2:05:3d:26:fd:be:0c:43:d7:eb:48:
b0:30:73:04:a2:68:d3:fd:07:bf:e0:42:2d:b0:80:c4:bd:aa:
b8:8f:6d:8e:c9:d1:00:97:85:52:58:9b:d8:40:93:b5:af:d4:
10:08:0c:d4:60:11:7f:92:db:e7:60:5d:21:44:ea:c5:04:83:
fa:c4:78:ea:db:e3:ae:b7:5c:ad:c4:2e:98:d3:8d:c4:12:d6:
da:71:ce:f8:dc:36:ac:58:95:e7:19:ed:16:98:4e:3a:54:cd:
b5:af:55:96:f2:8b:81:c6:a7:c5:9d:b8:59:f3:a2:a2:a6:bf:
5b:d4:6e:18:93:de:ee:ea:55:d9:41:dd:f0:3e:1e:53:73:ba:
ca:c7:61:c1:56:9b:63:c6:99:04:4f:82:7d:e7:52:96:ff:04:
7c:18:33:93:91:4d:2d:d3:a4:97:55:92:17:4d:04:c6:27:9e:
b3:9f:7e:22:28:91:7a:f9:a9:b0:da:ee:00:c7:04:a2:ae:57:
e6:ac:59:ce:19:8e:0f:3c:2c:08:72:f2:7c:57:39:7a:bb:db:
c5:91:4c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:53 2025 by rpki-client