Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hdZvpZmoiSSFYgqLffuh2D2kgSc.roa
File: hdZvpZmoiSSFYgqLffuh2D2kgSc.roa (raw, json)
Hash identifier: czKMb/tnMtvbVH5JnTGCBP+F5QY8a4JvcxDD95PdXu0=
Subject key identifier: 85:D6:6F:A5:99:A8:89:24:85:62:0A:8B:7D:FB:A1:D8:3D:A4:81:27
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198450E5CAA4A4283EBBFC3B4BEE50E17E3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hdZvpZmoiSSFYgqLffuh2D2kgSc.roa
Signing time: Sat 26 Jul 2025 04:47:05 +0000
ROA not before: Sat 26 Jul 2025 04:47:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216059
IP address blocks: 151.243.108.0/23 maxlen: 23
151.244.236.0/23 maxlen: 23
151.244.248.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:0e:5c:aa:4a:42:83:eb:bf:c3:b4:be:e5:0e:17:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 26 04:47:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85d66fa599a8892485620a8b7dfba1d83da48127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:e1:36:31:ed:70:81:21:0a:5c:47:31:b8:
fe:3a:83:b6:b6:4d:40:85:30:71:1f:8a:49:45:9e:
f9:20:18:19:00:84:d0:1e:38:93:df:e7:92:c3:89:
b1:5d:ea:dd:3d:ae:3a:d9:da:34:ff:bb:d0:11:ea:
c0:70:f9:28:db:1e:58:e1:74:ad:bf:b0:5b:50:6c:
d0:57:8b:d6:9b:46:d3:cc:8c:1a:be:27:79:1b:4d:
07:ca:ca:f8:51:3f:74:8e:89:7e:44:fb:86:55:7a:
9d:9b:01:3e:d4:8b:85:d8:19:38:f9:ca:66:fe:30:
8a:66:80:91:3d:42:d6:15:5d:a3:cb:f2:db:e3:11:
dc:60:6f:a8:30:a5:00:bb:9e:0c:22:13:d7:d4:2f:
7c:54:62:60:28:de:8e:3c:88:cc:22:4a:66:47:03:
84:62:66:c5:4f:99:8e:81:a1:55:65:35:37:c3:7f:
ab:b4:18:fd:f7:44:83:dd:66:14:e1:3e:f1:c4:ca:
07:49:da:0c:e3:16:71:c0:4a:db:17:14:45:73:e9:
be:c5:e1:5d:03:3a:5a:9c:17:d4:fa:3b:e4:42:5b:
c9:e8:d1:68:20:bb:21:e6:04:94:e2:62:20:95:4f:
17:7d:9b:67:b6:4e:56:44:d5:08:f0:91:63:2c:0b:
10:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D6:6F:A5:99:A8:89:24:85:62:0A:8B:7D:FB:A1:D8:3D:A4:81:27
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hdZvpZmoiSSFYgqLffuh2D2kgSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.108.0/23
151.244.236.0/23
151.244.248.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:7a:c7:5f:af:e0:de:b9:8e:bc:9c:6d:8b:2f:81:23:42:76:
17:80:38:70:b4:d8:1a:d9:fb:70:58:56:44:6d:e8:f6:de:ae:
e7:ec:98:ac:65:a4:b5:be:21:6d:e8:f8:fc:a0:16:af:2d:22:
66:d6:c3:73:89:cb:8c:26:4b:f4:0d:95:3b:ba:32:a6:10:7b:
77:bc:eb:fe:01:c0:d3:d0:d3:42:4a:70:c0:7e:e0:5f:ac:58:
4c:b2:d8:82:6a:92:db:b8:da:37:39:ca:33:56:0a:53:f0:dd:
ed:2d:80:5d:e5:92:f6:2c:c0:c3:fd:c0:45:a9:4a:86:9d:b3:
4b:47:ce:59:36:a2:e6:7b:51:39:97:92:a4:c4:30:5d:57:52:
92:b9:97:db:3f:93:13:d3:95:4f:c6:4a:70:3d:9a:18:34:84:
de:ff:81:5a:99:db:a5:18:da:a5:f0:f4:32:61:70:30:fd:e7:
5c:8e:ee:9f:8a:48:09:eb:8b:88:c5:cf:6c:aa:9e:18:69:7e:
7b:2c:1f:ad:8b:4f:74:9f:38:ba:39:25:92:8d:7b:8c:19:fd:
98:7e:16:34:da:80:62:48:4e:23:2b:26:34:5e:49:4b:1c:11:
55:a6:e6:f6:97:cc:dd:94:03:d2:33:cd:5f:ef:21:95:d2:53:
a4:24:9c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:33:57 2025 by rpki-client