Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t5HTZILk0Ns9z_C7c6ZRkgnirzI.roa
File: t5HTZILk0Ns9z_C7c6ZRkgnirzI.roa (raw, json)
Hash identifier: TQdfS4c0Vaw1oiRTObgNRVZKc3Q5eNWMGqz5CINirHo=
Subject key identifier: B7:91:D3:64:82:E4:D0:DB:3D:CF:F0:BB:73:A6:51:92:09:E2:AF:32
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199CE25F983098C1CCFCAC9AC197411DE75
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t5HTZILk0Ns9z_C7c6ZRkgnirzI.roa
Signing time: Fri 10 Oct 2025 12:43:39 +0000
ROA not before: Fri 10 Oct 2025 12:43:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198584
IP address blocks: 151.243.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ce:25:f9:83:09:8c:1c:cf:ca:c9:ac:19:74:11:de:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 10 12:43:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b791d36482e4d0db3dcff0bb73a6519209e2af32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c3:f3:c3:57:10:4d:7c:cf:37:7b:4a:04:c8:
ab:66:3f:7f:c3:32:90:61:e2:18:fb:64:a6:96:0f:
a3:a7:24:7b:68:4a:9b:b3:ab:5f:3a:68:b1:33:cc:
cc:a0:51:22:08:5e:bc:2a:19:b6:b9:b6:b8:f2:81:
f1:64:38:d5:d6:89:be:00:ff:29:2d:64:f8:0f:08:
d4:99:0c:06:18:49:b7:b1:08:3a:85:f0:f5:46:f7:
4a:cd:0a:1b:ab:80:3b:c2:6e:63:4e:c4:d5:41:8a:
7f:7e:ce:8b:10:39:5d:1a:5b:91:33:a1:9e:c9:92:
d0:26:43:b8:10:96:ab:a8:da:0e:bc:49:90:ba:d9:
c3:77:bd:b5:92:6e:b9:f1:64:ff:96:af:30:5d:0c:
6f:a7:f5:ad:8c:4c:20:8d:e9:d6:e1:04:65:de:4e:
0a:1c:14:de:4c:1c:ea:cb:73:94:30:20:fd:2e:0f:
76:64:be:c9:ae:bc:eb:da:a2:8d:6a:a6:ff:72:9b:
e9:63:73:0b:cd:ae:db:52:a2:0a:d3:68:8e:a7:95:
32:d1:6b:85:6b:02:89:75:be:ab:cb:30:c7:12:b5:
c8:21:a3:a6:65:c9:03:bc:db:b1:01:78:5e:37:b9:
be:db:0d:55:b7:e3:6b:62:96:b9:4d:3f:e2:ad:31:
27:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:91:D3:64:82:E4:D0:DB:3D:CF:F0:BB:73:A6:51:92:09:E2:AF:32
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t5HTZILk0Ns9z_C7c6ZRkgnirzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.212.0/24
Signature Algorithm: sha256WithRSAEncryption
85:61:86:a5:6e:73:66:b3:6b:ea:da:ca:d4:2b:7d:de:6c:bd:
7e:69:bc:29:f3:23:b2:c5:15:3a:12:12:51:88:b5:e2:f8:11:
3a:23:c5:a5:d9:57:37:b8:da:7f:39:6f:b1:22:f0:bf:4d:97:
91:bf:ba:5c:36:0c:30:26:69:8e:d9:9e:9a:bf:97:02:f6:8d:
b6:dd:7f:7c:a7:58:35:09:fa:09:35:a4:39:a6:b0:b4:61:eb:
3e:47:3f:8f:70:b5:d2:9e:f2:c2:67:5f:24:69:a3:b3:95:00:
56:ab:6d:6d:73:a8:17:ee:92:d6:46:2e:30:09:cc:e5:39:a4:
35:a4:eb:c6:58:9e:7b:e2:17:91:96:41:43:60:3c:b3:93:ad:
68:39:cc:d8:33:2c:f4:cc:f4:96:9d:1f:ab:ef:64:a4:48:34:
a3:11:de:67:70:6d:58:4b:27:d4:62:89:07:56:14:41:75:a9:
7b:62:84:1b:14:ce:1d:4e:f0:58:3b:fe:ff:1f:6a:50:d8:25:
ae:5c:22:09:fd:1b:ff:c9:05:1c:4f:8a:02:fe:52:ff:83:39:
68:e0:d6:64:41:5a:71:12:06:9a:51:83:58:cb:ca:fc:18:7b:
34:b0:7f:fe:a7:e5:41:93:bf:82:13:a7:e3:7d:82:cb:c4:46:
8f:88:9f:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZnOJfmDCYwcz8rJrBl0Ed51MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUxMDEwMTI0MzM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzkxZDM2NDgyZTRkMGRiM2RjZmYwYmI3M2E2NTE5MjA5ZTJhZjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsPzw1cQTXzPN3tKBMirZj9/wzKQ
YeIY+2Smlg+jpyR7aEqbs6tfOmixM8zMoFEiCF68Khm2uba48oHxZDjV1om+AP8p
LWT4DwjUmQwGGEm3sQg6hfD1RvdKzQobq4A7wm5jTsTVQYp/fs6LEDldGluRM6Ge
yZLQJkO4EJarqNoOvEmQutnDd721km658WT/lq8wXQxvp/WtjEwgjenW4QRl3k4K
HBTeTBzqy3OUMCD9Lg92ZL7Jrrzr2qKNaqb/cpvpY3MLza7bUqIK02iOp5Uy0WuF
awKJdb6ryzDHErXIIaOmZckDvNuxAXheN7m+2w1Vt+NrYpa5TT/irTEnDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLeR02SC5NDbPc/wu3OmUZIJ4q8yMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvdDVIVFpJTGswTnM5el9DN2M2WlJrZ25pcnpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/PUMA0G
CSqGSIb3DQEBCwUAA4IBAQCFYYalbnNms2vq2srUK33ebL1+abwp8yOyxRU6EhJR
iLXi+BE6I8Wl2Vc3uNp/OW+xIvC/TZeRv7pcNgwwJmmO2Z6av5cC9o223X98p1g1
CfoJNaQ5prC0Yes+Rz+PcLXSnvLCZ18kaaOzlQBWq21tc6gX7pLWRi4wCczlOaQ1
pOvGWJ574heRlkFDYDyzk61oOczYMyz0zPSWnR+r72SkSDSjEd5ncG1YSyfUYokH
VhRBdal7YoQbFM4dTvBYO/7/H2pQ2CWuXCIJ/Rv/yQUcT4oC/lL/gzlo4NZkQVpx
EgaaUYNYy8r8GHs0sH/+p+VBk7+CE6fjfYLLxEaPiJ/M
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:44 2025 by rpki-client