Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DUpT8pM__96RWG0EcPA2bLnfkWg.roa
File: DUpT8pM__96RWG0EcPA2bLnfkWg.roa (raw, json)
Hash identifier: ErcYUHY8r9zyriWGcz9bsSldGgJQfcdaAkJ5Mxokw30=
Subject key identifier: 0D:4A:53:F2:93:3F:FF:DE:91:58:6D:04:70:F0:36:6C:B9:DF:91:68
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01986F20FF5A6C8543BAA1E9CC3657E95527
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DUpT8pM__96RWG0EcPA2bLnfkWg.roa
Signing time: Sun 03 Aug 2025 08:51:30 +0000
ROA not before: Sun 03 Aug 2025 08:51:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202673
IP address blocks: 151.244.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 15:11:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:6f:20:ff:5a:6c:85:43:ba:a1:e9:cc:36:57:e9:55:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 3 08:51:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d4a53f2933fffde91586d0470f0366cb9df9168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:42:e6:9b:e9:b7:e4:23:c2:19:20:b1:6d:16:
e1:f1:83:e6:ac:f3:dc:a0:48:a4:db:8d:8e:14:1d:
c9:94:45:d3:10:9a:b3:d2:74:d4:99:b5:16:03:0b:
13:64:5d:6d:6a:dd:13:1c:b6:c5:ec:89:bf:7d:02:
6b:11:a8:07:32:c8:80:97:c5:b9:32:25:e9:bd:12:
b6:23:00:c1:0d:07:aa:60:55:13:86:12:12:01:44:
c7:c0:91:cf:c3:ec:19:d5:31:40:f9:65:3c:a3:13:
7f:b9:de:fd:2c:bd:c7:9e:60:f0:da:90:97:55:34:
e5:f9:ca:c3:25:02:14:e3:be:13:04:c4:c4:0f:3e:
25:23:8a:e5:af:26:6b:ff:a7:f7:d8:89:3a:a6:15:
01:df:18:76:eb:85:42:90:a3:ef:9d:7b:63:a9:d1:
f5:c7:2d:da:96:cf:a3:81:00:a6:b6:ab:92:8a:94:
50:4d:36:44:76:12:22:5f:0b:ef:f5:7d:21:13:11:
2a:12:33:16:4e:8a:eb:5b:e4:98:df:48:0b:84:8b:
f6:2c:78:2a:5d:04:75:7a:4c:60:cd:99:45:cc:74:
30:5c:9d:6a:21:68:e2:67:bf:ca:43:c9:49:5d:c4:
d9:57:c4:36:d8:79:31:3e:a4:ef:5c:09:ac:5d:00:
14:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4A:53:F2:93:3F:FF:DE:91:58:6D:04:70:F0:36:6C:B9:DF:91:68
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DUpT8pM__96RWG0EcPA2bLnfkWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.244.0/24
Signature Algorithm: sha256WithRSAEncryption
38:32:44:ae:f7:68:ad:6e:a2:42:c2:8e:a4:17:f2:72:8e:df:
ba:f8:33:1d:96:df:4c:eb:97:d5:0e:84:fe:51:ed:fe:df:2c:
ad:a3:9a:6f:79:c7:88:9c:2d:36:0d:80:90:09:80:70:07:b2:
c3:03:d0:38:b6:b0:7a:32:c2:eb:eb:65:06:54:48:80:a3:f1:
05:ad:3d:57:6a:34:89:47:0d:03:50:a6:df:7b:ae:a5:2a:ae:
20:f7:68:59:e4:53:d3:42:cc:85:c0:63:32:12:8f:70:ad:f6:
c0:25:2d:e3:ae:7e:4c:8b:4f:4a:a8:0d:26:d9:83:5a:d1:08:
c7:90:5b:51:82:22:0a:1b:8c:2f:0e:6a:e3:e1:a3:fa:ec:a6:
35:c6:85:70:21:7d:a3:e1:0a:2d:a5:4c:2c:41:79:23:21:08:
9d:29:e6:8b:83:66:94:da:44:37:07:e6:3d:72:4c:b6:ac:af:
51:fd:c4:59:94:66:fe:65:8e:ae:03:7e:97:b0:2a:b8:63:03:
eb:a7:5b:f4:27:03:9a:ee:eb:1b:9c:5e:1f:6f:35:90:3a:09:
61:c4:86:3a:ec:c1:2a:fb:9a:ce:47:b2:6d:87:e8:66:4b:4d:
13:cc:ba:73:81:b8:69:34:11:55:30:40:79:45:2d:70:d7:40:
33:60:7d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:12:53 2025 by rpki-client