Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RMmCKOCAUKn4Arrv0bacyoUcVis.roa
File: RMmCKOCAUKn4Arrv0bacyoUcVis.roa (raw, json)
Hash identifier: jDusvDcX3JjhCWsFQd6WJfCk5ZhyioYGQUo2VaI3sfs=
Subject key identifier: 44:C9:82:28:E0:80:50:A9:F8:02:BA:EF:D1:B6:9C:CA:85:1C:56:2B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198665038CE56591711E24BF5BD21F7D95E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RMmCKOCAUKn4Arrv0bacyoUcVis.roa
Signing time: Fri 01 Aug 2025 15:46:30 +0000
ROA not before: Fri 01 Aug 2025 15:46:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9381
IP address blocks: 151.242.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:39:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:66:50:38:ce:56:59:17:11:e2:4b:f5:bd:21:f7:d9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 1 15:46:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44c98228e08050a9f802baefd1b69cca851c562b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e3:d7:93:6d:a0:9b:30:76:d7:32:c4:0f:70:
e1:ae:38:c6:ba:37:ec:a2:bc:51:78:5c:f3:da:82:
16:e7:ce:1d:76:f1:10:31:76:2d:e5:d5:43:ba:2c:
53:60:48:58:d6:55:b6:cd:7d:93:b9:1f:fe:30:7c:
77:c9:96:75:59:73:b5:00:fd:ea:5a:3c:43:78:e4:
eb:e3:1b:f3:b1:4d:97:3c:f3:82:e3:7a:05:bb:b0:
a0:94:87:74:af:74:57:f0:51:90:4e:66:15:5a:8a:
b3:43:bf:1f:8c:f5:2d:73:f2:a6:76:71:97:f6:04:
aa:cc:45:f0:19:00:af:46:4c:4f:fc:54:92:94:1b:
97:13:22:19:84:a8:58:62:5e:89:83:ba:2b:0a:32:
0e:53:73:04:9d:f8:d1:bc:fc:7d:8d:a8:bf:75:6a:
7e:d7:b4:ac:9a:7f:19:97:9e:f9:5b:2f:c3:a7:3d:
57:4a:b3:ea:a2:76:24:93:4a:ce:1a:0a:0d:a3:06:
be:ce:eb:cc:a2:70:b3:b7:dc:53:b2:4a:f9:0c:f2:
9d:82:d0:ec:40:41:0c:07:ff:56:43:4e:7b:49:3a:
db:24:2d:a2:1b:56:67:05:ef:94:d4:97:55:34:eb:
4f:63:75:20:e8:e1:ff:fb:9c:c4:9e:97:0a:04:f8:
e3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C9:82:28:E0:80:50:A9:F8:02:BA:EF:D1:B6:9C:CA:85:1C:56:2B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RMmCKOCAUKn4Arrv0bacyoUcVis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.180.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:f7:2c:0c:4b:b4:72:c6:4a:69:1a:35:23:8f:bd:ce:97:d8:
0c:0b:44:16:22:b1:90:eb:7c:34:c7:18:33:7b:76:c1:0b:47:
d1:ed:ef:2b:be:11:ff:4c:10:a2:e8:ee:dd:23:31:d9:68:52:
a2:f8:ca:3d:18:98:2c:3b:35:5d:e9:fa:88:41:94:55:6e:6f:
2c:d7:e0:08:69:04:e7:dd:06:76:d6:cf:92:6c:2c:dc:22:e1:
d1:f0:78:75:fc:f0:cd:13:3c:48:af:c5:c2:e1:c5:b2:b3:f3:
1a:fc:6a:5e:ff:ec:1f:af:61:c3:19:90:6b:cc:e6:0d:eb:0b:
61:e8:c1:83:50:7c:50:01:c0:00:2a:bc:6b:5e:63:db:e0:68:
1f:7b:25:2c:c3:bb:bb:69:42:db:42:92:4b:8f:39:50:99:30:
35:ff:d1:6a:4e:eb:75:fb:52:3d:c1:20:d6:ad:14:ba:73:55:
69:22:48:cb:e6:7b:f4:c6:47:a5:e7:8b:34:25:c1:98:d1:c2:
7e:a2:9b:f0:72:d2:23:20:80:20:92:76:c6:73:9d:8c:04:c8:
fb:3f:a8:4a:83:69:14:05:57:12:fe:a0:02:f8:3d:d6:77:ea:
d2:1c:51:68:8a:8f:0d:96:21:45:95:84:16:de:14:c5:d7:7f:
44:ea:9f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:14:21 2025 by rpki-client