Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aP_vmuH4SgZ-6ErJkkgDaYZk-z4.roa
File: aP_vmuH4SgZ-6ErJkkgDaYZk-z4.roa (raw, json)
Hash identifier: 0XM43r6QgeYbT0kRHcGrhJYU+LjA8COB/t3TmmJ5rGc=
Subject key identifier: 68:FF:EF:9A:E1:F8:4A:06:7E:E8:4A:C9:92:48:03:69:86:64:FB:3E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A4E500688540C022D531B18DD5261BED0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aP_vmuH4SgZ-6ErJkkgDaYZk-z4.roa
Signing time: Tue 04 Nov 2025 10:00:58 +0000
ROA not before: Tue 04 Nov 2025 10:00:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42689
IP address blocks: 151.247.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:50:06:88:54:0c:02:2d:53:1b:18:dd:52:61:be:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 4 10:00:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68ffef9ae1f84a067ee84ac9924803698664fb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:46:66:f1:08:f2:65:c8:5c:a7:9e:c7:37:2e:
cf:b9:3c:55:af:8f:05:af:78:73:21:83:80:4b:41:
d6:37:4f:9f:e3:f4:08:a2:bb:22:63:ee:b1:96:d4:
95:db:d5:91:88:d9:d8:98:ba:dd:ab:e9:e9:7a:ad:
01:22:30:48:52:ad:85:fc:ab:a0:ad:6c:79:db:85:
7a:59:7c:ff:a7:5a:7b:90:e9:f0:3d:11:aa:57:96:
3e:93:97:59:cb:ff:c0:a6:8b:9f:cc:f7:f5:b7:d7:
70:e5:82:e8:2d:8e:5b:3d:49:68:9b:91:9f:bc:de:
65:df:5d:76:ec:c6:9c:63:3b:df:f9:a3:1f:cd:fd:
25:42:a6:78:0b:0d:4c:68:b5:00:27:ca:0a:a9:ea:
f4:74:ac:45:76:01:66:b4:7d:c1:af:d2:4b:d2:eb:
14:66:2a:1c:6b:44:4b:a5:1b:be:7c:f9:fc:f4:23:
b2:84:1f:f3:73:07:2f:22:06:e7:fb:a2:ba:4b:e7:
3e:d9:32:49:f4:91:d4:1b:74:b5:a1:95:9e:2f:30:
e9:c9:bf:2a:76:6d:65:74:55:5c:d7:e2:fc:43:5d:
24:22:a9:af:33:cc:fa:2a:1e:75:7b:51:6e:5a:66:
b8:d7:5c:5b:4b:ba:c3:cb:64:bc:e7:1b:5e:ec:48:
1f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FF:EF:9A:E1:F8:4A:06:7E:E8:4A:C9:92:48:03:69:86:64:FB:3E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aP_vmuH4SgZ-6ErJkkgDaYZk-z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.212.0/24
Signature Algorithm: sha256WithRSAEncryption
31:6e:ba:db:48:9a:fc:76:94:51:64:7f:e2:08:47:00:8c:60:
2e:1a:04:b4:af:53:22:26:5a:59:00:4b:73:b1:be:1b:03:45:
a4:08:01:db:c8:47:81:b7:75:36:ff:4a:30:df:47:b8:f7:f9:
74:cf:f7:13:00:24:f2:ca:66:e5:71:b7:ad:0d:da:59:98:85:
89:b7:05:8b:63:42:46:22:e1:e5:83:a2:46:87:80:6b:f9:b8:
8e:e4:98:cc:3f:f9:9a:7b:35:b9:0f:48:c9:37:d8:95:65:a1:
59:83:aa:73:34:00:1d:bd:99:ee:a3:19:d7:8f:6b:1a:42:91:
81:15:ec:b8:91:8c:56:fd:37:b6:3c:c1:2f:3c:eb:10:ce:88:
02:f9:28:cc:db:e5:04:15:b1:e4:87:b7:76:02:8a:df:23:9a:
27:19:47:15:c1:ae:4a:0f:9c:2d:d7:5a:8f:b3:d8:0f:be:1e:
34:17:b4:e6:b0:d6:a2:30:d4:5c:46:25:11:d5:2d:04:73:7b:
49:82:33:8f:19:70:33:ad:ed:b9:a2:11:86:e8:d7:65:4f:d7:
5a:1c:e5:f8:72:ab:4c:cc:96:f2:a6:bd:60:da:c4:b7:5b:2b:
3f:4b:c4:34:20:10:2e:62:47:68:d2:fd:5c:43:e7:63:3f:8d:
16:e9:4e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:37:04 2025 by rpki-client