
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/H1V3-pWhuGuW8MkBfLAWKiy6YC8.roa
File: H1V3-pWhuGuW8MkBfLAWKiy6YC8.roa (raw, json)
Hash identifier: 4HAGeHCBgAZYwiXlHVkGMqyZchng4dy3rd/3+jy5OZk=
Subject key identifier: 1F:55:77:FA:95:A1:B8:6B:96:F0:C9:01:7C:B0:16:2A:2C:BA:60:2F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198749E5542DC2BCDB0D29ACE5B50C85FAA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/H1V3-pWhuGuW8MkBfLAWKiy6YC8.roa
Signing time: Mon 04 Aug 2025 10:26:30 +0000
ROA not before: Mon 04 Aug 2025 10:26:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205949
IP address blocks: 151.241.24.0/24 maxlen: 24
151.242.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:9e:55:42:dc:2b:cd:b0:d2:9a:ce:5b:50:c8:5f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 4 10:26:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f5577fa95a1b86b96f0c9017cb0162a2cba602f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6c:03:5b:58:14:7e:f1:90:dd:38:49:4c:b3:
45:10:73:71:2b:b6:1f:8c:b8:03:7d:1b:5c:fb:c6:
d2:8b:cb:05:9d:2b:43:0c:60:03:6a:f3:0f:44:42:
fa:6d:78:aa:a0:58:ce:71:17:4c:bc:47:2f:8a:5b:
a4:2a:5a:55:e0:42:ab:a3:a4:0e:cd:35:37:f2:e1:
af:f0:7c:e5:91:81:5a:10:01:ea:8a:61:af:14:b5:
bd:5d:6e:fc:84:03:8d:23:ce:ed:2b:4c:a8:ac:f3:
05:c4:14:f5:69:2f:3e:f5:d6:45:28:de:f1:eb:84:
87:44:6c:35:1b:7d:42:64:87:c3:6c:74:48:88:ce:
a5:b0:bd:1f:26:62:dc:f0:14:49:b6:fb:bd:81:c3:
1f:cc:d3:0b:a7:7a:43:cb:f0:98:7f:6d:17:36:a1:
b1:db:43:4e:46:67:7d:49:21:b7:9d:99:bf:8f:9b:
d1:15:67:c7:14:a5:f0:5d:4f:cd:3b:c0:e6:90:e7:
db:36:0b:02:e7:0c:c9:27:3f:0a:e9:f5:9e:7b:25:
d6:e9:d8:ba:ef:06:1a:fb:7c:c9:5d:97:f1:8d:c2:
70:c6:33:e2:1d:ce:fd:87:38:3f:b3:80:9a:1a:83:
31:47:24:8d:cf:84:07:5a:05:84:1c:4d:d2:9d:b0:
2a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:55:77:FA:95:A1:B8:6B:96:F0:C9:01:7C:B0:16:2A:2C:BA:60:2F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/H1V3-pWhuGuW8MkBfLAWKiy6YC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.24.0/24
151.242.44.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f9:c3:f1:c0:8f:52:10:fd:a6:74:74:73:11:85:a8:57:4c:
60:01:89:be:1a:62:7e:c6:29:68:f8:ec:b7:2e:17:e4:98:cb:
69:8b:c2:83:88:91:b3:95:b2:4a:eb:03:bc:d5:20:dc:d3:6c:
11:d1:d5:b0:a2:b1:c8:fd:11:70:d1:bf:8e:d6:35:ce:61:c3:
48:68:ac:f7:9f:79:37:a4:6f:f1:30:fc:85:88:32:f8:00:87:
6b:11:d6:0c:74:6a:5f:72:a6:fc:b4:a0:55:4d:cd:55:28:e5:
c2:92:d5:3d:73:71:83:22:d5:f2:b3:9d:d5:83:90:a0:b1:2d:
fa:76:25:36:55:56:0d:7d:63:2f:d0:5e:29:fc:7b:bc:59:ac:
f2:41:9c:c6:a4:6e:3a:9a:0c:98:3f:2c:a7:62:0e:9e:97:13:
53:ed:c3:05:f5:d7:0c:cf:41:55:35:0d:50:d6:05:6b:dd:23:
ce:12:b9:ae:31:a0:c3:6e:04:74:d7:ce:1b:0b:8a:3f:db:d0:
03:fa:16:1d:a7:0c:5b:6e:53:3a:8f:23:35:b9:35:c7:b8:61:
58:99:19:06:33:a0:62:9e:37:87:9d:fa:78:2e:68:5e:2c:99:
78:e1:a2:00:2b:7c:cf:73:fc:fd:f9:8d:3c:c7:aa:dc:64:67:
79:10:10:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:11:44 2025 by rpki-client