Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uh8ML0300GQf96bO8pwMni689uo.roa
File: uh8ML0300GQf96bO8pwMni689uo.roa (raw, json)
Hash identifier: OQyw2QZGMcCLxQqvSK65azmq7XYa/iGyJov9H1hOGhw=
Subject key identifier: BA:1F:0C:2F:4D:F4:D0:64:1F:F7:A6:CE:F2:9C:0C:9E:2E:BC:F6:EA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198C7518766E72C149A0561F76714BB09A9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uh8ML0300GQf96bO8pwMni689uo.roa
Signing time: Wed 20 Aug 2025 11:51:05 +0000
ROA not before: Wed 20 Aug 2025 11:51:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3356
IP address blocks: 151.243.117.0/24 maxlen: 24
151.243.119.0/24 maxlen: 24
151.243.121.0/24 maxlen: 24
151.243.122.0/24 maxlen: 24
151.243.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:51:87:66:e7:2c:14:9a:05:61:f7:67:14:bb:09:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 20 11:51:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba1f0c2f4df4d0641ff7a6cef29c0c9e2ebcf6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b1:a6:9d:39:66:fc:f3:b6:e5:a3:ce:3e:a5:
80:c5:2e:5b:21:4a:e8:a5:e9:25:c5:0c:08:ad:c2:
a8:3e:8f:81:04:4f:e0:3e:53:3b:5f:00:a3:bc:3c:
9b:dc:82:97:93:1a:1d:a8:1c:27:25:64:11:d5:42:
26:40:96:43:05:be:4e:20:d7:56:83:e4:2e:92:7f:
19:f0:08:f5:63:c7:db:75:d1:96:85:c8:6c:69:fd:
c4:4d:29:16:e4:8a:cd:9d:6e:81:1e:a0:f3:02:ce:
47:14:f2:e3:43:91:eb:54:10:4c:5b:7c:d2:d0:be:
62:07:39:46:0f:92:80:c2:5b:3b:12:e5:54:30:f8:
da:9d:7d:d8:aa:19:94:81:24:8e:49:f7:3a:35:26:
c7:5c:54:2c:d8:b8:dc:1f:3a:eb:9d:a4:4c:01:62:
c4:5b:bc:9a:9e:fd:d9:3b:e7:c2:c6:06:fb:92:dd:
5c:01:e6:e6:f0:5d:82:7f:49:ea:d2:0a:ff:95:42:
1e:cf:29:da:6e:f4:cc:c9:ea:34:40:37:cd:f8:fd:
f0:aa:21:44:2f:e0:42:63:cf:1d:11:c3:d8:55:b6:
99:ab:a2:d8:a5:b1:d7:a9:d9:45:98:f0:4c:98:94:
80:1b:c8:00:1c:f6:a1:ff:3f:38:86:71:00:97:aa:
50:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1F:0C:2F:4D:F4:D0:64:1F:F7:A6:CE:F2:9C:0C:9E:2E:BC:F6:EA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uh8ML0300GQf96bO8pwMni689uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.117.0/24
151.243.119.0/24
151.243.121.0-151.243.122.255
151.243.232.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:ec:67:05:8d:61:2f:61:27:31:19:51:11:74:8c:37:bf:de:
0e:59:0b:bf:74:0b:23:de:29:45:9d:23:cb:49:b5:54:da:d7:
a5:a1:79:20:d5:f3:04:f3:f8:f1:02:5d:c7:03:9a:37:f0:fe:
72:f3:ab:21:50:24:fe:76:f5:e9:73:85:07:da:de:a2:7e:60:
76:94:89:b1:8f:ff:0f:eb:69:14:5a:d1:cc:08:4f:51:70:5f:
dc:18:cc:1c:ad:47:e9:19:bd:3c:76:76:df:4f:32:af:71:40:
47:34:78:4d:79:c5:cb:48:09:a5:32:91:63:87:29:c4:ab:dc:
e9:06:fd:f8:fc:a8:ab:dd:31:08:26:56:7f:2d:44:4b:b3:a7:
d5:88:f2:64:07:0a:b0:83:14:dd:87:a6:95:d7:de:b7:ce:3c:
61:08:bf:50:ab:cd:8d:91:3e:f0:2f:35:e7:74:89:cc:0d:a3:
35:2a:fd:b2:6e:2f:71:63:a1:19:0d:4f:30:a1:0a:29:0f:d2:
51:f4:d4:2e:89:f2:f4:11:8d:c8:1d:e4:ae:07:c8:33:86:c4:
b8:8d:ea:cb:db:84:52:ea:87:ae:1a:d4:40:7d:7a:ff:c7:9f:
9b:1b:76:e6:dc:e2:7d:35:52:67:55:41:c5:09:92:30:f2:98:
48:08:9a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:28:00 2025 by rpki-client