Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PyyBMjQTGdO3rZ53vtiS5QHT2-I.roa
File: PyyBMjQTGdO3rZ53vtiS5QHT2-I.roa (raw, json)
Hash identifier: NHT62vcKXNFjzU64pexOx+h4nl0Wx9W3fw7pBjEy7a4=
Subject key identifier: 3F:2C:81:32:34:13:19:D3:B7:AD:9E:77:BE:D8:92:E5:01:D3:DB:E2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A3AE12090930F924D07FC923A1B6C84DF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PyyBMjQTGdO3rZ53vtiS5QHT2-I.roa
Signing time: Fri 31 Oct 2025 15:27:03 +0000
ROA not before: Fri 31 Oct 2025 15:27:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152565
IP address blocks: 151.243.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:e1:20:90:93:0f:92:4d:07:fc:92:3a:1b:6c:84:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 31 15:27:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f2c8132341319d3b7ad9e77bed892e501d3dbe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:03:33:c1:c3:48:98:81:0a:45:72:34:1c:
e9:ea:e2:a9:b5:5e:5d:17:da:f7:e2:d0:37:4a:dd:
b3:5b:71:e1:39:d5:ae:0a:94:2f:2c:a4:1c:77:94:
0d:e2:08:d9:ae:14:26:69:92:18:49:14:f1:6a:bb:
4b:15:3a:0d:9a:9e:a6:d9:d3:25:0b:f7:6b:ba:a8:
0f:80:eb:da:c7:3b:e3:f0:a1:54:69:1d:60:48:fb:
be:5c:b4:28:99:29:a5:2c:6e:2e:d0:a7:48:7f:f2:
b1:2f:24:f9:84:fa:57:4d:4f:b9:ca:29:7e:d2:41:
7d:c9:45:07:c1:f3:d3:59:a9:fc:91:43:5a:12:14:
b9:3a:6b:cf:ef:6e:01:3d:a5:48:4b:41:88:12:ce:
91:6a:47:1a:af:1d:02:72:f8:f6:bd:0c:c1:f5:e0:
79:75:7f:19:4c:0f:9a:6c:ef:ac:78:7b:c5:ee:1c:
cb:a8:03:0d:c0:3a:f9:18:db:ee:a4:36:8d:23:bc:
a1:22:a7:25:2c:c1:a7:08:e4:a3:91:ce:e5:75:57:
60:b2:04:17:47:fc:0a:9e:35:b4:8f:a4:92:ee:a9:
a0:d4:fb:81:90:02:4f:82:c8:00:e6:08:9a:14:7b:
85:78:1a:f7:cd:73:6c:a8:74:9e:79:9e:01:07:e2:
10:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2C:81:32:34:13:19:D3:B7:AD:9E:77:BE:D8:92:E5:01:D3:DB:E2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PyyBMjQTGdO3rZ53vtiS5QHT2-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.146.0/24
Signature Algorithm: sha256WithRSAEncryption
22:d6:10:f6:c2:c1:91:ea:d0:85:1e:35:5c:f8:8d:52:f4:25:
39:6b:35:f1:3f:e1:82:3d:a1:b0:1a:19:95:16:cf:b8:cc:be:
7d:cd:e8:96:59:de:1b:93:a7:d2:0d:cb:16:43:92:dd:b3:d3:
9f:bf:c3:4e:f2:d6:6d:bf:fa:3f:ea:37:dc:96:84:e0:0d:c8:
f2:9d:ac:12:ee:fa:14:f9:bc:fc:ac:f7:8c:6e:51:22:4d:06:
22:92:7d:5a:7f:84:1d:d0:00:8f:f1:2e:d9:f4:17:86:1c:c4:
2f:15:e1:9f:f4:87:7b:9f:3a:a8:bb:2f:1f:fa:c0:ea:76:fe:
95:07:64:1c:0b:03:5d:c9:64:86:f1:7b:8c:4f:4f:ec:66:ff:
41:dc:3d:a7:95:dc:6f:f0:ad:80:9a:91:92:3e:74:ed:b7:08:
5e:d0:a5:b9:5c:e5:f1:fe:d5:93:77:8d:36:33:06:ae:c9:e4:
62:75:88:1d:26:7f:6f:76:5f:b5:2f:9b:0e:58:c5:68:64:7e:
92:2b:12:df:84:7c:36:af:8c:39:ba:a8:a8:14:b8:ea:0e:b0:
06:35:95:fc:63:66:3a:2b:1f:83:22:53:cd:c5:a9:eb:76:05:
90:55:13:d9:11:97:83:0e:54:34:fa:9c:69:73:ec:e8:66:59:
1e:61:00:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:30:55 2025 by rpki-client