Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t98i7ec1KsJTHbWA3U37fTeyLnM.roa
File: t98i7ec1KsJTHbWA3U37fTeyLnM.roa (raw, json)
Hash identifier: +xzxj50prbzZ1qHV6CJIO1AlRs6vnfSC5sbgJZakHoc=
Subject key identifier: B7:DF:22:ED:E7:35:2A:C2:53:1D:B5:80:DD:4D:FB:7D:37:B2:2E:73
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01997A1733EB3274D08E7EB4346AD6470887
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t98i7ec1KsJTHbWA3U37fTeyLnM.roa
Signing time: Wed 24 Sep 2025 04:59:24 +0000
ROA not before: Wed 24 Sep 2025 04:59:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204844
IP address blocks: 151.246.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7a:17:33:eb:32:74:d0:8e:7e:b4:34:6a:d6:47:08:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 24 04:59:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7df22ede7352ac2531db580dd4dfb7d37b22e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7b:80:88:f7:ab:98:65:d7:25:06:35:dc:4c:
ae:70:90:41:57:ac:0c:ee:4a:fe:3b:c3:83:7d:67:
7f:7b:61:f8:ab:a9:7c:ee:67:0e:0d:b2:85:0b:ea:
51:2a:1d:a7:33:55:90:f5:95:2d:05:1b:26:70:ae:
ee:2f:3e:41:73:ff:15:77:8d:c6:2d:49:4a:5b:6a:
c0:64:2c:a7:b2:40:4c:33:15:78:ac:4c:a0:ec:02:
8f:1d:87:8f:dc:67:6c:bb:a7:a5:58:6b:da:b9:35:
12:bc:9b:8d:43:5b:3d:9d:7d:d8:c8:ac:bb:8c:6a:
0f:2c:31:0d:83:41:aa:14:f0:9c:b5:6d:2b:3d:b5:
86:e0:6d:d0:9d:e6:76:85:91:7b:a1:e8:a1:ca:78:
03:31:1a:88:6a:a2:73:58:2b:a5:5b:c4:c8:e4:71:
01:c7:b4:d7:32:d6:e4:06:87:9d:9b:ff:3b:16:31:
7d:d9:ff:52:8f:42:ca:08:37:6e:2f:65:6c:b1:bb:
0a:19:31:94:7a:50:47:20:84:65:61:94:9b:17:02:
01:63:c8:32:94:bb:00:8e:c0:6f:fb:0c:ae:2c:49:
16:33:41:7e:f8:cd:b0:74:f1:e6:9d:8b:8c:6d:ce:
52:45:61:a8:88:c7:3d:5c:8c:eb:1f:5c:68:ad:23:
7b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DF:22:ED:E7:35:2A:C2:53:1D:B5:80:DD:4D:FB:7D:37:B2:2E:73
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t98i7ec1KsJTHbWA3U37fTeyLnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.244.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e6:86:74:99:f2:6b:09:17:73:ef:ae:2b:a6:2b:9c:fc:c7:
1f:14:30:cf:43:7e:a5:5c:a4:8d:80:83:2d:b9:c0:49:08:0a:
d8:c2:d5:25:c9:cb:f4:c9:a1:f9:11:03:84:44:7e:49:ba:ee:
e3:94:f4:6a:df:ed:4a:5b:90:ce:c2:90:3e:b0:02:94:c6:f1:
c8:d6:02:4b:5f:53:c5:7c:db:3d:16:21:05:33:26:9b:9d:9b:
0a:f3:05:cc:3f:f5:b7:4c:64:d8:c0:ad:b2:a5:ab:16:cd:e3:
12:df:8b:57:e9:6c:6c:01:dc:51:af:40:58:de:8c:f7:cf:6f:
96:a9:c5:c8:c9:3e:f3:a1:ea:b0:03:ad:2d:23:9b:73:c5:77:
80:bb:a9:bf:fa:b3:f6:e1:3f:52:c9:d7:72:bd:90:d4:c3:08:
5d:fe:0a:d3:cc:21:75:b8:66:cd:1c:93:cc:5e:18:4d:28:30:
ed:dd:6b:a7:46:a6:66:0e:f9:1d:21:df:bb:e3:d5:94:4c:4e:
77:99:17:a3:06:f1:d3:fd:0c:d0:c9:3b:f7:ed:99:85:21:3e:
b6:31:31:0d:ba:ec:c8:7c:f2:d1:df:03:3e:29:59:e0:6a:57:
bb:d6:64:a1:e4:6d:66:d0:27:95:00:a8:2e:a9:6b:15:9f:4f:
e1:c5:1a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:50:21 2025 by rpki-client