Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zPDT9Q6hqShXDB8fmItcvRDJ12c.roa
File: zPDT9Q6hqShXDB8fmItcvRDJ12c.roa (raw, json)
Hash identifier: w3Fd4ttd8+uX3LPag+N1ns+ac+ejbU+75e2AN39Ib6E=
Subject key identifier: CC:F0:D3:F5:0E:A1:A9:28:57:0C:1F:1F:98:8B:5C:BD:10:C9:D7:67
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198D1942BE23EBCD18A20086C919AF15FF6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zPDT9Q6hqShXDB8fmItcvRDJ12c.roa
Signing time: Fri 22 Aug 2025 11:40:05 +0000
ROA not before: Fri 22 Aug 2025 11:40:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61112
IP address blocks: 151.242.125.0/24 maxlen: 24
151.242.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d1:94:2b:e2:3e:bc:d1:8a:20:08:6c:91:9a:f1:5f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 22 11:40:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccf0d3f50ea1a928570c1f1f988b5cbd10c9d767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:17:93:ca:a7:4a:47:8e:a2:54:34:00:31:a0:
b6:8f:14:ee:62:d5:0b:08:f5:51:78:9f:28:51:23:
fa:8b:28:de:7e:6c:02:89:3e:84:9b:70:02:1e:4d:
88:ef:2a:7f:2a:4c:82:94:65:6a:6d:4b:4f:8a:e5:
23:af:a6:00:0f:66:d6:2a:be:ae:dc:ed:0a:6b:48:
7b:4e:3c:58:f5:dc:47:04:e7:94:3c:d6:df:68:0b:
d7:c4:2b:70:3b:55:4f:ee:0a:8f:da:25:7c:86:29:
14:73:5e:fb:50:78:d4:ff:72:57:53:0f:55:6b:e4:
46:bd:7e:1d:00:28:f5:47:3d:c0:95:1b:93:a2:e9:
2e:5a:db:9c:f1:d4:c5:1a:ef:0b:d2:5d:11:91:68:
2a:ff:cc:8f:5a:4c:1f:44:07:c1:0c:4c:ac:19:66:
df:c6:32:3e:0b:62:b8:71:8d:a7:1f:50:06:f8:61:
4a:0d:ee:24:66:6d:3b:59:5e:97:a0:80:05:a9:7d:
f3:17:6c:6d:59:b9:32:44:8b:59:a0:c6:6d:39:10:
d8:a1:f8:69:d1:ac:37:54:07:eb:ea:ac:52:38:8e:
41:40:27:1a:0b:ee:4b:8e:ef:55:8f:de:de:40:dd:
67:a9:67:52:8d:a8:69:00:07:51:92:0c:f4:9a:eb:
3f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F0:D3:F5:0E:A1:A9:28:57:0C:1F:1F:98:8B:5C:BD:10:C9:D7:67
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zPDT9Q6hqShXDB8fmItcvRDJ12c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.125.0/24
151.242.137.0/24
Signature Algorithm: sha256WithRSAEncryption
71:32:d3:d5:e6:7c:e1:d8:b2:fa:98:d5:58:dc:7a:fa:f7:00:
2f:cb:f1:1e:3e:91:ba:9d:d3:4d:99:d1:07:1d:ee:5f:a3:7d:
69:a9:cd:3c:6f:01:64:5c:f9:c1:a8:bd:60:50:1a:f2:e2:66:
bd:2f:14:ce:50:50:1c:e8:0f:66:28:7f:c1:95:25:1f:44:e0:
8c:2c:b0:09:ee:6e:c0:b6:58:83:e7:ad:1c:7f:5e:94:c6:96:
d0:dd:5a:60:d1:b1:1f:21:09:eb:f8:92:f8:86:4d:f4:cb:8e:
98:2a:65:1d:87:ae:da:8c:d8:63:62:8d:73:e0:e3:18:0d:79:
db:cb:41:00:22:b1:37:b4:ee:b7:a5:d8:a8:88:f8:d6:90:8b:
f7:86:5f:c4:53:be:51:ac:fe:9d:3a:85:f2:ed:cf:93:59:08:
96:33:93:26:b6:de:ee:d6:1e:88:0c:17:c1:f5:ae:3f:a8:8d:
ff:a7:14:a1:b8:44:2d:de:69:0b:c2:19:23:e6:bc:c7:cf:f5:
d4:2c:89:1b:fa:96:d9:f2:98:93:45:69:14:be:42:f6:9f:e9:
0b:d1:20:10:71:2f:74:50:f0:79:ec:a4:71:b4:d2:d5:c5:f9:
3b:fb:2f:fd:b7:4c:ee:ee:ec:81:d8:96:87:ef:fe:65:5f:37:
7b:16:ed:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:53:12 2025 by rpki-client