Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cEjk51LpyDoeR2caray9C5ZqYWw.roa
File: cEjk51LpyDoeR2caray9C5ZqYWw.roa (raw, json)
Hash identifier: hW0znFXAmUFSdPppn1dxfjsdx/Dk330BZRlLuDyZp8I=
Subject key identifier: 70:48:E4:E7:52:E9:C8:3A:1E:47:67:1A:AD:AC:BD:0B:96:6A:61:6C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199E2D0425288C3A9F20D5397FCC0128AAA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cEjk51LpyDoeR2caray9C5ZqYWw.roa
Signing time: Tue 14 Oct 2025 13:02:03 +0000
ROA not before: Tue 14 Oct 2025 13:02:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44066
IP address blocks: 151.242.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e2:d0:42:52:88:c3:a9:f2:0d:53:97:fc:c0:12:8a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 14 13:02:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7048e4e752e9c83a1e47671aadacbd0b966a616c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:f0:9e:5a:c7:d5:a9:a7:d4:d4:55:c1:4a:
43:fd:b1:5b:62:c8:de:93:66:61:01:49:81:13:54:
0d:8e:8b:a7:bc:80:25:4a:b9:69:8e:46:bb:55:ba:
ca:17:19:17:2b:74:4d:d8:e2:cf:ce:79:73:76:9d:
48:1d:b0:58:3d:71:fd:76:ac:fb:c9:fd:bd:22:0f:
0a:3d:b5:fb:42:e8:88:78:30:a4:bd:09:5c:fe:81:
cd:3d:ef:c7:89:a3:9b:67:fe:28:0e:01:80:58:7d:
94:39:03:eb:b0:9a:20:18:7a:dc:7e:0a:bf:2a:58:
5c:87:45:6a:4d:54:02:c9:00:33:c1:78:ee:ab:5c:
d7:41:bc:35:e3:c2:d9:61:5c:70:a1:76:f8:86:7b:
73:77:1d:c3:e0:73:2e:00:44:35:52:3e:22:bd:63:
9f:fd:48:df:d0:a6:00:1a:3e:46:d9:af:0c:4d:09:
b0:3b:56:f4:6b:15:ae:2f:0f:f9:12:ab:71:72:4a:
85:b3:11:4e:55:ef:a8:b4:e0:59:86:72:70:7a:d6:
33:70:be:9c:94:88:94:bb:bb:39:72:fe:82:f1:bc:
fb:44:d6:43:69:59:2b:14:5f:73:52:fc:47:87:48:
06:3a:bc:6d:54:63:8d:8d:89:4e:d7:ea:9f:58:04:
76:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:48:E4:E7:52:E9:C8:3A:1E:47:67:1A:AD:AC:BD:0B:96:6A:61:6C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cEjk51LpyDoeR2caray9C5ZqYWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.252.0/24
Signature Algorithm: sha256WithRSAEncryption
11:34:d3:b8:87:8b:42:6c:8d:3c:80:35:14:88:1c:3e:03:99:
9c:c8:33:24:95:21:78:67:02:df:d7:6f:19:3b:e3:dd:c4:f1:
60:ed:2e:77:57:3a:4a:df:9d:39:ae:5d:ab:14:e2:bd:1b:8f:
78:15:1d:c8:1a:40:4d:98:f3:ff:6e:0e:b5:2d:10:1b:5d:a6:
22:31:ed:9e:09:f3:61:2c:f0:4b:dd:a6:76:1c:80:8e:ea:7b:
4e:94:4e:f4:85:7c:70:5c:65:30:47:6b:2c:d4:a9:76:36:1c:
8f:d1:de:5b:bc:fe:ae:dc:a1:45:04:17:4a:6e:73:17:10:15:
9c:86:d4:33:c3:44:90:42:5a:3b:50:b2:5f:98:4a:60:d7:3f:
ba:d9:31:e7:81:14:9b:80:d1:86:9f:5f:27:6e:ba:ab:08:50:
1a:ec:c4:04:57:01:47:6b:06:e2:d9:c9:6c:07:9e:90:bd:36:
6f:5b:3c:de:7b:61:6f:7f:6c:ec:ff:d5:ba:90:63:b8:f9:1a:
57:d2:1d:b0:37:4b:9b:49:6c:e9:db:44:32:93:39:df:f2:ac:
2c:b3:df:e2:26:ba:82:f1:56:e7:3c:9a:b0:fb:a4:1e:20:b1:
8d:bb:98:ef:45:dc:f8:24:e9:63:f6:4c:14:72:5f:8e:e2:00:
aa:44:ec:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:07:08 2025 by rpki-client