Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/J3u1fuguOQuArx8zp8zktnGKpVo.roa
File: J3u1fuguOQuArx8zp8zktnGKpVo.roa (raw, json)
Hash identifier: FF1iGxRCiB/lj1nfIqA1F6jeaqam6tdXH04KSHMuyus=
Subject key identifier: 27:7B:B5:7E:E8:2E:39:0B:80:AF:1F:33:A7:CC:E4:B6:71:8A:A5:5A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019879AE2F892D001413A300686CE885956C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/J3u1fuguOQuArx8zp8zktnGKpVo.roa
Signing time: Tue 05 Aug 2025 10:01:55 +0000
ROA not before: Tue 05 Aug 2025 10:01:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137235
IP address blocks: 151.243.15.0/24 maxlen: 24
151.243.255.0/24 maxlen: 24
151.244.243.0/24 maxlen: 24
151.244.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:2f:89:2d:00:14:13:a3:00:68:6c:e8:85:95:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 5 10:01:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=277bb57ee82e390b80af1f33a7cce4b6718aa55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:42:0c:8d:9c:ef:7e:d4:b5:79:80:57:32:03:
be:a4:35:c1:85:01:4c:c0:5f:21:df:58:db:c0:2e:
1e:5a:86:ee:13:e7:40:85:2a:d3:37:cd:63:f9:d2:
e3:f2:f7:e1:ca:57:c8:0a:1e:86:da:23:ab:c9:94:
ce:32:ba:ac:e9:f5:db:2f:de:6b:5e:57:22:76:7e:
6e:7d:1d:d6:f7:ab:3b:06:20:14:51:71:5e:4b:2a:
1c:b8:bf:2b:99:ab:ca:75:7a:ff:c2:d7:91:ad:a6:
b9:3e:9d:54:70:08:7d:c5:87:7c:0c:5f:c3:1a:b6:
61:7c:db:e9:cb:13:d6:3a:f8:53:00:b0:2d:d3:57:
b0:70:74:51:ee:18:3f:30:b8:a2:13:b5:95:e4:8e:
a9:f8:7b:6b:a6:de:d9:0a:3e:97:00:ad:63:77:be:
1e:5f:f1:41:9d:bc:2b:8c:fe:e2:00:23:2e:7d:4b:
24:f9:30:11:9b:4c:62:83:f3:2d:3d:5c:92:29:b6:
68:e9:82:6b:25:bc:d1:41:21:c6:5a:c5:d2:a9:da:
81:a9:57:24:2c:35:89:3e:b8:3d:a1:7c:5b:7d:93:
ab:33:4d:70:35:29:36:8d:3b:c7:fe:97:66:c1:ff:
65:6f:56:02:ff:74:42:d4:f1:fb:a0:ef:6d:32:d2:
58:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7B:B5:7E:E8:2E:39:0B:80:AF:1F:33:A7:CC:E4:B6:71:8A:A5:5A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/J3u1fuguOQuArx8zp8zktnGKpVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.15.0/24
151.243.255.0/24
151.244.243.0/24
151.244.247.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:7d:ab:7a:8c:b4:d5:44:75:b4:8b:6b:f9:c5:34:60:f5:88:
12:f8:d9:00:ea:5f:26:91:10:ff:16:36:da:5e:0a:80:2b:79:
fa:78:c4:35:16:a2:56:fb:1b:e8:73:dd:bd:bf:51:e4:d0:e8:
7f:3a:bb:71:d9:4c:49:66:9e:97:72:00:7e:48:ac:31:4f:a6:
a9:d7:2a:57:fb:c2:40:39:8b:02:8c:4d:69:d8:69:79:c2:a5:
d7:b1:48:cd:01:9a:ca:6b:4d:05:94:28:d4:03:c0:28:0c:12:
36:f0:97:ca:6c:3c:4b:74:f9:91:43:7a:11:24:ec:61:6c:18:
bc:20:88:86:b2:ea:32:7d:db:c5:3e:43:a3:15:25:7c:ce:7e:
95:f2:d6:e3:73:70:2f:ee:dd:fd:30:1a:ac:fb:53:7d:13:b5:
6e:f9:a9:7d:2c:0c:23:dd:d2:a2:69:35:32:73:f7:30:28:b3:
c2:1a:00:73:9e:ad:31:05:64:da:79:d1:30:2e:c5:0c:2f:a2:
93:af:75:1c:73:73:62:0c:1c:87:4e:ab:fd:66:07:f8:a7:8b:
e6:dd:a9:f3:3a:6d:63:ff:98:e0:ff:cd:23:ce:db:d9:11:a2:
ae:bc:ac:37:b9:24:e6:30:7b:b2:3d:45:fb:f4:d8:5b:8d:04:
0f:21:2e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:17:38 2025 by rpki-client