Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zJxEPC1U1bsgkv3kR8d-jWLfJXc.roa
File: zJxEPC1U1bsgkv3kR8d-jWLfJXc.roa (raw, json)
Hash identifier: pWpJDZMUvzrCNj4BXEeLzEIhnqMcX485mD0ja2IkHe0=
Subject key identifier: CC:9C:44:3C:2D:54:D5:BB:20:92:FD:E4:47:C7:7E:8D:62:DF:25:77
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019939969F540076F616B686AFC5519CADF0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zJxEPC1U1bsgkv3kR8d-jWLfJXc.roa
Signing time: Thu 11 Sep 2025 16:23:16 +0000
ROA not before: Thu 11 Sep 2025 16:23:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208324
IP address blocks: 151.244.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:96:9f:54:00:76:f6:16:b6:86:af:c5:51:9c:ad:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 11 16:23:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc9c443c2d54d5bb2092fde447c77e8d62df2577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cb:fb:9d:90:ae:c8:6a:d9:20:76:18:94:5a:
b4:00:73:eb:d0:fc:09:53:51:33:a2:18:31:14:f4:
d6:09:c8:fc:28:ea:12:04:88:95:24:4f:c3:7d:15:
fa:17:7e:bc:df:1a:70:6e:a6:f6:50:17:2d:7c:76:
f9:04:bf:3e:72:e2:dd:be:5e:47:57:58:9c:57:fa:
15:84:5d:ac:5d:a1:15:cc:d3:d8:7e:2a:19:d4:91:
10:70:b9:b2:3d:9e:8e:8f:b8:c3:67:12:85:15:4f:
a2:7b:06:22:bb:96:bd:04:ff:b0:04:be:6f:2a:43:
d4:3b:2a:7c:76:08:6e:3b:89:88:76:2c:50:98:6e:
08:77:09:56:1d:25:c7:cf:73:dc:2f:13:33:79:f1:
12:69:71:98:33:2a:00:49:56:20:58:47:4f:44:8f:
c7:4c:f5:f1:eb:72:50:7a:09:11:d3:ac:40:3d:ce:
66:6d:e4:24:fe:d6:07:84:6f:57:52:73:15:b2:99:
93:81:f0:f2:4c:c1:26:0e:97:77:2e:25:3e:5b:a0:
d2:d8:48:43:dd:2d:76:1a:12:f5:c8:18:c1:87:5f:
b2:55:50:7b:f3:f1:31:a2:37:70:9b:7c:a9:6c:da:
80:75:90:9e:3c:1e:24:88:9f:2f:cb:30:ba:83:58:
ad:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9C:44:3C:2D:54:D5:BB:20:92:FD:E4:47:C7:7E:8D:62:DF:25:77
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zJxEPC1U1bsgkv3kR8d-jWLfJXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.144.0/20
Signature Algorithm: sha256WithRSAEncryption
26:8c:1d:9a:64:a3:8c:9a:2e:7e:07:5b:f8:85:df:9e:07:bb:
62:8e:4b:d9:06:6b:04:80:81:35:eb:5b:dd:13:18:e8:f0:a0:
e7:d6:73:3f:0d:fe:ce:66:6f:9f:e5:70:b7:2c:d7:43:74:52:
49:25:e1:e1:01:01:b5:db:be:27:3a:93:7a:40:ef:12:df:97:
9d:ad:3c:05:6f:a6:cd:e9:c0:86:5a:98:54:1f:ba:37:c4:75:
48:14:19:8e:64:1d:bf:09:da:07:49:e0:80:48:b8:7f:62:59:
a4:ea:2b:e0:c5:e1:02:15:92:51:91:97:d2:36:d1:ac:63:97:
34:7d:d9:6a:6a:6f:12:b6:1f:2e:a4:08:de:f3:90:52:0a:79:
34:65:e5:bc:83:43:28:15:77:e5:ba:ea:a1:7c:ec:29:9a:ac:
34:c5:86:d1:fb:d4:6f:db:e2:88:23:3a:82:a3:40:72:8e:54:
ac:c0:72:7a:1a:e4:75:6f:a5:2c:0f:59:a7:61:8d:9e:3d:9c:
ca:62:03:ca:65:7f:ee:21:57:13:85:ac:a9:d1:3b:ca:b3:38:
d5:4e:69:ba:a8:8d:86:ed:9b:aa:d9:2d:ed:39:bc:a9:98:d8:
23:14:85:01:ac:b5:29:1c:a6:e3:3d:d1:99:0b:b8:f5:b7:06:
4d:a8:b8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:06:06 2025 by rpki-client