Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/maK01phwJ_ItcA4KMtNBrW43Hdg.roa
File: maK01phwJ_ItcA4KMtNBrW43Hdg.roa (raw, json)
Hash identifier: /7o0IUgtoUaI33o/1FUNkbIx6k3mKnZ1tYTzVemaFyk=
Subject key identifier: 99:A2:B4:D6:98:70:27:F2:2D:70:0E:0A:32:D3:41:AD:6E:37:1D:D8
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01991D5F426650DADD5027E469E3BC016B94
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/maK01phwJ_ItcA4KMtNBrW43Hdg.roa
Signing time: Sat 06 Sep 2025 04:53:26 +0000
ROA not before: Sat 06 Sep 2025 04:53:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213660
IP address blocks: 151.242.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:5f:42:66:50:da:dd:50:27:e4:69:e3:bc:01:6b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 6 04:53:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99a2b4d6987027f22d700e0a32d341ad6e371dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:64:c6:d1:a3:1b:f3:b6:4b:1c:b4:de:d8:
50:a5:7d:a5:56:5c:5b:a8:bd:55:70:84:1e:ff:96:
ba:1a:17:cc:18:37:a9:b5:41:79:90:d9:af:d7:6c:
95:1d:e9:76:62:f4:ef:c8:e0:d0:50:8f:5d:5e:15:
cc:1b:b1:d6:6e:3b:26:a9:12:1c:46:a0:6c:4e:df:
1c:85:c5:1b:24:b6:e2:71:90:06:5c:bb:ce:c3:30:
3f:f5:f0:ef:d6:0f:69:f8:5b:3f:b7:e3:24:95:e3:
fc:46:8e:84:e5:7c:48:cc:59:6d:72:06:6e:97:f7:
2f:49:5f:71:81:17:36:00:1f:cd:ad:dd:df:71:c8:
a3:38:50:48:1a:21:51:e2:f5:ee:6f:b5:e6:e4:7c:
49:52:c0:50:90:19:04:1e:43:57:b7:0f:44:87:5d:
8f:63:8d:d0:a4:96:ff:5d:ab:33:63:25:24:7d:50:
39:11:e0:0c:ef:07:46:71:b1:4a:8d:87:36:ca:04:
63:18:b1:a4:73:c5:7e:05:c9:5f:c1:f8:90:1c:20:
06:98:34:e7:b4:3d:23:64:ba:ba:34:d3:18:2c:18:
8d:14:22:e7:3f:20:75:a3:52:20:aa:a1:04:99:fe:
3a:8e:3f:d5:04:b3:d4:5b:a0:ab:fa:a6:ca:08:70:
f3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A2:B4:D6:98:70:27:F2:2D:70:0E:0A:32:D3:41:AD:6E:37:1D:D8
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/maK01phwJ_ItcA4KMtNBrW43Hdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.119.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:15:4f:f8:53:40:d4:61:8d:b6:b6:97:6e:7d:de:1b:36:70:
7e:59:8c:9c:f4:25:d7:13:e1:a3:ae:70:e5:db:51:f9:d7:47:
7c:bc:38:45:ac:cc:d2:71:c6:1e:ab:0e:0c:2e:68:31:36:0b:
91:6c:ff:8b:b8:ab:70:c7:49:f6:6e:0a:a9:7b:d5:7f:8b:1d:
0d:0a:76:88:fc:68:d3:3b:d0:7c:9e:d7:cc:fa:7a:ed:89:18:
18:1c:ed:f3:f4:02:76:9c:07:08:77:12:c7:0b:83:dc:bd:6f:
fe:53:31:0f:16:8a:e6:dd:5a:58:42:74:d2:14:be:db:4b:db:
ae:8f:51:91:43:41:55:7b:dd:c6:b7:3f:f8:12:db:c9:ab:69:
60:17:e8:33:13:44:88:51:79:be:c1:25:8b:c2:f1:a6:46:6b:
a6:61:c1:8d:2a:8f:84:0b:37:a3:6a:08:2a:d3:b5:00:93:08:
a5:bc:66:f6:d6:49:42:57:25:d8:e2:6d:af:c0:62:28:9e:f6:
7e:28:e8:5f:8e:a0:2e:b2:7c:9c:c3:2f:26:4b:23:9f:f4:2c:
ca:f8:3b:ed:de:74:0d:14:47:6f:17:24:fb:23:2e:7e:7d:cc:
09:5d:a3:90:0d:14:22:61:ef:8c:e7:8a:26:cc:08:96:e2:8b:
dc:51:4d:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZkdX0JmUNrdUCfkaeO8AWuUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwOTA2MDQ1MzI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWEyYjRkNjk4NzAyN2YyMmQ3MDBlMGEzMmQzNDFhZDZlMzcxZGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphhkxtGjG/O2Sxy03thQpX2lVlxb
qL1VcIQe/5a6GhfMGDeptUF5kNmv12yVHel2YvTvyODQUI9dXhXMG7HWbjsmqRIc
RqBsTt8chcUbJLbicZAGXLvOwzA/9fDv1g9p+Fs/t+MkleP8Ro6E5XxIzFltcgZu
l/cvSV9xgRc2AB/Nrd3fccijOFBIGiFR4vXub7Xm5HxJUsBQkBkEHkNXtw9Eh12P
Y43QpJb/XaszYyUkfVA5EeAM7wdGcbFKjYc2ygRjGLGkc8V+BclfwfiQHCAGmDTn
tD0jZLq6NNMYLBiNFCLnPyB1o1IgqqEEmf46jj/VBLPUW6Cr+qbKCHDzcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJmitNaYcCfyLXAOCjLTQa1uNx3YMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvbWFLMDFwaHdKX0l0Y0E0S010TkJyVzQzSGRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/J3MA0G
CSqGSIb3DQEBCwUAA4IBAQB8FU/4U0DUYY22tpdufd4bNnB+WYyc9CXXE+GjrnDl
21H510d8vDhFrMzSccYeqw4MLmgxNguRbP+LuKtwx0n2bgqpe9V/ix0NCnaI/GjT
O9B8ntfM+nrtiRgYHO3z9AJ2nAcIdxLHC4PcvW/+UzEPForm3VpYQnTSFL7bS9uu
j1GRQ0FVe93Gtz/4EtvJq2lgF+gzE0SIUXm+wSWLwvGmRmumYcGNKo+ECzejaggq
07UAkwilvGb21klCVyXY4m2vwGIonvZ+KOhfjqAusnycwy8mSyOf9CzK+Dvt3nQN
FEdvFyT7Iy5+fcwJXaOQDRQiYe+M54omzAiW4ovcUU1R
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:36 2025 by rpki-client