Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uhVWKOUAxRzA4R12JWzMODmJrts.roa
File: uhVWKOUAxRzA4R12JWzMODmJrts.roa (raw, json)
Hash identifier: YuQF2JoOzRVbaiFRrB5yfBM7hhAGvrirbGrfSzzeGJg=
Subject key identifier: BA:15:56:28:E5:00:C5:1C:C0:E1:1D:76:25:6C:CC:38:39:89:AE:DB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01988E2C9F13495F9CC34E80ABC103AA1DB3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uhVWKOUAxRzA4R12JWzMODmJrts.roa
Signing time: Sat 09 Aug 2025 09:32:25 +0000
ROA not before: Sat 09 Aug 2025 09:32:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206766
IP address blocks: 151.244.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:2c:9f:13:49:5f:9c:c3:4e:80:ab:c1:03:aa:1d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 9 09:32:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba155628e500c51cc0e11d76256ccc383989aedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6d:b1:49:b4:5c:ca:ee:89:08:18:50:aa:cf:
7a:d5:90:00:a6:49:64:c4:eb:e2:bf:b9:ce:46:3a:
12:28:1d:65:b0:a5:db:e5:d3:e5:96:df:65:fc:9f:
0b:ee:ac:02:a9:c0:8f:a2:f3:2b:b6:f4:f0:8c:ba:
7a:ac:12:38:b6:b1:f3:6c:91:4e:f2:ef:5b:c3:61:
8d:a2:8e:9a:0c:bf:57:05:c4:a9:b1:e1:67:87:49:
23:3b:6b:2d:f9:89:b3:11:3f:1c:df:bf:1c:f8:07:
88:a4:8f:74:e1:8c:12:65:85:4f:23:7b:49:cb:72:
b4:22:b1:f6:62:76:ab:7d:4b:12:c5:3d:a5:11:d3:
73:15:ec:91:7c:52:c2:57:ac:f0:54:00:71:1d:d1:
ec:60:9c:5e:ce:f0:14:57:df:44:3f:86:23:57:bf:
4e:ef:3e:a0:6e:bc:bf:17:05:7e:9f:28:68:6a:19:
6b:0c:d9:47:f5:c4:81:ab:8c:2b:9f:ce:c8:07:22:
30:2b:f8:13:d4:de:4d:78:81:43:6f:cb:38:16:62:
64:ec:54:d9:bf:f9:15:8c:72:6f:86:11:f1:4c:cf:
12:07:50:84:b1:23:87:ed:42:e4:11:96:1d:b3:c4:
d5:d5:6f:52:fe:03:3c:f1:8d:97:ec:23:f5:d4:7b:
2c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:15:56:28:E5:00:C5:1C:C0:E1:1D:76:25:6C:CC:38:39:89:AE:DB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uhVWKOUAxRzA4R12JWzMODmJrts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.219.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:11:f5:24:2b:e1:0f:df:98:a4:b7:0e:9d:62:22:c0:58:93:
74:08:b2:35:50:ce:0e:66:a0:7a:c9:8b:f3:42:9e:96:20:d4:
8e:53:a1:30:20:25:1a:5e:2a:15:73:56:c7:0d:36:97:8d:28:
d6:99:ce:26:5c:3e:06:53:ce:27:63:74:29:9f:aa:12:24:76:
95:f0:f7:bb:85:17:c1:da:bd:45:b1:f2:8b:79:a6:2b:6b:73:
6a:cd:d0:a5:00:ec:1f:ff:e9:90:63:f6:a4:8a:6a:92:e3:f6:
b7:87:88:03:eb:b3:c3:6d:63:93:18:e4:40:41:cb:61:03:a8:
e9:85:16:16:f8:cc:e2:2a:a4:f3:03:c1:b4:88:97:5a:02:af:
19:6d:10:bb:a2:47:80:46:c6:4a:3f:54:4f:03:db:58:ef:a5:
12:d5:fb:5a:4e:60:90:c0:92:b6:99:b9:e8:cd:43:c8:1c:cb:
7b:30:8c:d4:00:44:a9:6f:74:b2:a7:85:00:de:c6:ab:63:b1:
61:2d:38:aa:6e:1c:e5:30:b5:98:11:25:39:ff:1c:9c:19:47:
46:a9:2e:38:cd:d1:36:4b:a5:75:4a:1a:c6:32:c0:b2:f6:3d:
61:f7:71:03:32:e4:d0:d8:e2:32:61:c2:49:b5:9d:fa:2d:b1:
b0:64:b0:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZiOLJ8TSV+cw06Aq8EDqh2zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwODA5MDkzMjI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTE1NTYyOGU1MDBjNTFjYzBlMTFkNzYyNTZjY2MzODM5ODlhZWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq22xSbRcyu6JCBhQqs961ZAApklk
xOviv7nORjoSKB1lsKXb5dPllt9l/J8L7qwCqcCPovMrtvTwjLp6rBI4trHzbJFO
8u9bw2GNoo6aDL9XBcSpseFnh0kjO2st+YmzET8c378c+AeIpI904YwSZYVPI3tJ
y3K0IrH2YnarfUsSxT2lEdNzFeyRfFLCV6zwVABxHdHsYJxezvAUV99EP4YjV79O
7z6gbry/FwV+nyhoahlrDNlH9cSBq4wrn87IByIwK/gT1N5NeIFDb8s4FmJk7FTZ
v/kVjHJvhhHxTM8SB1CEsSOH7ULkEZYds8TV1W9S/gM88Y2X7CP11HssxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLoVVijlAMUcwOEddiVszDg5ia7bMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvdWhWV0tPVUF4UnpBNFIxMkpXek1PRG1KcnRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/TbMA0G
CSqGSIb3DQEBCwUAA4IBAQAaEfUkK+EP35iktw6dYiLAWJN0CLI1UM4OZqB6yYvz
Qp6WINSOU6EwICUaXioVc1bHDTaXjSjWmc4mXD4GU84nY3Qpn6oSJHaV8Pe7hRfB
2r1FsfKLeaYra3NqzdClAOwf/+mQY/akimqS4/a3h4gD67PDbWOTGORAQcthA6jp
hRYW+MziKqTzA8G0iJdaAq8ZbRC7okeARsZKP1RPA9tY76US1ftaTmCQwJK2mbno
zUPIHMt7MIzUAESpb3Syp4UA3sarY7FhLTiqbhzlMLWYESU5/xycGUdGqS44zdE2
S6V1ShrGMsCy9j1h93EDMuTQ2OIyYcJJtZ36LbGwZLBE
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:44:19 2025 by rpki-client