Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hLq3sIvbgXOXFxe4QOgIfBQRBxk.roa
File: hLq3sIvbgXOXFxe4QOgIfBQRBxk.roa (raw, json)
Hash identifier: 8dh/bSi2Hy6nsPkO93i95NAClZ8Cq0FxzjsUr8QzUec=
Subject key identifier: 84:BA:B7:B0:8B:DB:81:73:97:17:17:B8:40:E8:08:7C:14:11:07:19
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A3AE12035A2D0BD143B3E54EF67C166E3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hLq3sIvbgXOXFxe4QOgIfBQRBxk.roa
Signing time: Fri 31 Oct 2025 15:27:03 +0000
ROA not before: Fri 31 Oct 2025 15:27:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63199
IP address blocks: 151.241.136.0/24 maxlen: 24
151.247.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:e1:20:35:a2:d0:bd:14:3b:3e:54:ef:67:c1:66:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 31 15:27:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84bab7b08bdb8173971717b840e8087c14110719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:57:8e:37:ed:e1:79:7b:6c:c4:96:02:bd:49:
97:0c:c5:2b:a5:6b:da:66:58:22:ae:b4:ba:ea:fc:
e8:07:a7:8e:af:cb:62:dc:a1:e5:68:0e:a5:87:59:
50:46:3f:6d:58:01:af:e6:fd:60:a2:10:14:4c:07:
45:df:e3:c7:36:46:84:f0:a3:25:95:fb:59:3b:62:
2c:e8:7c:24:e5:91:ce:a2:af:99:b5:41:93:ef:cf:
38:c6:03:76:b3:8d:bd:15:94:a4:dc:66:bb:f7:29:
9a:ec:a8:a0:1b:ae:4e:41:f6:9f:b8:bc:e2:86:b5:
98:d2:67:f8:d0:ee:9a:b2:da:39:9c:cc:88:97:e9:
a7:7f:7a:08:9a:0d:18:ac:85:86:49:e6:cd:91:7b:
11:2b:2b:5e:42:19:10:33:60:7b:50:24:b7:5d:7d:
07:af:67:a8:62:01:b2:5d:3e:07:0a:6d:f9:9a:c3:
13:11:78:63:95:53:49:f0:07:15:a0:5c:66:f7:30:
03:87:df:0c:24:9a:bc:db:b7:df:ca:76:68:63:c6:
c1:46:5a:0f:39:d2:e0:33:04:f3:16:61:0e:46:8d:
53:f1:60:30:98:22:1e:38:0e:7b:f7:d8:ee:d9:2a:
7f:80:07:49:a9:b0:36:00:1c:4d:95:19:91:f7:58:
93:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BA:B7:B0:8B:DB:81:73:97:17:17:B8:40:E8:08:7C:14:11:07:19
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hLq3sIvbgXOXFxe4QOgIfBQRBxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.136.0/24
151.247.139.0/24
Signature Algorithm: sha256WithRSAEncryption
59:07:c1:02:f1:3b:6e:32:4c:ed:e3:0a:94:fe:fd:28:96:a2:
fe:fd:f9:88:78:95:4a:44:8b:0a:27:5e:13:50:67:d8:01:63:
56:5e:c3:b7:46:c4:95:81:00:08:50:4f:62:c4:d0:5f:07:25:
85:1c:86:8c:12:74:a5:64:c2:58:5a:6f:c4:ab:00:51:6d:52:
b9:6e:92:18:f6:de:8d:3c:67:bd:d7:bd:fe:ed:83:13:c4:f3:
6c:0a:e1:27:78:b3:d8:60:51:e4:cf:15:be:ad:70:1d:b3:07:
0c:77:7f:60:12:cc:6a:7c:10:c1:30:f5:ed:57:09:1a:9e:d8:
76:6d:51:be:6c:d6:6d:94:ce:4e:4b:77:18:b5:c8:a6:94:79:
25:50:70:3c:2c:f3:94:cf:00:7d:36:bd:97:a0:76:bc:d1:92:
95:7e:ee:d9:cd:5d:6f:7a:bb:37:c5:ef:ef:6f:f0:e2:b0:34:
82:7d:92:bc:bb:1f:43:38:5a:80:84:8c:c8:92:e8:35:4d:02:
6f:db:82:75:cb:5f:ed:7b:29:8e:22:39:75:54:a2:44:dc:84:
d6:c1:f9:a4:d4:e6:bd:ce:84:1d:39:7c:fc:bf:4d:77:89:ea:
f5:7b:14:4a:4d:fc:9f:ae:3f:f6:69:c6:08:42:8e:36:38:f0:
34:2c:44:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:38:14 2025 by rpki-client