Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qEGutsBoD_Rkx_Qp5zNBjRmdTvw.roa
File: qEGutsBoD_Rkx_Qp5zNBjRmdTvw.roa (raw, json)
Hash identifier: qxCreNEsaFBpc88U+1EDmPUYsrVmQP6l3Pg2BT15yqI=
Subject key identifier: A8:41:AE:B6:C0:68:0F:F4:64:C7:F4:29:E7:33:41:8D:19:9D:4E:FC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01989CF56BA95E3BEC201AB083FD628F80EF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qEGutsBoD_Rkx_Qp5zNBjRmdTvw.roa
Signing time: Tue 12 Aug 2025 06:26:26 +0000
ROA not before: Tue 12 Aug 2025 06:26:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40662
IP address blocks: 151.244.165.0/24 maxlen: 24
151.244.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:f5:6b:a9:5e:3b:ec:20:1a:b0:83:fd:62:8f:80:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 12 06:26:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a841aeb6c0680ff464c7f429e733418d199d4efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:f7:19:0c:ca:13:cf:94:71:23:91:76:fc:
37:89:5d:f3:70:43:52:e2:87:ac:e4:25:43:3b:a1:
d1:6b:39:32:50:01:03:06:77:24:bc:66:4b:84:42:
40:be:1e:02:2b:2c:4f:34:87:4a:33:fa:6c:2f:e8:
d4:49:a3:d3:10:4f:01:4e:49:13:51:aa:79:bc:41:
0d:97:7f:7a:90:bb:28:fa:80:a2:2f:1f:f4:ee:f4:
4c:00:0f:ee:3f:20:1c:42:07:4e:4e:e1:b8:4d:8a:
1f:b2:f7:ed:ac:ab:37:df:cf:0e:e0:15:85:6c:48:
4f:88:25:22:07:72:f1:34:f5:d3:f1:da:b2:97:d8:
23:5f:b4:10:93:3b:68:cb:9e:8f:e1:42:54:84:86:
6f:30:40:61:64:8c:c8:96:ba:8a:7f:ce:fb:11:79:
2a:82:3c:40:87:55:59:f5:85:b5:5e:c7:da:b2:53:
77:91:d9:41:28:ff:a4:c9:d0:96:de:fb:31:ba:86:
56:be:69:5d:e4:b9:79:54:4e:8a:1c:e1:eb:37:7f:
38:6f:4e:a7:53:30:88:cf:0c:a4:6e:80:d7:da:2d:
c4:31:4e:08:f0:45:33:d5:08:6a:a2:9f:a1:fd:f3:
b9:60:ff:10:71:d8:e6:f0:e8:51:c5:fa:73:7d:92:
45:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:41:AE:B6:C0:68:0F:F4:64:C7:F4:29:E7:33:41:8D:19:9D:4E:FC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qEGutsBoD_Rkx_Qp5zNBjRmdTvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.165.0/24
151.244.170.0/24
Signature Algorithm: sha256WithRSAEncryption
14:b2:ca:b3:2e:3b:16:cc:10:d9:45:92:42:ce:57:f8:cf:54:
39:9a:c0:a4:c2:8f:d2:e0:8a:e3:fb:4d:b9:43:47:07:fd:4a:
ea:34:b9:92:e1:a7:b0:fe:a2:8c:0e:4e:7c:28:87:01:d4:12:
ea:41:ec:b3:bc:7d:93:8b:16:25:a2:42:d2:7b:53:12:dc:78:
5a:11:64:fe:c7:ea:35:98:c2:8c:78:38:5c:e4:8b:b1:ec:f6:
91:be:2d:2e:f8:44:2f:bf:69:09:97:46:e6:50:d8:a3:9d:c6:
83:4d:f4:0c:73:06:61:56:bb:9b:5b:a5:d6:05:3d:ef:39:d4:
63:8c:e8:e6:5b:62:44:5a:0f:f1:ba:e4:62:43:4b:2d:75:73:
d4:a0:cb:a4:4d:24:5b:d3:94:9c:07:b3:2a:30:67:ef:e5:c5:
84:e2:0e:05:ce:87:2a:5f:b8:cf:20:64:8e:56:20:8c:b8:c2:
c7:7b:5a:02:ae:2c:c9:81:b8:e7:f1:3a:53:34:b2:55:81:74:
33:c7:90:31:37:2e:f5:3f:de:5f:6c:41:1a:a9:5e:65:88:20:
a1:1c:f7:86:33:6a:1f:fc:5d:76:d3:fb:af:ed:9b:d5:f5:99:
46:b8:fb:be:e7:8a:7e:35:21:ae:c7:77:6d:e9:58:2d:97:bb:
32:c1:80:14
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZic9WupXjvsIBqwg/1ij4DvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwODEyMDYyNjI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODQxYWViNmMwNjgwZmY0NjRjN2Y0MjllNzMzNDE4ZDE5OWQ0ZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurP3GQzKE8+UcSORdvw3iV3zcENS
4oes5CVDO6HRazkyUAEDBnckvGZLhEJAvh4CKyxPNIdKM/psL+jUSaPTEE8BTkkT
Uap5vEENl396kLso+oCiLx/07vRMAA/uPyAcQgdOTuG4TYofsvftrKs3388O4BWF
bEhPiCUiB3LxNPXT8dqyl9gjX7QQkztoy56P4UJUhIZvMEBhZIzIlrqKf877EXkq
gjxAh1VZ9YW1XsfaslN3kdlBKP+kydCW3vsxuoZWvmld5Ll5VE6KHOHrN384b06n
UzCIzwykboDX2i3EMU4I8EUz1Qhqop+h/fO5YP8Qcdjm8OhRxfpzfZJF4wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKhBrrbAaA/0ZMf0KeczQY0ZnU78MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvcUVHdXRzQm9EX1JreF9RcDV6TkJqUm1kVHZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/SlAwQA
l/SqMA0GCSqGSIb3DQEBCwUAA4IBAQAUssqzLjsWzBDZRZJCzlf4z1Q5msCkwo/S
4Irj+025Q0cH/UrqNLmS4aew/qKMDk58KIcB1BLqQeyzvH2TixYlokLSe1MS3Hha
EWT+x+o1mMKMeDhc5Iux7PaRvi0u+EQvv2kJl0bmUNijncaDTfQMcwZhVrubW6XW
BT3vOdRjjOjmW2JEWg/xuuRiQ0stdXPUoMukTSRb05ScB7MqMGfv5cWE4g4Fzocq
X7jPIGSOViCMuMLHe1oCrizJgbjn8TpTNLJVgXQzx5AxNy71P95fbEEaqV5liCCh
HPeGM2of/F120/uv7ZvV9ZlGuPu+54p+NSGux3dt6Vgtl7sywYAU
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:34 2025 by rpki-client