Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/otfXFLmL6L5KuI4XGxj8Gfgl5hw.roa
File: otfXFLmL6L5KuI4XGxj8Gfgl5hw.roa (raw, json)
Hash identifier: SJ8o6uwTktluQwnWiTKQqsV6WO9s9aLYULI4yj3er6g=
Subject key identifier: A2:D7:D7:14:B9:8B:E8:BE:4A:B8:8E:17:1B:18:FC:19:F8:25:E6:1C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198C74ECE04B80C9042F4BB45A067D29B58
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/otfXFLmL6L5KuI4XGxj8Gfgl5hw.roa
Signing time: Wed 20 Aug 2025 11:48:07 +0000
ROA not before: Wed 20 Aug 2025 11:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 151.241.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:4e:ce:04:b8:0c:90:42:f4:bb:45:a0:67:d2:9b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 20 11:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2d7d714b98be8be4ab88e171b18fc19f825e61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d0:ed:b4:d0:15:09:04:f5:60:de:6e:24:6e:
98:ab:4c:95:6e:27:8e:7d:c1:ba:69:95:c2:19:ab:
3a:e8:99:c5:cb:74:65:be:35:77:24:9d:a3:88:e7:
83:ba:fc:ac:5b:50:ef:72:3a:97:f3:5b:18:36:40:
da:23:ff:4d:1a:c6:d7:15:e2:4b:68:f0:fc:43:c1:
71:4c:ad:9d:c6:da:7b:22:90:72:77:66:70:82:c7:
c5:c3:e2:93:0f:6e:97:d2:40:15:03:30:ed:63:bd:
41:fc:eb:d7:b9:61:f1:d9:34:f3:53:03:0c:18:03:
c1:ba:50:4b:bf:f4:8b:d6:8d:02:d6:b4:6c:21:e6:
76:b7:6c:59:55:27:db:cf:90:ab:78:ca:70:94:85:
4c:5a:fb:7d:96:71:61:85:27:90:c7:bd:3c:62:0c:
2e:69:74:b9:77:e4:1b:de:db:fe:39:19:7d:c4:00:
09:ca:28:0f:d4:0c:c5:44:e1:3c:79:1d:18:63:b8:
38:0c:61:0f:82:d9:22:25:95:15:ca:59:92:29:8c:
22:93:e9:97:43:14:a7:01:96:0a:93:9b:cb:cd:f5:
73:ba:cb:41:1e:19:0c:59:12:78:8b:b1:e2:68:80:
d0:99:b7:51:5c:89:53:59:9f:8b:5e:60:fc:6b:dd:
f0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D7:D7:14:B9:8B:E8:BE:4A:B8:8E:17:1B:18:FC:19:F8:25:E6:1C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/otfXFLmL6L5KuI4XGxj8Gfgl5hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.112.0/24
Signature Algorithm: sha256WithRSAEncryption
44:83:a3:e7:d9:99:cf:13:81:a4:16:3d:42:79:8a:cd:5b:fd:
af:25:34:b0:8f:bc:f9:7f:76:84:6d:85:1c:35:b2:93:89:cd:
84:c3:6b:38:62:46:4a:41:6e:50:d6:4b:c5:37:8b:af:ca:1d:
17:33:a7:3e:2f:6a:a1:6d:2e:99:4a:1a:b9:55:ac:2b:26:c2:
65:4f:ea:5c:86:e7:b2:94:21:cc:5c:52:ff:7b:48:48:c0:e9:
0b:ad:f1:f0:5a:8f:4f:ab:84:80:21:db:60:74:88:3e:79:1d:
dc:75:4b:8f:e9:64:ea:9f:82:7c:cd:0f:c2:dd:5f:18:4d:e5:
52:de:46:94:ba:ad:53:ce:4c:7e:00:01:81:b1:8a:5b:03:e3:
9d:2b:22:78:1a:a2:60:20:3b:09:8f:0e:ca:e8:57:42:3c:de:
ee:7f:09:fa:52:1b:52:86:7e:6e:15:a3:a6:5a:82:34:57:a9:
81:93:20:a5:c9:ea:aa:17:26:b6:cb:e6:87:c0:51:4f:2c:b7:
ce:3f:4f:76:e4:3d:f7:23:a7:e0:d5:35:e2:4f:ca:b7:72:c3:
2e:02:03:76:73:e5:c6:fd:c3:96:87:16:a6:4b:04:19:20:57:
20:ae:70:37:6c:c4:16:54:3c:76:9a:26:bc:ed:3c:7a:61:b0:
ac:99:62:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZjHTs4EuAyQQvS7RaBn0ptYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwODIwMTE0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmQ3ZDcxNGI5OGJlOGJlNGFiODhlMTcxYjE4ZmMxOWY4MjVlNjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtDttNAVCQT1YN5uJG6Yq0yVbieO
fcG6aZXCGas66JnFy3RlvjV3JJ2jiOeDuvysW1DvcjqX81sYNkDaI/9NGsbXFeJL
aPD8Q8FxTK2dxtp7IpByd2ZwgsfFw+KTD26X0kAVAzDtY71B/OvXuWHx2TTzUwMM
GAPBulBLv/SL1o0C1rRsIeZ2t2xZVSfbz5CreMpwlIVMWvt9lnFhhSeQx708Ygwu
aXS5d+Qb3tv+ORl9xAAJyigP1AzFROE8eR0YY7g4DGEPgtkiJZUVylmSKYwik+mX
QxSnAZYKk5vLzfVzustBHhkMWRJ4i7HiaIDQmbdRXIlTWZ+LXmD8a93wlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKLX1xS5i+i+SriOFxsY/Bn4JeYcMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvb3RmWEZMbUw2TDVLdUk0WEd4ajhHZmdsNWh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/FwMA0G
CSqGSIb3DQEBCwUAA4IBAQBEg6Pn2ZnPE4GkFj1CeYrNW/2vJTSwj7z5f3aEbYUc
NbKTic2Ew2s4YkZKQW5Q1kvFN4uvyh0XM6c+L2qhbS6ZShq5VawrJsJlT+pchuey
lCHMXFL/e0hIwOkLrfHwWo9Pq4SAIdtgdIg+eR3cdUuP6WTqn4J8zQ/C3V8YTeVS
3kaUuq1Tzkx+AAGBsYpbA+OdKyJ4GqJgIDsJjw7K6FdCPN7ufwn6UhtShn5uFaOm
WoI0V6mBkyClyeqqFya2y+aHwFFPLLfOP0925D33I6fg1TXiT8q3csMuAgN2c+XG
/cOWhxamSwQZIFcgrnA3bMQWVDx2mia87Tx6YbCsmWJS
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:38:11 2025 by rpki-client