Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yGkq8gLF03zv6ur39P_JE-cROzE.roa
File: yGkq8gLF03zv6ur39P_JE-cROzE.roa (raw, json)
Hash identifier: T/sDW9Hfaq1VrXAAU876v+5WjgW2ALN+JTsjc3RQhJ8=
Subject key identifier: C8:69:2A:F2:02:C5:D3:7C:EF:EA:EA:F7:F4:FF:C9:13:E7:11:3B:31
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01991DAFCF24A3E77B65987BFE00BC499692
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yGkq8gLF03zv6ur39P_JE-cROzE.roa
Signing time: Sat 06 Sep 2025 06:21:25 +0000
ROA not before: Sat 06 Sep 2025 06:21:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57974
IP address blocks: 151.241.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:af:cf:24:a3:e7:7b:65:98:7b:fe:00:bc:49:96:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 6 06:21:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8692af202c5d37cefeaeaf7f4ffc913e7113b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:53:6f:4f:a2:5a:d7:8b:9b:1e:d1:26:91:
8d:9e:0b:49:16:ca:61:bc:3a:aa:92:75:06:c5:39:
24:00:e7:c8:7d:d7:5b:80:b3:49:4a:61:19:76:0a:
81:73:01:56:06:45:5d:4b:f7:1e:1d:0e:47:0d:95:
7c:95:a1:64:2e:66:1c:20:2a:4e:25:bf:e1:61:67:
99:3e:45:03:71:73:04:2d:c5:07:ff:65:e3:26:9c:
2c:1f:f4:17:42:03:f0:c5:bf:4b:3a:39:7c:f6:7f:
91:81:a7:aa:9d:07:46:10:69:9b:46:0f:7e:d0:32:
4c:ed:96:d7:2b:d7:1b:94:8b:3a:d3:3a:b9:82:e4:
ec:c2:76:3f:33:8c:8b:6a:fa:af:62:0b:8e:11:55:
5b:01:73:75:4d:95:e7:86:92:d7:1e:f9:66:e9:c0:
4f:fe:05:66:ab:ed:d1:46:96:b3:b4:dd:ad:fc:2e:
a4:fd:84:3a:c3:3b:11:62:db:5a:2f:e5:35:b4:60:
80:7b:ea:79:07:36:eb:09:4a:17:38:92:ff:ed:b5:
90:b7:a1:08:18:69:61:bd:e6:ba:72:65:88:d3:7b:
8c:cb:2c:8c:3c:b6:b3:9a:b2:db:e4:aa:1d:43:d2:
cb:35:88:8d:3b:65:b7:3c:a3:a0:0f:7c:0e:12:bf:
68:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:69:2A:F2:02:C5:D3:7C:EF:EA:EA:F7:F4:FF:C9:13:E7:11:3B:31
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yGkq8gLF03zv6ur39P_JE-cROzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.111.0/24
Signature Algorithm: sha256WithRSAEncryption
11:17:9b:4b:c2:24:89:33:4b:8c:96:50:9a:21:9e:a9:9f:a1:
7d:9d:9a:8f:71:a8:19:26:0e:a8:d3:40:75:09:24:37:be:e3:
02:16:e5:19:80:00:29:3f:30:44:8c:b3:23:80:92:83:f9:80:
5b:2b:99:a4:11:29:27:42:0d:1e:08:e7:f2:5d:9f:f6:e8:03:
cf:48:29:85:15:3f:db:26:79:77:49:41:a0:38:52:19:1f:54:
64:f3:6f:7a:66:bb:8d:a2:28:ed:d6:92:53:f8:6f:0c:71:83:
5f:9d:5c:dc:5e:66:e7:31:4d:fd:2f:57:47:64:01:57:ce:00:
2b:24:1c:7b:50:0e:1e:be:06:c0:93:f7:5f:08:c8:35:d0:6e:
5f:a6:6d:e0:be:3b:be:f5:2f:14:30:d9:9c:e3:59:6a:46:79:
30:d5:68:d4:e0:4a:ab:fe:e3:0a:cf:e7:7f:90:b0:00:18:f2:
26:2f:70:85:4f:90:bd:99:0d:7e:21:c1:ea:dd:fd:17:92:cd:
d2:97:b9:a7:57:91:2e:35:af:a7:41:fa:03:44:fb:39:e0:29:
d7:f8:f4:d4:5d:f9:9d:8f:8d:01:29:bf:6d:d1:fa:17:fa:59:
e1:4d:17:d9:7f:aa:d0:3c:11:e0:e4:f6:23:15:8b:83:cc:d8:
23:16:7d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:09 2025 by rpki-client