Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OVt_IdW4TI-nZRHts7kgOFDFD2g.roa
File: OVt_IdW4TI-nZRHts7kgOFDFD2g.roa (raw, json)
Hash identifier: uhl7WoWxKd/iq0tql+jz7k6LAY62Aq0Q6i9giIlcGME=
Subject key identifier: 39:5B:7F:21:D5:B8:4C:8F:A7:65:11:ED:B3:B9:20:38:50:C5:0F:68
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198406AEAE913DB0462EC59174748A50A57
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OVt_IdW4TI-nZRHts7kgOFDFD2g.roa
Signing time: Fri 25 Jul 2025 07:10:05 +0000
ROA not before: Fri 25 Jul 2025 07:10:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212336
IP address blocks: 151.241.88.0/24 maxlen: 24
151.242.11.0/24 maxlen: 24
151.242.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:6a:ea:e9:13:db:04:62:ec:59:17:47:48:a5:0a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 25 07:10:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=395b7f21d5b84c8fa76511edb3b9203850c50f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:97:77:44:eb:06:f9:af:b6:7c:49:9f:fa:72:
d8:b6:44:85:2b:92:4e:21:c5:91:d7:b6:af:22:a2:
9f:a1:de:ce:b2:13:ea:67:a1:13:66:bf:d6:50:4c:
95:d4:76:7b:d7:30:06:f0:51:72:b7:3a:5a:54:8c:
8c:2f:25:38:b4:3b:0b:b2:47:10:97:af:08:24:7d:
02:5a:b1:fa:c9:9d:d1:5d:9f:db:3a:15:0a:54:e1:
19:67:5e:68:9c:7b:1b:b1:2f:b7:37:ed:0d:01:d9:
08:3e:33:3f:58:e7:56:ca:8f:6f:45:07:35:c7:5b:
3e:36:04:3e:d1:65:f3:c8:49:02:b5:ae:ca:be:f6:
e9:3d:cf:a9:ad:ae:5a:e6:a3:c6:aa:37:6d:ae:7f:
f2:4f:da:13:53:54:25:a3:71:fa:57:4b:e6:25:90:
05:c8:83:78:c3:16:8b:9b:7d:29:fa:80:a8:f8:ad:
84:5a:5f:8a:07:05:79:a4:b0:42:6a:a6:bb:ea:38:
51:fc:87:a5:87:a5:5c:35:17:f5:f4:35:88:57:d6:
a0:8b:6e:33:20:f5:de:a0:27:21:b2:1c:6b:4f:d1:
ee:0f:f3:eb:4e:6a:66:a7:38:38:24:f5:55:8b:27:
e9:a9:c7:0c:9f:21:30:36:7c:c4:2c:fa:76:11:89:
8e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5B:7F:21:D5:B8:4C:8F:A7:65:11:ED:B3:B9:20:38:50:C5:0F:68
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OVt_IdW4TI-nZRHts7kgOFDFD2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.88.0/24
151.242.11.0/24
151.242.188.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:d6:2b:3b:aa:5d:ce:6d:f2:03:6e:ab:c0:0d:c9:f9:48:2f:
a1:dc:0d:37:01:20:33:e1:0d:c6:fb:8b:34:5b:ff:c9:7f:e8:
95:92:79:b8:95:fd:d1:5a:f5:0a:14:28:a7:a9:d0:4b:11:d7:
23:bc:e8:e6:cb:32:39:25:2c:69:cd:ec:ab:1a:63:55:34:69:
e9:2a:de:b9:53:7e:1d:b0:f9:16:5c:59:cc:26:82:10:1f:f1:
cb:70:55:6c:42:f8:72:12:a9:a1:d3:50:7d:e5:c3:c8:c0:7d:
6b:45:07:77:01:71:f0:c4:27:65:3f:97:26:ba:2b:ad:37:08:
ec:a7:e8:fa:bf:4d:f6:d7:14:f3:ba:63:e1:2d:e3:c3:44:d6:
6a:21:b3:e5:51:e6:26:ae:1a:1d:b1:cf:8e:d5:73:ed:f3:2e:
0f:65:97:36:f7:16:65:7c:b0:6d:4f:0d:fa:e4:99:86:68:b2:
96:31:e3:61:f6:91:f0:d3:96:13:79:bc:0a:f5:67:c8:5a:e6:
47:5f:dd:f5:ed:a2:3a:ad:e5:21:7e:5c:62:0f:d0:ce:d2:35:
07:3b:f3:a8:39:12:63:25:55:66:d8:20:3c:5d:5c:9d:5d:71:
ee:87:0f:0a:f6:8b:8f:63:17:e6:e6:d8:23:14:b1:e3:93:6a:
0a:a6:ca:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:37:13 2025 by rpki-client