Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dtUXgwW-iG2sQ72Q2J7uYRRbmck.roa
File: dtUXgwW-iG2sQ72Q2J7uYRRbmck.roa (raw, json)
Hash identifier: 732iEUX2X1IJojnHHdM80XYLsNmaWcb/bwLME7Aq6ok=
Subject key identifier: 76:D5:17:83:05:BE:88:6D:AC:43:BD:90:D8:9E:EE:61:14:5B:99:C9
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199CE25F9FBB01A44BF2503295E9E2582C6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dtUXgwW-iG2sQ72Q2J7uYRRbmck.roa
Signing time: Fri 10 Oct 2025 12:43:39 +0000
ROA not before: Fri 10 Oct 2025 12:43:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205329
IP address blocks: 151.246.240.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ce:25:f9:fb:b0:1a:44:bf:25:03:29:5e:9e:25:82:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 10 12:43:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76d5178305be886dac43bd90d89eee61145b99c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0e:af:8e:7d:8e:ee:76:e0:57:30:c8:21:38:
d9:b6:68:42:06:93:cc:19:d4:d9:7a:2b:25:de:cd:
31:9b:c9:33:d9:f6:67:93:b0:32:0f:10:21:86:bf:
c3:35:e8:7d:36:25:33:a5:4b:0d:ea:65:d8:e2:99:
13:85:df:e9:7f:66:70:69:26:e8:51:a5:41:8f:2a:
bb:77:34:c9:2c:8f:1e:c6:1e:9d:a6:85:a7:a8:c3:
b8:53:93:0f:c6:14:6f:75:1d:cb:b4:b8:40:62:2e:
27:37:74:72:46:5a:fe:61:94:02:23:61:aa:71:09:
25:a7:14:3d:b8:4d:af:a1:61:a1:29:44:45:82:75:
d5:a9:78:d1:a0:f1:44:61:7a:ed:e0:05:4b:54:27:
26:29:0c:a1:d9:36:ba:e6:19:9d:4d:04:6d:4f:2f:
91:d9:ab:c5:51:f9:db:97:16:72:c5:2b:e2:6d:fb:
3a:d9:a1:68:13:4b:f3:36:fa:fa:8b:6f:9d:c9:81:
5d:ae:10:34:4e:32:36:7e:4b:b8:28:cb:79:6b:37:
2f:23:fd:49:74:60:45:7a:32:fd:a2:ea:0a:3b:ab:
3c:84:4d:34:de:84:bb:3d:76:0d:34:77:8d:d7:c7:
62:10:ab:4b:88:e1:e9:1d:a1:1d:80:6f:39:2a:ef:
57:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D5:17:83:05:BE:88:6D:AC:43:BD:90:D8:9E:EE:61:14:5B:99:C9
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dtUXgwW-iG2sQ72Q2J7uYRRbmck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.240.0/23
Signature Algorithm: sha256WithRSAEncryption
80:68:9f:15:ba:16:a3:50:e7:2a:5f:1b:dc:39:cd:e9:9e:36:
69:dc:c3:a8:1d:b6:ce:93:e3:55:2b:2a:6c:13:88:ee:a4:f0:
c1:dc:83:b2:ab:35:e1:b1:f2:42:79:a3:f8:c9:b5:de:a2:19:
53:d6:35:8e:f4:8e:cf:db:02:2d:2b:5d:12:15:07:7a:6c:00:
3e:b5:f1:78:d1:88:44:d5:dc:e9:2c:7e:f4:cf:87:67:75:7a:
2e:9d:d3:e4:b8:81:22:a8:34:fd:09:89:cc:cd:ab:6a:ec:87:
61:26:d2:34:ba:b3:97:3e:42:31:a3:ea:a2:d3:bc:95:f5:39:
c7:9c:a9:64:28:3c:55:d1:17:d9:1c:e5:e7:88:d8:fc:f0:b0:
e3:42:d6:c3:f9:3d:12:93:0a:e5:cb:bb:c7:74:ef:a7:37:fd:
a4:29:94:d2:94:e8:45:8e:46:da:e4:ad:b5:90:2b:bc:d6:76:
a0:2c:67:63:0d:f4:3f:b5:86:b4:b0:c7:38:9c:20:65:3e:d9:
b6:99:5b:7a:45:ea:22:10:a3:ac:7e:bd:5b:1c:85:fe:0f:62:
ac:67:db:32:8d:c9:00:3e:42:96:d8:d8:31:d3:34:f9:4b:a6:
ba:13:33:11:ad:60:f5:aa:9e:fb:87:9a:70:8b:74:83:c1:a3:
d3:87:6d:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZnOJfn7sBpEvyUDKV6eJYLGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUxMDEwMTI0MzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmQ1MTc4MzA1YmU4ODZkYWM0M2JkOTBkODllZWU2MTE0NWI5OWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww6vjn2O7nbgVzDIITjZtmhCBpPM
GdTZeisl3s0xm8kz2fZnk7AyDxAhhr/DNeh9NiUzpUsN6mXY4pkThd/pf2ZwaSbo
UaVBjyq7dzTJLI8exh6dpoWnqMO4U5MPxhRvdR3LtLhAYi4nN3RyRlr+YZQCI2Gq
cQklpxQ9uE2voWGhKURFgnXVqXjRoPFEYXrt4AVLVCcmKQyh2Ta65hmdTQRtTy+R
2avFUfnblxZyxSvibfs62aFoE0vzNvr6i2+dyYFdrhA0TjI2fku4KMt5azcvI/1J
dGBFejL9ouoKO6s8hE003oS7PXYNNHeN18diEKtLiOHpHaEdgG85Ku9XtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHbVF4MFvohtrEO9kNie7mEUW5nJMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvZHRVWGd3Vy1pRzJzUTcyUTJKN3VZUlJibWNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl/bwMA0G
CSqGSIb3DQEBCwUAA4IBAQCAaJ8VuhajUOcqXxvcOc3pnjZp3MOoHbbOk+NVKyps
E4jupPDB3IOyqzXhsfJCeaP4ybXeohlT1jWO9I7P2wItK10SFQd6bAA+tfF40YhE
1dzpLH70z4dndXoundPkuIEiqDT9CYnMzatq7IdhJtI0urOXPkIxo+qi07yV9TnH
nKlkKDxV0RfZHOXniNj88LDjQtbD+T0Skwrly7vHdO+nN/2kKZTSlOhFjkba5K21
kCu81nagLGdjDfQ/tYa0sMc4nCBlPtm2mVt6ReoiEKOsfr1bHIX+D2KsZ9syjckA
PkKW2Ngx0zT5S6a6EzMRrWD1qp77h5pwi3SDwaPTh21p
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:39:46 2025 by rpki-client