Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Rfs7yJEeHmm_V_oNaTBuVMs7Uxo.roa
File: Rfs7yJEeHmm_V_oNaTBuVMs7Uxo.roa (raw, json)
Hash identifier: 05bHIcSBWn/qMPKbk1Q1TPLanjYOKsexth2JInR0qFs=
Subject key identifier: 45:FB:3B:C8:91:1E:1E:69:BF:57:FA:0D:69:30:6E:54:CB:3B:53:1A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A4EA19788FD52E9C67601C3201A2C102B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Rfs7yJEeHmm_V_oNaTBuVMs7Uxo.roa
Signing time: Tue 04 Nov 2025 11:30:04 +0000
ROA not before: Tue 04 Nov 2025 11:30:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43641
IP address blocks: 151.245.5.0/24 maxlen: 24
151.245.6.0/24 maxlen: 24
151.245.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:a1:97:88:fd:52:e9:c6:76:01:c3:20:1a:2c:10:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 4 11:30:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45fb3bc8911e1e69bf57fa0d69306e54cb3b531a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ef:ea:3f:fd:0d:00:1b:cd:73:72:85:ce:d4:
94:b5:24:47:90:cb:09:45:9e:fd:eb:82:b1:a9:07:
94:88:6d:ef:87:9d:c2:2f:2d:86:e1:a3:4a:14:81:
d8:a4:18:15:4b:59:4e:24:bc:ee:8b:38:8b:0b:cf:
2c:ad:8b:05:71:8c:d1:a9:cc:7b:a3:45:2b:7e:59:
bf:22:c6:c0:f5:71:59:52:63:93:3a:bb:09:b4:2e:
16:15:da:4c:69:bf:47:24:a5:f6:cc:57:20:3a:c6:
c6:78:25:1c:a9:77:8e:a7:25:b7:fe:46:27:8e:a9:
50:c2:3d:26:66:7c:d9:7e:c3:dc:79:c3:40:e5:ea:
7e:8f:07:43:1d:48:3f:00:c0:51:66:df:b1:e0:b6:
2b:20:39:2e:6b:03:d5:d3:fa:98:dd:10:c1:a4:37:
d4:9e:64:4e:52:58:d9:f6:18:f3:4b:82:76:b5:eb:
8d:5b:a0:95:de:15:31:63:60:a9:bc:ab:ec:19:3d:
5a:fe:c2:51:ac:ee:0d:84:fe:58:f6:24:9e:54:4b:
53:cd:24:0c:45:8f:55:94:96:6b:86:3b:0c:55:de:
71:23:e1:73:89:b0:06:3b:37:f8:d5:de:27:30:6a:
78:d3:b0:8d:de:91:b7:9b:22:a7:6a:05:2a:0b:c0:
5e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FB:3B:C8:91:1E:1E:69:BF:57:FA:0D:69:30:6E:54:CB:3B:53:1A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Rfs7yJEeHmm_V_oNaTBuVMs7Uxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.5.0-151.245.6.255
151.245.96.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:d8:32:f5:8a:83:b5:41:28:d4:cb:0a:80:0a:c2:df:d1:00:
01:9a:23:95:79:c8:c8:23:db:c1:08:73:a5:c7:86:2e:d6:70:
2a:7c:f0:94:8e:e2:e7:d0:3d:0f:be:02:4e:b0:bb:1a:f5:2e:
62:29:b4:53:4f:ef:9f:86:8e:c6:a6:f1:4c:fc:35:6d:63:17:
e8:e1:32:ac:74:e3:2c:21:45:2d:20:44:91:1e:6a:ae:7d:f5:
c6:e5:aa:21:e7:12:1c:5e:28:16:7f:00:3e:b4:e3:bc:72:e9:
fe:67:44:b7:3e:ac:fd:a7:8b:f6:bd:d9:c7:83:02:d2:a4:7a:
68:fd:0a:09:0c:61:02:f8:1e:cd:2d:ce:e6:ff:54:89:2c:7b:
e8:c7:6a:22:f9:a8:dc:42:b0:56:80:d7:44:df:4d:a3:89:07:
d1:dd:37:17:43:78:e8:0a:aa:8b:dc:d5:70:d4:1e:c6:8e:93:
92:a2:d1:42:e3:e6:b1:be:fa:82:6a:4f:1b:40:76:b4:e4:7c:
88:b2:6b:93:ed:c3:c6:bf:fb:67:10:06:b6:cd:b4:4f:31:d1:
3b:94:d4:d3:df:ee:12:e3:09:3d:7b:48:07:14:25:0b:a0:9c:
df:6c:16:58:87:42:20:5b:02:90:72:c4:d7:3a:5c:b0:1b:9c:
4e:88:9d:04
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:49:18 2025 by rpki-client