Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/XT1M1ME1w2GWT-wkJaT2Unr_kG8.roa
File: XT1M1ME1w2GWT-wkJaT2Unr_kG8.roa (raw, json)
Hash identifier: 6fvlVJZbvpl7K75DLt8sGvC1abVm/uU97W3kp9Hv4hM=
Subject key identifier: 5D:3D:4C:D4:C1:35:C3:61:96:4F:EC:24:25:A4:F6:52:7A:FF:90:6F
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 01977DC11FA917C293657EC4DEADFC9CFAEA
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/XT1M1ME1w2GWT-wkJaT2Unr_kG8.roa
Signing time: Tue 17 Jun 2025 11:58:17 +0000
ROA not before: Tue 17 Jun 2025 11:58:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210676
IP address blocks: 46.151.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:c1:1f:a9:17:c2:93:65:7e:c4:de:ad:fc:9c:fa:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jun 17 11:58:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d3d4cd4c135c361964fec2425a4f6527aff906f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:88:24:da:c0:db:da:fd:b2:6f:44:43:1e:fc:
98:2c:78:2b:cb:ca:31:6d:00:07:6f:77:aa:fb:de:
8e:f8:67:9d:44:c1:97:7d:6f:72:db:11:99:e4:b8:
c6:6e:bf:2d:5e:b9:26:6d:8c:44:54:ce:77:16:45:
78:85:ed:7c:cb:2e:92:2c:01:90:33:47:8e:14:b6:
3c:c9:40:da:86:73:ef:b8:8d:02:4d:4b:74:16:f5:
e3:8f:5a:60:ac:a4:a4:f2:0d:26:85:81:db:66:6f:
5d:c1:45:8f:94:ba:67:a7:15:80:8b:04:60:9b:e1:
b4:86:75:a9:02:b7:70:52:c1:f8:7a:ba:3d:5e:13:
b3:df:98:20:b6:c9:22:56:f0:60:8e:0f:a5:01:c9:
15:f4:ca:df:64:dd:03:c2:e9:63:38:13:3e:af:17:
38:6c:14:17:82:50:60:b8:f3:2d:fb:37:eb:48:de:
72:89:77:4a:63:e3:97:f2:b4:63:6f:9d:21:8b:0e:
ff:cc:91:11:f8:b1:36:e7:79:aa:49:c7:ef:da:87:
08:7f:b8:9e:7e:a1:71:41:ae:93:92:60:82:8f:75:
d5:88:e3:bc:ea:f1:eb:d9:d7:84:b0:6b:c0:fb:2a:
57:19:e2:53:e1:4a:8a:f8:25:f5:ee:99:89:66:37:
ff:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3D:4C:D4:C1:35:C3:61:96:4F:EC:24:25:A4:F6:52:7A:FF:90:6F
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/XT1M1ME1w2GWT-wkJaT2Unr_kG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.183.0/24
Signature Algorithm: sha256WithRSAEncryption
59:3c:6e:14:3c:ae:86:3e:10:83:21:1e:c6:ad:ae:e5:c5:99:
42:1d:fc:fc:71:dd:24:9b:ce:e3:8b:65:77:1d:0d:15:00:a7:
19:49:b7:3c:a5:59:68:a5:28:fe:78:21:40:77:77:66:3f:69:
13:3d:9a:c4:f5:ef:0b:c9:de:27:a0:92:b6:bd:3e:ff:4e:8e:
97:de:c6:07:bf:78:46:cf:14:b1:8a:7c:03:27:1a:7d:cd:0d:
d5:c1:1c:cf:b6:d2:1f:2f:c5:c2:40:1e:9b:8a:9a:ff:94:41:
3d:ff:9d:81:db:ca:e7:82:3a:ae:32:93:4e:e9:ac:e0:b3:5b:
28:92:ac:f8:1d:d4:aa:09:32:f7:cd:55:dc:9a:ee:77:70:10:
64:7f:b3:20:38:92:cd:ae:a5:13:cd:58:63:90:32:4a:50:93:
14:6a:10:f5:7f:c2:33:af:ac:9f:d4:af:2c:c0:4e:85:50:ec:
97:bc:48:63:22:5f:4c:df:2d:71:3a:13:e0:9d:a0:73:5a:c3:
80:e3:87:68:e1:2e:c0:0e:38:84:23:3a:b1:4a:09:56:19:93:
f1:1a:22:c3:51:47:1e:fa:05:98:a2:b2:cd:04:d1:5b:09:e1:
bd:75:b7:c4:5b:81:8c:8f:77:e8:f3:17:b2:49:1b:3a:27:78:
2e:41:98:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 07:09:25 2025 by rpki-client