
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/l8MWDQ_eKPlg7O2ag0Bq6hlMcxg.roa
File: l8MWDQ_eKPlg7O2ag0Bq6hlMcxg.roa (raw, json)
Hash identifier: yWCtGlu4bAGqof6AAA1cV+u2k815bMiRLWIx3Wnt7sU=
Subject key identifier: 97:C3:16:0D:0F:DE:28:F9:60:EC:ED:9A:83:40:6A:EA:19:4C:73:18
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199523D6051A7A60C985181A4347A62C8A8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/l8MWDQ_eKPlg7O2ag0Bq6hlMcxg.roa
Signing time: Tue 16 Sep 2025 11:16:18 +0000
ROA not before: Tue 16 Sep 2025 11:16:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210667
IP address blocks: 151.241.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:3d:60:51:a7:a6:0c:98:51:81:a4:34:7a:62:c8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 16 11:16:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97c3160d0fde28f960eced9a83406aea194c7318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:76:5d:0e:70:96:75:01:90:56:a6:c8:f8:f2:
55:18:e7:61:73:af:ac:dd:81:a5:be:8f:2a:4f:d5:
33:51:ef:3a:80:39:2f:9f:9b:1a:4b:7d:2c:b7:a5:
db:59:cb:b3:b9:2e:60:d9:53:85:44:84:63:d3:e6:
c6:80:e6:0e:01:88:3a:d1:49:16:89:56:80:ff:09:
b7:49:ab:ed:9e:a7:43:ef:9c:29:6a:2d:3c:aa:38:
24:0d:87:e8:a8:b7:05:41:40:72:ff:77:4c:eb:87:
cf:5b:ad:8e:c3:0c:ea:ff:63:fc:38:f5:a7:fc:e6:
5c:65:00:00:df:f9:ce:e2:a0:b1:9e:27:6c:06:a7:
03:83:0c:da:e5:ef:87:ac:dc:c6:6b:66:50:e5:a2:
f9:4f:bc:98:2e:be:26:54:3b:71:39:03:66:ae:91:
2f:99:29:7a:b5:09:af:19:7a:36:b8:23:fc:6e:a3:
58:1e:ec:04:c5:bd:b6:b0:58:ed:a2:08:c7:2f:9c:
6f:23:e2:ea:51:44:23:30:bf:ea:d6:5d:93:e2:ce:
37:70:50:0b:bf:e4:8c:f4:91:a3:5a:6a:6a:ea:22:
a5:5b:f3:e4:4c:73:32:1f:b3:cc:79:12:63:c2:ba:
6e:9a:a5:1f:e4:1f:5a:59:78:eb:e9:83:88:59:3f:
68:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C3:16:0D:0F:DE:28:F9:60:EC:ED:9A:83:40:6A:EA:19:4C:73:18
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/l8MWDQ_eKPlg7O2ag0Bq6hlMcxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.74.0/24
Signature Algorithm: sha256WithRSAEncryption
53:eb:4e:a3:1f:80:2b:c6:1b:4e:73:8f:69:b1:86:55:c4:9b:
f2:d5:cb:75:55:c4:40:10:3f:07:e0:2b:b5:b8:28:b1:29:25:
74:d3:7f:07:7e:3a:b2:0f:82:35:01:48:99:37:8d:76:e6:98:
43:e3:57:2a:07:c0:45:6f:da:9f:9d:d1:33:ee:0e:21:07:40:
bf:7f:e1:a1:c9:74:7a:bf:ac:70:15:87:aa:2a:cc:c3:dd:68:
d1:61:51:5e:43:03:ed:1e:32:61:d7:d8:4c:17:2c:ed:a8:df:
ab:4e:b7:fe:29:7b:8e:f5:49:90:41:c3:08:ba:df:da:fe:67:
a2:09:d8:f6:9e:68:b2:47:1b:f4:a1:cd:50:da:ff:65:10:f0:
1e:1b:9d:dc:34:31:db:d4:12:04:4a:5b:fe:38:e3:5b:5b:23:
56:7d:45:38:fc:2e:72:1d:18:85:b8:2b:c4:4a:dc:9d:83:18:
3b:dd:b5:a9:0f:da:3f:57:2b:da:95:27:aa:28:14:de:91:75:
ec:b9:e9:45:f2:64:39:07:ab:2e:2d:a6:0f:e2:ac:98:5b:4b:
b2:af:73:48:df:73:96:ea:29:27:83:0f:67:9c:1a:1f:62:88:
93:cb:a1:2c:a3:88:cb:00:11:13:6e:4c:36:0e:9a:ee:cd:5a:
f3:34:1f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:17 2025 by rpki-client