Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/H52cX3bnDJHPz3BBKeLGHWuuV4c.roa
File: H52cX3bnDJHPz3BBKeLGHWuuV4c.roa (raw, json)
Hash identifier: Kv/PoDhvy40P0qbwxkzRygPhNsUQZkYFIzSvllfRrLA=
Subject key identifier: 1F:9D:9C:5F:76:E7:0C:91:CF:CF:70:41:29:E2:C6:1D:6B:AE:57:87
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019869397843D99AF24F0531FFB55B8FB856
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/H52cX3bnDJHPz3BBKeLGHWuuV4c.roa
Signing time: Sat 02 Aug 2025 05:20:30 +0000
ROA not before: Sat 02 Aug 2025 05:20:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395374
IP address blocks: 151.242.146.0/24 maxlen: 24
151.242.173.0/24 maxlen: 24
151.243.5.0/24 maxlen: 24
151.243.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:69:39:78:43:d9:9a:f2:4f:05:31:ff:b5:5b:8f:b8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 2 05:20:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f9d9c5f76e70c91cfcf704129e2c61d6bae5787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:17:6c:12:0a:6a:40:c7:06:fb:8d:88:dd:0a:
b9:b6:f9:9a:eb:a6:9d:61:9e:86:c4:3f:b9:b1:0c:
a1:af:82:f5:f9:a5:59:ed:b4:83:6b:8a:2c:9e:ff:
fe:3b:08:bd:57:5a:5c:b8:d1:ac:03:7c:44:d9:04:
4f:07:b3:5b:35:35:39:82:b5:4a:c3:bf:45:e4:ea:
d2:62:db:38:eb:8c:8d:77:0f:c7:3b:ba:c0:ae:e0:
e8:3c:f0:1f:94:62:35:31:7b:46:6d:e3:0d:9d:48:
76:6d:61:60:d0:2c:00:e3:30:8c:5d:32:cf:67:e7:
2e:bd:b9:d4:93:65:2e:a2:b9:66:57:02:db:09:9b:
7c:e0:66:b2:d7:a6:1a:c8:f9:5f:8d:06:69:13:54:
55:fe:0a:87:6b:1a:cf:10:5a:d1:01:25:84:75:04:
1d:82:20:e9:78:48:5c:e3:a5:90:4e:c9:47:bf:a2:
27:94:0a:50:93:5f:33:79:5a:d1:1c:2d:ff:1c:f5:
cc:49:3a:ef:c7:ad:c1:bd:f9:ac:03:a0:96:9b:c7:
91:25:2e:c0:7b:d3:5b:f0:65:7b:44:d0:91:f8:9e:
dd:31:85:bf:da:a5:a8:83:07:2d:43:8d:d7:4f:4a:
11:57:20:0d:f1:c5:09:87:f9:20:95:08:fb:6a:a4:
2e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9D:9C:5F:76:E7:0C:91:CF:CF:70:41:29:E2:C6:1D:6B:AE:57:87
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/H52cX3bnDJHPz3BBKeLGHWuuV4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.146.0/24
151.242.173.0/24
151.243.5.0/24
151.243.169.0/24
Signature Algorithm: sha256WithRSAEncryption
84:4b:1c:16:4b:97:66:79:85:38:0a:e9:69:81:f7:89:d6:04:
fd:1a:9a:44:6f:c6:63:22:78:31:13:dc:fc:fe:a0:0e:25:7b:
79:fc:b7:e0:58:67:b2:e8:7b:6a:90:2c:6f:84:ae:22:ea:6d:
5f:33:15:cc:b8:e1:d4:7b:b4:b1:4e:9c:1d:f3:39:19:f3:a6:
2e:9e:b5:c5:cd:7a:9d:bf:0d:f1:f9:da:a0:41:d4:ee:28:f7:
d4:4f:f1:56:15:6c:20:2c:2a:7a:92:a2:e4:54:ac:34:ad:3c:
d2:16:65:17:3d:cd:36:71:f4:2a:dc:4a:43:19:47:f4:00:b4:
17:46:f6:2c:cb:c3:d1:c4:4e:4d:14:df:74:71:20:1e:b8:24:
b4:ed:ea:b4:72:a2:ba:17:46:c7:b6:1b:d7:20:1e:a3:e4:d8:
f6:7f:fc:7e:bc:24:ae:af:8f:3c:1c:40:27:86:7b:62:ec:a1:
3c:67:e1:82:6e:c2:9b:26:d8:a2:34:97:93:6b:4f:04:63:3a:
06:a0:79:8c:a3:22:11:3d:65:c3:a5:0c:a2:d9:ae:c2:81:13:
83:57:fa:25:3d:80:c2:1d:96:61:a9:d8:85:b9:e1:7a:b0:57:
f7:d9:c7:64:cd:83:a6:54:85:e3:a0:9e:ef:e3:16:48:fe:82:
94:81:dc:b9
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZhpOXhD2ZryTwUx/7Vbj7hWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwODAyMDUyMDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjlkOWM1Zjc2ZTcwYzkxY2ZjZjcwNDEyOWUyYzYxZDZiYWU1Nzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/xdsEgpqQMcG+42I3Qq5tvma66ad
YZ6GxD+5sQyhr4L1+aVZ7bSDa4osnv/+Owi9V1pcuNGsA3xE2QRPB7NbNTU5grVK
w79F5OrSYts464yNdw/HO7rAruDoPPAflGI1MXtGbeMNnUh2bWFg0CwA4zCMXTLP
Z+cuvbnUk2UuorlmVwLbCZt84Gay16YayPlfjQZpE1RV/gqHaxrPEFrRASWEdQQd
giDpeEhc46WQTslHv6InlApQk18zeVrRHC3/HPXMSTrvx63BvfmsA6CWm8eRJS7A
e9Nb8GV7RNCR+J7dMYW/2qWogwctQ43XT0oRVyAN8cUJh/kglQj7aqQukQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFB+dnF925wyRz89wQSnixh1rrleHMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvSDUyY1gzYm5ESkhQejNCQktlTEdIV3V1VjRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/KSAwQA
l/KtAwQAl/MFAwQAl/OpMA0GCSqGSIb3DQEBCwUAA4IBAQCESxwWS5dmeYU4Culp
gfeJ1gT9GppEb8ZjIngxE9z8/qAOJXt5/LfgWGey6HtqkCxvhK4i6m1fMxXMuOHU
e7SxTpwd8zkZ86YunrXFzXqdvw3x+dqgQdTuKPfUT/FWFWwgLCp6kqLkVKw0rTzS
FmUXPc02cfQq3EpDGUf0ALQXRvYsy8PRxE5NFN90cSAeuCS07eq0cqK6F0bHthvX
IB6j5Nj2f/x+vCSur488HEAnhnti7KE8Z+GCbsKbJtiiNJeTa08EYzoGoHmMoyIR
PWXDpQyi2a7CgRODV/olPYDCHZZhqdiFueF6sFf32cdkzYOmVIXjoJ7v4xZI/oKU
gdy5
-----END CERTIFICATE-----
Generated at Sat Aug 9 15:11:49 2025 by rpki-client