Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kVqpl5SIzYUGqIokTdvUyf-iTe0.roa
File: kVqpl5SIzYUGqIokTdvUyf-iTe0.roa (raw, json)
Hash identifier: g8GZy/cXPWcF9Qv9fLQ19GRKE4c0rDqQvPp8UmvuV4o=
Subject key identifier: 91:5A:A9:97:94:88:CD:85:06:A8:8A:24:4D:DB:D4:C9:FF:A2:4D:ED
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198AE2A9DF6E42DCF028CF4FB7E6E595C03
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kVqpl5SIzYUGqIokTdvUyf-iTe0.roa
Signing time: Fri 15 Aug 2025 14:38:05 +0000
ROA not before: Fri 15 Aug 2025 14:38:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 151.243.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ae:2a:9d:f6:e4:2d:cf:02:8c:f4:fb:7e:6e:59:5c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 15 14:38:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=915aa9979488cd8506a88a244ddbd4c9ffa24ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:06:4c:5c:b3:65:32:1e:05:94:17:41:09:
2d:f5:9f:7f:a4:63:f8:bd:2e:e3:88:a5:fa:fe:98:
f7:0f:07:68:aa:bc:de:e7:68:7e:07:78:ce:9d:82:
92:8d:94:c8:c9:7a:1e:d6:95:78:e2:d2:11:17:b0:
18:59:45:2b:7a:6b:2e:2b:4d:7e:d5:d9:2f:c4:90:
e4:05:b3:d9:21:81:fe:c5:21:5e:35:49:02:43:4c:
42:a8:83:8b:12:42:6f:1b:bf:43:e0:3f:61:8d:32:
8a:08:71:59:8e:04:8d:11:68:46:56:69:44:41:bc:
c4:c2:a2:de:d0:dc:db:fe:05:d8:19:19:a6:e6:b9:
a3:88:1f:eb:07:d6:14:6c:b4:65:2d:63:a0:78:41:
b5:6d:80:70:cf:b7:f6:a7:c4:4a:e9:e9:0d:98:41:
fe:d9:6d:ee:f5:35:43:47:eb:2e:ea:77:d1:90:86:
df:03:f1:84:c9:ae:ac:66:47:2b:27:8a:c1:1c:40:
9a:db:7e:77:95:72:e9:df:af:6f:af:83:19:04:58:
ae:eb:68:55:a2:19:eb:4a:bd:60:a8:0c:ed:0f:89:
b1:ac:c8:5d:8f:60:d1:c7:ac:0d:fa:91:c1:1a:4b:
1f:71:49:ca:6c:84:2b:4e:f0:e2:00:f6:5b:d0:7b:
ae:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5A:A9:97:94:88:CD:85:06:A8:8A:24:4D:DB:D4:C9:FF:A2:4D:ED
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kVqpl5SIzYUGqIokTdvUyf-iTe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.150.0/24
Signature Algorithm: sha256WithRSAEncryption
44:db:c0:f6:2d:62:88:bf:e9:72:10:7e:9d:9a:35:4e:9f:29:
74:ea:5f:a8:dc:d9:01:1c:1d:d8:2c:e0:98:12:aa:09:5e:ab:
80:4e:de:78:14:f6:6f:57:d2:9c:0a:8e:46:fc:82:97:6b:67:
fc:50:15:a1:5b:14:ad:cc:21:f0:ea:b2:b2:8e:da:0a:2e:57:
1c:54:a0:c7:d1:df:3c:3f:bb:c9:7b:d6:ab:8d:1e:6a:6b:71:
37:8a:1b:a4:98:f5:d4:8b:cc:50:d4:b7:03:45:1e:34:b5:f0:
ad:00:90:c5:c2:20:ad:8b:6b:92:fe:98:20:06:48:28:fd:03:
63:f3:14:c8:16:ca:61:98:4a:d2:d1:c4:7b:51:93:7a:1c:4f:
76:e8:2f:d3:70:69:b3:b0:36:b5:a0:1c:85:4a:ed:45:82:6b:
42:34:16:15:6b:79:13:46:eb:e4:3a:15:63:62:01:ce:e0:58:
57:5d:a9:ec:6d:95:2f:09:a8:e3:82:d9:be:34:f1:ff:b8:fa:
88:91:ed:e1:91:37:cd:62:94:62:73:f0:e1:69:a7:1b:06:9f:
a1:42:c6:63:6a:47:11:3f:7e:35:bc:48:5e:f8:48:4b:ae:09:
41:ff:f8:d5:92:2e:bd:7e:18:c8:0a:10:de:55:7a:97:de:e8:
e8:e3:3b:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZiuKp325C3PAoz0+35uWVwDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwODE1MTQzODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTVhYTk5Nzk0ODhjZDg1MDZhODhhMjQ0ZGRiZDRjOWZmYTI0ZGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb8GTFyzZTIeBZQXQQkt9Z9/pGP4
vS7jiKX6/pj3Dwdoqrze52h+B3jOnYKSjZTIyXoe1pV44tIRF7AYWUUremsuK01+
1dkvxJDkBbPZIYH+xSFeNUkCQ0xCqIOLEkJvG79D4D9hjTKKCHFZjgSNEWhGVmlE
QbzEwqLe0Nzb/gXYGRmm5rmjiB/rB9YUbLRlLWOgeEG1bYBwz7f2p8RK6ekNmEH+
2W3u9TVDR+su6nfRkIbfA/GEya6sZkcrJ4rBHECa2353lXLp369vr4MZBFiu62hV
ohnrSr1gqAztD4mxrMhdj2DRx6wN+pHBGksfcUnKbIQrTvDiAPZb0HuuJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJFaqZeUiM2FBqiKJE3b1Mn/ok3tMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEva1ZxcGw1U0l6WVVHcUlva1RkdlV5Zi1pVGUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/OWMA0G
CSqGSIb3DQEBCwUAA4IBAQBE28D2LWKIv+lyEH6dmjVOnyl06l+o3NkBHB3YLOCY
EqoJXquATt54FPZvV9KcCo5G/IKXa2f8UBWhWxStzCHw6rKyjtoKLlccVKDH0d88
P7vJe9arjR5qa3E3ihukmPXUi8xQ1LcDRR40tfCtAJDFwiCti2uS/pggBkgo/QNj
8xTIFsphmErS0cR7UZN6HE926C/TcGmzsDa1oByFSu1FgmtCNBYVa3kTRuvkOhVj
YgHO4FhXXansbZUvCajjgtm+NPH/uPqIke3hkTfNYpRic/DhaacbBp+hQsZjakcR
P341vEhe+EhLrglB//jVki69fhjIChDeVXqX3ujo4zvd
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:23:11 2025 by rpki-client