Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gAFYGNNcnRX778eVBwQbRPabphY.roa
File: gAFYGNNcnRX778eVBwQbRPabphY.roa (raw, json)
Hash identifier: sQ6dAzzxPCS9BrpgEcJ0ksQrMxkPYxRYsFMX8s53vqw=
Subject key identifier: 80:01:58:18:D3:5C:9D:15:FB:EF:C7:95:07:04:1B:44:F6:9B:A6:16
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199E1262D3786F2A9B45A3D78D348D966B6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gAFYGNNcnRX778eVBwQbRPabphY.roa
Signing time: Tue 14 Oct 2025 05:16:39 +0000
ROA not before: Tue 14 Oct 2025 05:16:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401418
IP address blocks: 151.243.14.0/24 maxlen: 24
151.243.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e1:26:2d:37:86:f2:a9:b4:5a:3d:78:d3:48:d9:66:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 14 05:16:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80015818d35c9d15fbefc79507041b44f69ba616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d4:62:b1:0a:d4:15:d1:8c:f0:5a:7d:95:ec:
1f:01:fd:29:75:f6:b2:17:1b:6f:db:dc:0f:26:b0:
bb:52:cf:7b:e4:75:be:aa:09:15:dd:d9:02:6c:8a:
eb:42:80:5c:ca:aa:cf:ee:7a:8e:1d:58:b0:d5:43:
a0:51:83:04:d8:a0:da:61:6d:b8:ee:79:9a:70:5e:
a6:93:9d:1a:b2:3b:17:89:bb:97:44:5d:e2:e4:0a:
da:68:78:aa:36:1e:a2:87:5d:43:1a:e2:4c:ff:42:
fa:e8:a3:16:68:d1:75:5e:1b:ba:d6:8d:3a:97:84:
fc:c7:26:29:a6:50:9e:29:72:34:7a:a9:3b:e1:92:
93:5a:a4:02:a0:99:15:e9:4e:3e:5b:41:8a:06:5a:
35:30:90:59:52:9f:54:ca:a7:19:0d:c0:9d:97:5d:
e7:de:1b:ec:ec:c3:ef:ba:19:7c:82:04:94:1b:cf:
89:ef:93:d4:5c:b0:1f:82:fe:2f:fc:25:e2:4f:30:
49:f3:3d:6c:45:00:a4:74:4d:03:04:5a:36:ab:f2:
18:c3:47:2f:19:4a:55:29:9d:15:3f:33:12:b0:ab:
ff:9d:57:a8:85:52:0e:e1:48:d6:23:4b:d0:35:fb:
d3:eb:bc:fb:ab:cc:83:67:ac:5a:31:1b:d1:a6:18:
01:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:01:58:18:D3:5C:9D:15:FB:EF:C7:95:07:04:1B:44:F6:9B:A6:16
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gAFYGNNcnRX778eVBwQbRPabphY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.14.0/24
151.243.111.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:48:c0:4d:55:61:e2:5e:8d:fb:52:b3:88:96:e9:a2:e2:39:
b6:73:c6:bf:88:aa:a7:c9:25:ea:72:7d:0c:80:23:ae:20:22:
1d:4b:80:8d:1f:eb:26:6e:66:58:b3:b4:53:ec:7d:b5:d7:f6:
59:37:69:a8:c4:ec:a9:ef:d8:80:e3:49:e1:53:06:e2:15:9d:
6c:6e:58:5e:f3:9c:55:7f:18:6d:38:ce:b7:f6:7e:07:1a:e5:
8d:a6:e0:35:6b:69:f5:ab:ab:90:cb:34:f1:ed:12:89:d6:cd:
0e:43:1b:53:7f:32:1d:b5:be:24:cc:37:99:ea:7a:8f:a4:a3:
4c:bd:93:09:a0:3b:16:50:43:e8:73:a4:a6:3d:9a:2c:0d:50:
55:66:21:cb:24:de:8f:cb:c7:59:1a:cf:ae:46:04:55:ba:b5:
aa:89:d4:c0:6e:e0:12:aa:c2:7d:fa:5a:e0:d2:6c:87:3b:63:
6d:bd:d8:57:d7:74:a7:a4:45:de:ab:f0:ba:44:e2:76:ff:ce:
bf:9a:0e:a4:e9:aa:23:5a:b5:21:48:be:9f:5c:8a:47:d4:39:
3e:ae:9f:15:5c:a4:26:49:7c:ce:a2:cf:1e:47:4c:67:52:40:
98:04:f4:c3:f1:bc:71:35:d2:20:1d:76:a8:57:ec:f8:05:ec:
e1:42:04:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:08:15 2025 by rpki-client