Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ucsXee7U5UP0sHOzJrnExWJ5xF4.roa
File: ucsXee7U5UP0sHOzJrnExWJ5xF4.roa (raw, json)
Hash identifier: Pdix0BP2EPGnMny8AmblmtXvtqs03Y7evsoBPMh4Tzs=
Subject key identifier: B9:CB:17:79:EE:D4:E5:43:F4:B0:73:B3:26:B9:C4:C5:62:79:C4:5E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01988A3462EFF6EFFA227758F4D64B6AB40C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ucsXee7U5UP0sHOzJrnExWJ5xF4.roa
Signing time: Fri 08 Aug 2025 15:02:25 +0000
ROA not before: Fri 08 Aug 2025 15:02:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212396
IP address blocks: 151.241.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:34:62:ef:f6:ef:fa:22:77:58:f4:d6:4b:6a:b4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 8 15:02:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9cb1779eed4e543f4b073b326b9c4c56279c45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ce:84:2c:36:e3:00:3d:f5:d2:6e:93:59:80:
ec:13:4f:cc:3a:f1:ba:97:3f:d3:70:6d:b4:b7:74:
c6:bf:a3:93:b2:79:43:0e:32:96:1a:af:32:b8:80:
57:1a:41:80:72:e7:5b:f5:ec:84:ef:6c:1c:d2:08:
3f:3a:93:82:b9:3a:78:2b:c9:40:f7:21:79:e7:9f:
79:1f:76:08:83:6e:bf:f4:8e:7f:86:29:64:3b:d5:
5d:e2:0d:2e:2e:61:26:e8:33:f7:b6:35:35:68:f3:
78:da:e9:54:33:31:01:cf:38:74:35:f4:8d:90:58:
98:1c:8b:76:27:48:1a:e1:1b:d4:f2:d7:fe:60:16:
5e:9c:48:17:21:e4:d3:bf:ab:43:1f:74:d2:b7:e1:
da:98:11:8e:a7:92:ea:46:81:c6:0b:d8:11:2f:b2:
38:3a:1d:bb:a7:a2:b3:1a:5d:8d:af:f7:f4:09:69:
91:fc:89:76:4d:b0:6d:34:bc:29:52:bd:1d:d5:9f:
aa:64:03:db:39:2c:06:48:76:91:68:dc:d8:2b:78:
69:51:bd:1f:1a:e8:75:23:2d:9c:b3:9c:76:c2:19:
9e:15:64:28:c2:93:fc:c1:2b:cb:fe:c5:84:d0:ec:
2f:a0:64:6c:b6:14:66:19:c6:bf:b7:a7:df:e0:da:
ce:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CB:17:79:EE:D4:E5:43:F4:B0:73:B3:26:B9:C4:C5:62:79:C4:5E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ucsXee7U5UP0sHOzJrnExWJ5xF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.75.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:fd:4e:e6:a2:7f:d6:ae:bb:ea:28:b6:3a:1f:66:ee:e9:52:
9c:3c:6a:dd:cc:0a:64:12:f8:e0:9f:0a:ab:51:b3:f0:84:b8:
bc:55:1b:89:7b:11:77:fa:d7:55:b2:77:92:0e:95:56:c2:2b:
0f:04:12:43:05:45:a5:54:c6:8d:1b:23:d6:70:6f:94:b5:25:
bb:f4:14:45:6c:d7:a7:15:ec:ef:df:f8:d3:5a:d9:bf:05:0c:
40:4b:55:d2:3f:77:0c:fe:d3:2f:04:7e:65:02:96:6b:e8:d2:
11:73:98:c0:62:ce:8e:6d:d2:25:85:78:22:6e:7c:27:35:01:
1b:12:53:3e:35:30:ce:98:fc:e6:d4:b5:ed:10:05:eb:4f:27:
75:90:5e:4c:11:1c:78:f5:e0:0b:25:37:e7:ca:6a:09:3f:80:
87:19:aa:ac:95:0b:cc:f5:ec:62:e6:e5:01:de:8b:09:4c:5e:
9e:3d:54:c1:f9:5d:cb:7c:97:af:4f:b8:ce:f0:6d:44:53:3c:
61:de:40:a4:0c:16:fb:e2:c0:f5:b5:59:a4:13:c3:33:8a:ba:
69:ef:2d:36:89:78:92:bd:48:aa:12:1f:6f:ec:9e:65:d2:64:
02:dc:a4:66:c2:e0:78:3e:e9:cc:25:2c:61:9c:fb:31:75:29:
38:fb:b2:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZiKNGLv9u/6IndY9NZLarQMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwODA4MTUwMjI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWNiMTc3OWVlZDRlNTQzZjRiMDczYjMyNmI5YzRjNTYyNzljNDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3M6ELDbjAD310m6TWYDsE0/MOvG6
lz/TcG20t3TGv6OTsnlDDjKWGq8yuIBXGkGAcudb9eyE72wc0gg/OpOCuTp4K8lA
9yF55595H3YIg26/9I5/hilkO9Vd4g0uLmEm6DP3tjU1aPN42ulUMzEBzzh0NfSN
kFiYHIt2J0ga4RvU8tf+YBZenEgXIeTTv6tDH3TSt+HamBGOp5LqRoHGC9gRL7I4
Oh27p6KzGl2Nr/f0CWmR/Il2TbBtNLwpUr0d1Z+qZAPbOSwGSHaRaNzYK3hpUb0f
Guh1Iy2cs5x2whmeFWQowpP8wSvL/sWE0OwvoGRsthRmGca/t6ff4NrOwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLnLF3nu1OVD9LBzsya5xMViecReMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvdWNzWGVlN1U1VVAwc0hPekpybkV4V0o1eEY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/FLMA0G
CSqGSIb3DQEBCwUAA4IBAQCN/U7mon/WrrvqKLY6H2bu6VKcPGrdzApkEvjgnwqr
UbPwhLi8VRuJexF3+tdVsneSDpVWwisPBBJDBUWlVMaNGyPWcG+UtSW79BRFbNen
Fezv3/jTWtm/BQxAS1XSP3cM/tMvBH5lApZr6NIRc5jAYs6ObdIlhXgibnwnNQEb
ElM+NTDOmPzm1LXtEAXrTyd1kF5MERx49eALJTfnymoJP4CHGaqslQvM9exi5uUB
3osJTF6ePVTB+V3LfJevT7jO8G1EUzxh3kCkDBb74sD1tVmkE8Mzirpp7y02iXiS
vUiqEh9v7J5l0mQC3KRmwuB4PunMJSxhnPsxdSk4+7LW
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:25:04 2025 by rpki-client