Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1yW0yX-HMxYsqbcW3sfAA1gHTbM.roa
File: 1yW0yX-HMxYsqbcW3sfAA1gHTbM.roa (raw, json)
Hash identifier: mdfw1wz2G2mPv2Y7LLMLKZgicO4i/GYRgJffdv3Lu/8=
Subject key identifier: D7:25:B4:C9:7F:87:33:16:2C:A9:B7:16:DE:C7:C0:03:58:07:4D:B3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A19AD5F42B6F309A8B1DFBC25C8FB7DD7
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1yW0yX-HMxYsqbcW3sfAA1gHTbM.roa
Signing time: Sat 25 Oct 2025 04:43:03 +0000
ROA not before: Sat 25 Oct 2025 04:43:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 151.244.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:ad:5f:42:b6:f3:09:a8:b1:df:bc:25:c8:fb:7d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 25 04:43:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d725b4c97f8733162ca9b716dec7c00358074db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:91:fe:27:f0:b3:41:a3:87:40:ac:73:24:f5:
0b:8e:25:27:e2:ce:00:bf:f8:c1:a5:82:91:c0:4a:
2e:c5:b9:d0:a5:1d:25:9f:47:10:04:e3:6f:5b:af:
82:bd:87:9a:50:55:55:ac:84:d4:2f:93:1c:7e:d0:
d4:fa:81:67:fe:06:f1:00:77:7d:ae:fb:ca:d6:73:
8b:65:08:b1:6b:45:3e:f9:4f:7c:16:41:5c:b1:58:
6b:9a:98:43:f2:a0:90:39:d1:ca:c7:e6:a0:bd:34:
f2:24:3f:88:a9:8e:2b:b8:ac:83:1f:41:7f:ed:ae:
6f:2a:04:04:74:87:71:a9:f5:39:55:7c:9b:98:d9:
7f:78:53:54:a1:01:cb:09:f1:af:20:03:91:5e:43:
3a:59:f0:f2:80:65:ca:51:58:c3:82:9f:1b:9b:6e:
42:28:a9:f7:58:f1:fe:fd:87:a5:ac:52:3a:23:92:
a9:3c:20:7f:4f:da:43:21:e5:4a:d3:ec:ee:77:98:
f9:b3:19:bf:be:36:de:b0:42:6c:4c:de:13:39:9f:
79:4d:83:46:3b:e9:05:26:1a:f1:05:2b:14:c4:af:
24:6f:3a:ac:2b:77:93:11:6a:f1:cd:62:ce:5a:4d:
d1:2d:6b:9d:d9:be:88:14:01:45:70:49:1d:de:74:
9e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:25:B4:C9:7F:87:33:16:2C:A9:B7:16:DE:C7:C0:03:58:07:4D:B3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1yW0yX-HMxYsqbcW3sfAA1gHTbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.219.0/24
Signature Algorithm: sha256WithRSAEncryption
31:6b:d4:0f:92:ca:bb:8b:b6:34:bb:da:84:a9:1e:2a:c1:1a:
d1:e9:b9:5d:90:bd:f5:7f:88:cb:b2:e6:d7:98:34:e7:0f:8f:
26:86:ff:b0:21:f3:4c:f1:eb:98:3b:15:d4:9f:6d:ae:12:30:
41:08:ae:6f:b5:27:77:78:87:7c:7b:8e:cf:86:2d:df:30:5d:
29:77:22:dd:e7:74:ad:8c:95:b0:85:65:71:2e:75:cb:16:49:
a5:fa:af:a5:92:10:88:2c:b9:bf:c4:df:ae:a9:ad:8f:2f:a5:
c6:98:0e:76:3d:d3:0a:04:12:e4:0b:6b:75:52:56:99:e3:f7:
55:66:3f:71:30:cc:59:a0:c3:96:5b:a2:c6:80:b8:cf:b0:8a:
65:2c:a5:ae:32:ce:52:a3:c5:b3:40:c0:3e:38:58:d3:68:35:
6a:b8:4d:8c:3e:66:22:80:8c:9b:03:61:a6:8a:4e:89:16:e6:
c5:fb:9e:17:51:3d:d4:c7:88:da:4a:c9:12:61:04:77:0d:b8:
a9:0b:16:17:dc:20:59:c7:76:82:eb:f7:f9:2c:37:78:82:2a:
02:b5:34:bb:b5:0d:0c:0a:cb:bb:29:28:0a:ce:81:ff:37:f5:
09:50:e9:d5:b7:52:6c:6e:50:63:d0:98:ed:2f:68:b1:f2:41:
d1:95:80:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:03:55 2025 by rpki-client