Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/abg561LKSAHTWIXxAvWwXFZocok.roa
File: abg561LKSAHTWIXxAvWwXFZocok.roa (raw, json)
Hash identifier: EPv+pFYcA51ES1jojcy9+GBr8RLNXNINsFRnyy+3zrg=
Subject key identifier: 69:B8:39:EB:52:CA:48:01:D3:58:85:F1:02:F5:B0:5C:56:68:72:89
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01987A26A700F8FD47FD358C705FE5DFFDF1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/abg561LKSAHTWIXxAvWwXFZocok.roa
Signing time: Tue 05 Aug 2025 12:13:30 +0000
ROA not before: Tue 05 Aug 2025 12:13:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208191
IP address blocks: 151.241.66.0/24 maxlen: 24
151.243.236.0/24 maxlen: 24
151.244.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:26:a7:00:f8:fd:47:fd:35:8c:70:5f:e5:df:fd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 5 12:13:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69b839eb52ca4801d35885f102f5b05c56687289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4a:c8:4b:63:55:e3:75:4c:9c:a6:e0:be:1a:
6b:75:d5:a9:d8:ad:af:92:b2:27:1c:17:50:98:29:
6b:25:52:58:3e:ae:7f:72:1f:a7:dd:e6:a0:4f:b5:
62:0a:e8:eb:45:5e:10:73:cf:1c:b1:dc:47:13:53:
f8:0a:0a:1f:c8:30:08:bc:0d:62:13:b7:7d:47:5b:
79:43:ee:87:e3:c5:fb:98:79:ea:3d:2b:c2:be:4e:
e8:8d:12:9f:1c:ea:20:87:cc:51:44:ae:ae:db:06:
7f:27:01:05:33:87:ea:15:d4:13:10:aa:4c:99:42:
c0:11:8d:4e:21:1d:5e:ba:35:d7:50:07:5e:2a:2a:
0f:6e:98:75:67:28:12:43:8f:30:ad:be:87:23:ae:
71:e1:ba:0a:db:25:1f:29:a2:10:ff:41:1c:1b:da:
aa:9e:27:fa:01:4c:17:68:51:d2:39:2d:b6:0e:55:
86:0a:a4:2b:e8:d4:ee:62:f1:dc:e9:56:6d:42:b2:
9a:ef:25:1f:89:97:5c:35:9a:48:cf:13:86:f2:11:
5d:64:c9:a2:31:b5:4a:2a:59:31:4f:60:1d:d7:b3:
e5:3a:e0:45:73:1a:f9:44:fa:74:df:ce:c3:eb:ea:
68:7a:69:bd:3d:8a:05:83:2f:60:91:3e:ee:6d:55:
dd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B8:39:EB:52:CA:48:01:D3:58:85:F1:02:F5:B0:5C:56:68:72:89
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/abg561LKSAHTWIXxAvWwXFZocok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.66.0/24
151.243.236.0/24
151.244.252.0/24
Signature Algorithm: sha256WithRSAEncryption
06:32:13:ee:d8:ef:6a:7e:81:4c:9c:bd:0f:d6:45:30:3e:e1:
7c:b7:3b:ca:eb:7a:bc:c8:87:7a:0b:33:b5:8e:5d:73:fc:e6:
8d:c9:75:be:7d:1f:de:ac:da:14:03:18:95:46:ef:39:47:46:
aa:75:e3:c5:7c:92:53:6a:f3:d0:48:69:0f:51:be:52:5f:40:
47:fe:d7:2b:ad:eb:62:42:53:11:14:2e:0b:4d:15:1e:c8:5c:
0f:45:b2:fa:a7:48:5e:e1:eb:c9:f0:d7:64:97:03:7f:dc:65:
f3:44:96:9e:c5:24:8a:1f:75:5e:01:f2:d1:5e:31:19:8b:54:
9b:e6:56:da:44:39:5b:56:15:ec:dc:5f:83:a5:b2:74:24:95:
34:06:42:71:59:e8:bc:a8:cf:4b:6d:14:c3:f5:b5:9c:c8:49:
99:0e:b2:68:5a:25:8b:32:9d:75:52:d8:79:07:90:f1:3e:e3:
21:e7:32:62:c4:38:e3:4b:29:50:0c:f2:44:eb:9d:1a:5a:04:
db:4e:b8:14:a3:80:dd:5a:c1:45:b8:c4:72:85:88:fc:34:be:
75:58:72:96:f6:dd:82:d3:6e:38:17:06:40:ab:cc:11:c0:b5:
fb:25:34:8d:aa:60:a4:d5:15:d3:00:af:9e:4b:74:d7:21:84:
2d:d8:29:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:33:39 2025 by rpki-client