Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gENdDOocinzqr4HgF-OZl2NZdy8.roa
File: gENdDOocinzqr4HgF-OZl2NZdy8.roa (raw, json)
Hash identifier: 2Ltom1G6aIdLus3W/BmIxET7Mqt29VCpxjIrk1Orehg=
Subject key identifier: 80:43:5D:0C:EA:1C:8A:7C:EA:AF:81:E0:17:E3:99:97:63:59:77:2F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01999AAF26CEFA9EEB907E6A7AF75BDF310F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gENdDOocinzqr4HgF-OZl2NZdy8.roa
Signing time: Tue 30 Sep 2025 12:53:13 +0000
ROA not before: Tue 30 Sep 2025 12:53:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63199
IP address blocks: 151.242.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9a:af:26:ce:fa:9e:eb:90:7e:6a:7a:f7:5b:df:31:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 30 12:53:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80435d0cea1c8a7ceaaf81e017e399976359772f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:03:c1:eb:25:38:89:f8:fa:22:a3:81:cb:cd:
0f:c3:48:34:7c:53:b7:3a:81:75:08:c0:66:1d:a2:
20:6b:76:42:48:5a:fa:0a:a0:e1:43:0a:24:9e:1f:
13:53:d8:44:c6:ff:5c:af:a7:26:93:c0:59:42:69:
34:5c:79:b6:6b:7c:55:1a:af:26:c6:23:9a:d8:d0:
62:11:71:7b:8a:f1:a9:0d:df:db:f4:35:b0:66:8d:
fa:5f:5c:28:5a:4b:2f:2a:b6:d5:84:2b:11:5e:43:
a2:c6:9d:1b:c1:e5:68:05:a7:2a:f4:ff:63:eb:8e:
e7:d0:e3:fe:39:bd:f5:38:73:fd:19:e2:1a:01:95:
bb:00:81:bf:1e:20:d9:97:96:a5:f7:2d:eb:4a:5d:
e9:74:bb:80:e1:75:51:92:1e:85:e3:34:55:be:0b:
dd:71:37:cd:cd:b5:3a:a7:3f:18:22:4d:51:48:e0:
92:2d:76:b0:9b:cf:9a:89:a2:7f:ab:87:38:55:de:
9c:91:42:15:66:1f:9b:cd:e4:3c:66:6b:54:c2:13:
03:f5:b6:e6:bd:91:fc:a9:cc:30:91:33:ef:01:8a:
1e:5b:31:48:01:be:75:fc:03:f4:0f:cb:48:95:cd:
44:a6:0e:a0:57:c7:85:d6:8d:4e:80:70:f3:83:51:
2b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:43:5D:0C:EA:1C:8A:7C:EA:AF:81:E0:17:E3:99:97:63:59:77:2F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gENdDOocinzqr4HgF-OZl2NZdy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.173.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b4:c6:39:62:50:c7:fc:45:fa:67:7c:0a:52:7b:0d:4c:92:
a4:39:a8:32:31:cb:5a:9f:30:9d:f9:b5:26:dd:2c:cc:bf:79:
68:a0:cd:7d:13:39:7b:d4:f6:e8:f7:a7:22:10:1a:75:ed:2e:
7b:e5:0a:02:e1:b6:f7:a1:c6:7a:47:d5:47:50:1c:6b:12:7d:
d3:78:47:77:92:bb:5d:b4:59:e1:4b:b7:ef:0d:b7:a7:46:05:
ff:0a:1b:03:d2:9d:1c:c9:f0:6a:80:2e:5a:2b:1c:1b:2f:04:
6f:e2:a3:76:2b:85:4d:be:c7:42:36:34:9f:07:16:65:83:52:
e8:f4:6e:2c:e3:b9:45:fc:f3:c6:cd:d3:08:05:bb:74:e7:ab:
5b:65:2d:ed:0b:69:38:98:db:e0:1f:f1:9f:c2:bd:69:ff:5b:
17:3e:29:82:65:6b:d0:12:9a:26:b0:4b:c6:14:f7:19:bb:fe:
98:70:28:b8:2f:b8:6f:79:95:ed:28:19:5d:9b:aa:11:5d:a0:
49:ab:bf:51:80:02:0b:ac:b2:8c:61:d6:fd:6c:3b:6d:d1:96:
8d:78:f7:2d:63:19:42:69:f2:e9:7d:d0:29:4a:76:99:90:98:
ca:86:00:c3:b0:bb:7d:84:ef:48:89:d2:4c:0f:18:3a:03:ad:
3a:20:b4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:08:45 2025 by rpki-client