Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ngxJy6HlQ7B4QFN9c_pB3pC1kRg.roa
File: ngxJy6HlQ7B4QFN9c_pB3pC1kRg.roa (raw, json)
Hash identifier: OZDnNrMlu/BouWxqltMAryBQ3eGvjHZK090Gyzg46Mw=
Subject key identifier: 9E:0C:49:CB:A1:E5:43:B0:78:40:53:7D:73:FA:41:DE:90:B5:91:18
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199CE25F8F1A06FF11B9AD39961C2BBC884
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ngxJy6HlQ7B4QFN9c_pB3pC1kRg.roa
Signing time: Fri 10 Oct 2025 12:43:39 +0000
ROA not before: Fri 10 Oct 2025 12:43:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53850
IP address blocks: 151.243.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ce:25:f8:f1:a0:6f:f1:1b:9a:d3:99:61:c2:bb:c8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 10 12:43:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e0c49cba1e543b07840537d73fa41de90b59118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:53:66:2e:52:96:3e:27:21:d1:28:92:9c:7e:
85:c7:b4:59:e1:9b:e6:1c:9a:19:40:2b:ad:fc:7b:
dc:46:fc:ea:67:6f:9a:fa:48:59:26:6e:27:2f:65:
cd:1e:e5:c4:03:ad:ce:a6:55:95:e2:1b:62:9c:51:
cb:59:90:89:4e:83:07:1e:fb:6f:04:3d:80:a0:a5:
bd:0e:4d:aa:1d:6e:fc:b2:a1:96:75:2c:f6:b5:03:
38:c2:71:53:8d:60:84:22:11:cd:36:43:32:a5:6f:
2d:15:14:e3:87:4b:81:ec:1c:1c:96:b0:29:f9:18:
95:11:c7:6e:35:82:43:80:16:09:a2:c0:05:d8:b6:
d8:b6:61:45:c6:25:6f:46:ac:80:1b:59:05:e5:b0:
26:78:23:c0:e4:65:c1:c9:5a:c4:01:ea:74:e9:f0:
a2:ad:ef:81:db:52:4c:e7:2d:44:a7:20:64:16:56:
23:64:1c:ba:7b:92:f5:74:0a:d7:31:73:f1:09:48:
ad:f3:39:cf:01:47:3b:3e:11:45:65:8c:ca:40:dc:
5b:b6:f5:46:38:14:8c:3e:97:49:ec:c7:c3:3d:1d:
98:e4:22:1f:af:e6:98:8c:67:41:49:cc:3d:77:70:
4d:2c:79:c4:67:06:d0:2d:7f:3d:8c:b2:93:3d:0d:
60:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0C:49:CB:A1:E5:43:B0:78:40:53:7D:73:FA:41:DE:90:B5:91:18
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ngxJy6HlQ7B4QFN9c_pB3pC1kRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.250.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:2c:3e:a1:e9:98:67:33:32:6a:87:5f:59:f9:c7:4e:eb:e8:
8b:c8:6e:ac:da:21:73:33:e3:fc:6d:a4:65:dd:10:2b:b3:53:
3c:76:b1:0d:a4:cb:0b:c3:cb:e6:dd:2a:57:70:3a:b0:21:ad:
73:89:6a:f2:ca:29:7d:d9:7a:1f:62:8e:58:c8:59:2f:4e:f1:
9c:af:43:76:6a:ad:6a:c8:a2:a0:5f:15:40:1b:e1:b7:91:a7:
bb:9a:a1:d5:19:c6:4c:2d:5a:bf:38:c8:2c:fb:5d:77:0f:14:
2f:0e:48:61:c5:81:2a:05:b2:78:06:ac:d1:82:cb:54:f3:ae:
fd:c2:f6:b1:e6:51:df:e7:40:b2:3e:1c:00:90:6b:c5:53:56:
9d:b8:f0:74:2d:cd:df:37:42:62:60:f2:bc:ea:d9:e5:fb:79:
f7:4a:76:e8:b5:f5:b9:5e:cb:e1:ec:57:52:8d:7e:b5:89:2a:
4f:7a:b5:08:52:c9:02:60:13:f8:38:63:06:98:06:20:43:17:
57:47:78:20:7c:16:fa:9d:1a:20:09:f8:75:e3:32:d7:5a:a7:
02:24:8f:b2:73:0a:9c:34:76:a7:f5:33:d2:d0:80:75:db:9c:
91:eb:98:c2:e6:e7:fe:1c:7e:2d:80:30:e8:08:a2:4a:5e:af:
78:ad:95:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:04:27 2025 by rpki-client