Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cZVbvm7QvLxwkSny93fD1HKMcfk.roa
File: cZVbvm7QvLxwkSny93fD1HKMcfk.roa (raw, json)
Hash identifier: TqEjJyR9G5dTyvW62L+xeekpMW7Akk/8HGyoAREiS8A=
Subject key identifier: 71:95:5B:BE:6E:D0:BC:BC:70:91:29:F2:F7:77:C3:D4:72:8C:71:F9
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01989CBF64B9916E054C86AFCF9E9206A113
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cZVbvm7QvLxwkSny93fD1HKMcfk.roa
Signing time: Tue 12 Aug 2025 05:27:25 +0000
ROA not before: Tue 12 Aug 2025 05:27:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272524
IP address blocks: 151.243.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:bf:64:b9:91:6e:05:4c:86:af:cf:9e:92:06:a1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 12 05:27:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71955bbe6ed0bcbc709129f2f777c3d4728c71f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:73:74:99:59:79:af:92:bf:5c:4d:63:9e:
43:ce:0c:ec:a6:bb:79:9c:6c:75:58:31:af:2f:e2:
3d:c2:2a:0a:ce:4a:41:a6:6f:7a:85:cb:03:55:6e:
b1:52:1f:53:b0:80:6c:78:f7:82:96:9c:c9:42:45:
0d:18:8a:3d:a9:e9:30:e5:c6:16:78:2b:04:70:ca:
4e:7e:7a:94:f7:96:fa:cf:18:02:c7:fc:da:11:26:
1a:7f:51:f3:c2:82:73:08:64:5a:93:b0:43:43:8a:
e7:85:4e:91:bd:c5:92:2f:3f:fd:e1:9d:ec:dc:f5:
28:93:ab:36:61:65:7b:2b:ec:89:a0:5b:ed:65:90:
cd:5a:dc:ed:c8:67:6a:8b:f9:66:51:f1:1e:ac:2b:
d7:18:34:98:df:da:22:46:53:e6:7e:53:38:06:50:
cb:5f:97:2b:e1:5c:9d:58:61:a9:1a:c1:2f:b2:14:
a6:51:0d:07:98:35:3f:7f:0f:fb:42:2f:bb:4d:ed:
98:38:6e:ad:1c:87:6b:ec:b1:49:89:3b:62:62:43:
0f:78:c6:fd:27:bb:85:97:44:80:cc:27:2a:1f:df:
20:aa:82:b1:b5:a8:e5:4d:f7:93:d1:59:2f:c2:19:
83:5f:5f:0d:1a:4d:95:0f:bf:a9:14:15:5c:ea:e4:
bf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:95:5B:BE:6E:D0:BC:BC:70:91:29:F2:F7:77:C3:D4:72:8C:71:F9
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cZVbvm7QvLxwkSny93fD1HKMcfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.137.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:21:42:06:b3:66:89:49:f3:0f:d3:d2:a6:16:33:44:e8:c2:
57:22:58:4b:09:90:95:89:a4:b1:05:58:ad:91:dc:f4:ea:9c:
d1:04:99:39:d8:72:e4:85:cf:6a:d4:a6:5d:aa:72:61:12:30:
7b:4a:e5:ff:71:da:cd:cb:b2:00:29:16:13:91:8b:ce:73:44:
cc:30:28:c8:8f:2b:1b:bc:d2:27:df:f1:8d:06:bf:3f:3e:5f:
31:b7:95:00:31:ec:77:d5:84:df:95:04:7d:5b:36:6d:2f:93:
d9:e2:68:4d:37:31:ea:a6:f8:af:66:1f:05:4d:d7:99:45:ae:
f7:c0:85:38:5d:64:b2:b1:c5:cc:d4:2d:a0:6a:18:4e:86:c4:
57:b5:c0:7f:b3:66:8f:ec:04:e5:dd:34:3f:cb:43:e0:49:b3:
ee:e7:c4:74:49:55:53:c1:28:f4:25:a7:e1:cf:ff:6b:d9:f3:
59:7d:9a:9e:41:35:6e:c4:fc:22:b6:55:1f:b8:81:30:ea:ce:
fd:34:a4:5d:0e:71:df:86:67:1b:0f:94:f3:9f:55:df:41:4f:
56:0b:7f:5a:83:a0:f8:95:aa:e4:a9:48:47:37:fd:cc:d9:bf:
eb:4b:55:f3:bc:e4:3b:29:88:b5:ee:28:4f:38:4f:e9:d8:29:
bd:74:5e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:35:39 2025 by rpki-client