Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ufTphFbcJ7O--Dwy1Q1oHD8mOVI.roa
File: ufTphFbcJ7O--Dwy1Q1oHD8mOVI.roa (raw, json)
Hash identifier: Y5bbNL8O3nYfEwXa799pJ/C/VYp6izRI3cII5HmXnTo=
Subject key identifier: B9:F4:E9:84:56:DC:27:B3:BE:F8:3C:32:D5:0D:68:1C:3F:26:39:52
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01999F2591C0C4B904FC8E53794DDAD89001
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ufTphFbcJ7O--Dwy1Q1oHD8mOVI.roa
Signing time: Wed 01 Oct 2025 09:41:03 +0000
ROA not before: Wed 01 Oct 2025 09:41:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 147057
IP address blocks: 151.246.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9f:25:91:c0:c4:b9:04:fc:8e:53:79:4d:da:d8:90:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 1 09:41:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9f4e98456dc27b3bef83c32d50d681c3f263952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:f9:78:69:15:91:fd:d2:3a:cd:32:af:e8:
07:ab:6a:2c:ad:c4:68:41:73:8b:8a:ab:3e:a1:48:
24:8e:29:b3:02:9d:f5:14:23:17:91:52:0e:e4:76:
94:8e:4a:98:e4:bd:de:da:a0:37:6a:97:0d:c6:40:
63:07:53:97:b3:73:c5:14:d6:09:1f:25:2e:7a:21:
20:66:f6:34:b0:e3:88:60:c1:10:53:ed:e1:39:b4:
5d:c2:e6:c7:06:75:9b:2e:41:bf:4d:45:5f:b8:45:
ca:c4:08:3a:7c:6b:e9:3d:2a:46:b7:6a:20:8b:60:
54:bd:09:0a:46:7c:bc:3d:36:9d:86:67:f4:8a:5e:
01:39:e2:e1:ad:0b:fe:75:9d:56:67:1d:b0:2a:56:
3a:b7:e6:b4:d6:e6:6e:79:c2:62:73:0a:d9:9f:12:
bb:db:2f:1d:4f:f4:27:d8:7c:a2:a6:db:f9:4c:10:
8a:2f:d2:45:da:d0:29:e2:e2:b0:9e:f2:3c:62:87:
9e:2c:61:0f:0f:ef:2a:b2:92:95:92:79:2d:e2:9b:
98:3d:34:55:15:a1:80:c5:46:98:3a:f2:b7:f9:4d:
19:c3:c4:1b:f5:e4:d6:c9:2c:87:24:1c:16:47:fd:
f2:ba:50:e7:27:79:f7:ca:6f:08:41:2e:a5:5f:7b:
ca:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F4:E9:84:56:DC:27:B3:BE:F8:3C:32:D5:0D:68:1C:3F:26:39:52
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ufTphFbcJ7O--Dwy1Q1oHD8mOVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.6.0/24
Signature Algorithm: sha256WithRSAEncryption
48:f7:ea:b4:21:1a:5e:86:32:95:47:21:d7:bf:ea:22:5f:94:
cb:82:e5:3a:2a:40:a0:25:64:9d:f8:ed:61:d1:fd:7c:0d:a4:
1a:02:81:58:23:80:39:0e:74:6a:16:b1:9f:05:2d:ee:81:9f:
45:e4:be:85:60:35:ae:42:a5:c9:95:82:7a:cd:d3:3f:a9:e3:
d0:e9:3f:6f:46:c8:9b:06:93:6a:b8:a1:a3:e8:bf:46:6e:bd:
c1:e1:cb:90:87:4c:99:b1:ae:32:28:7b:5c:66:84:fc:7e:78:
c5:b7:b7:ba:18:59:ab:bc:cf:8c:3c:0d:3d:ce:0a:1b:53:32:
46:a1:fe:f7:4e:57:3a:13:fa:03:9f:c7:c0:f1:ff:02:1f:cc:
0a:9d:b7:19:bc:82:a4:4c:db:28:35:de:44:9f:80:7e:73:4f:
b8:bb:ed:e1:77:12:42:10:b1:38:a6:e7:46:46:5a:e2:9c:42:
ad:c5:f5:04:f7:b0:17:83:d5:73:0e:3e:36:8e:64:14:34:cf:
11:bf:6e:da:bc:c4:79:86:e3:1a:fe:78:59:a8:ce:6e:1b:3d:
30:da:0b:f2:5e:36:9f:6f:aa:9d:13:ff:2a:a2:1f:9d:f2:e8:
4a:6e:d5:b5:97:c3:24:70:0e:f2:73:c2:a2:fe:4f:5c:0b:80:
d2:04:31:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:39 2025 by rpki-client