Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kdT41hGsom_x_qGT1JchPg5bXm8.roa
File: kdT41hGsom_x_qGT1JchPg5bXm8.roa (raw, json)
Hash identifier: wcWN/XJlZQhNL7hM537UBt4fTbOpKgedIjbLR8L9Cdk=
Subject key identifier: 91:D4:F8:D6:11:AC:A2:6F:F1:FE:A1:93:D4:97:21:3E:0E:5B:5E:6F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A3DCE07A6B6D544234FB74BCB5D4965C1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kdT41hGsom_x_qGT1JchPg5bXm8.roa
Signing time: Sat 01 Nov 2025 05:05:03 +0000
ROA not before: Sat 01 Nov 2025 05:05:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46475
IP address blocks: 151.243.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3d:ce:07:a6:b6:d5:44:23:4f:b7:4b:cb:5d:49:65:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 1 05:05:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91d4f8d611aca26ff1fea193d497213e0e5b5e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e3:69:c0:3d:01:30:19:ea:45:4b:ef:fb:ca:
2e:20:41:13:b8:ca:00:fc:ec:b0:70:75:33:43:18:
e0:92:8a:f5:cf:34:07:c1:fe:bb:91:90:bf:10:24:
a9:c4:e5:95:1e:51:d2:ee:b3:15:e1:3a:96:77:81:
49:1c:a4:94:29:47:1a:37:c2:8c:2b:74:9f:eb:1b:
6a:01:ad:85:b3:22:95:4b:36:a7:fc:29:62:f7:72:
48:51:ea:79:17:22:d8:79:96:95:b1:0a:86:66:20:
4b:cc:7e:69:0d:78:75:09:35:5b:a5:34:53:6f:51:
20:4f:ca:b3:b9:0b:1c:fa:9d:0f:6d:4f:28:0d:9e:
c9:70:54:6e:dc:5a:69:1c:7a:1c:b9:c0:aa:7b:ad:
8a:65:96:3a:9b:ac:62:e3:16:11:86:9b:19:2f:34:
11:f0:23:45:9f:8c:33:fb:12:6b:14:10:56:d7:64:
ea:62:63:97:33:8e:59:f1:cc:a9:fa:7a:fc:6b:b7:
59:9a:44:cb:66:8f:62:c9:cc:ef:81:04:e5:d9:9e:
31:fb:7c:3f:ba:e7:53:c8:af:23:cc:d4:c1:1f:da:
a6:60:ad:93:b4:a8:85:2e:c1:06:d1:a1:71:e7:93:
01:94:29:6f:3c:c3:93:dd:f7:56:f4:d1:13:8d:38:
a0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D4:F8:D6:11:AC:A2:6F:F1:FE:A1:93:D4:97:21:3E:0E:5B:5E:6F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kdT41hGsom_x_qGT1JchPg5bXm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.116.0/24
Signature Algorithm: sha256WithRSAEncryption
38:a3:77:aa:7b:22:d9:84:f4:00:87:d2:07:c2:75:44:5f:fa:
3c:7d:15:79:9e:f9:86:99:d0:d8:62:1c:5b:7e:8d:60:4d:2a:
73:4d:36:6d:90:04:3e:f7:df:87:87:a4:9a:58:e7:c7:71:c5:
9c:4e:8a:b1:1d:b7:0f:7b:4b:58:86:6e:d5:c2:ee:e8:25:79:
b3:b5:3a:4a:a5:c8:42:04:2e:61:57:e7:df:2d:4c:10:ac:c7:
0a:d4:a7:e4:34:14:c6:95:b5:3e:c6:2f:27:5a:dc:6f:ef:7d:
90:e0:3b:43:76:b0:0a:c9:33:fe:1f:f0:8d:00:10:30:b2:f9:
87:81:04:ff:ed:ce:6a:3d:5a:f2:d0:d7:c3:36:fa:c5:ab:45:
c7:cc:b0:6a:5e:c4:e2:a1:6b:88:35:ff:2b:f1:53:97:c0:08:
58:73:f8:87:81:4a:4c:8e:5d:a7:00:72:af:09:b1:48:6c:cd:
74:6b:cf:31:5e:6f:0e:68:1b:c8:b5:92:0d:e5:8c:ff:1a:b6:
87:88:40:68:f0:91:87:30:54:e1:e8:1f:ce:f9:15:d6:b7:9c:
a7:96:b2:8e:10:0a:e2:ed:78:ea:f3:dd:23:b4:68:75:d6:dc:
3f:00:ac:09:19:7c:2e:46:59:15:29:f0:d6:3b:dd:5e:a5:0d:
da:3f:e7:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZo9zgemttVEI0+3S8tdSWXBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUxMTAxMDUwNTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWQ0ZjhkNjExYWNhMjZmZjFmZWExOTNkNDk3MjEzZTBlNWI1ZTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+NpwD0BMBnqRUvv+8ouIEETuMoA
/OywcHUzQxjgkor1zzQHwf67kZC/ECSpxOWVHlHS7rMV4TqWd4FJHKSUKUcaN8KM
K3Sf6xtqAa2FsyKVSzan/Cli93JIUep5FyLYeZaVsQqGZiBLzH5pDXh1CTVbpTRT
b1EgT8qzuQsc+p0PbU8oDZ7JcFRu3FppHHocucCqe62KZZY6m6xi4xYRhpsZLzQR
8CNFn4wz+xJrFBBW12TqYmOXM45Z8cyp+nr8a7dZmkTLZo9iyczvgQTl2Z4x+3w/
uudTyK8jzNTBH9qmYK2TtKiFLsEG0aFx55MBlClvPMOT3fdW9NETjTigeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJHU+NYRrKJv8f6hk9SXIT4OW15vMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEva2RUNDFoR3NvbV94X3FHVDFKY2hQZzViWG04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/N0MA0G
CSqGSIb3DQEBCwUAA4IBAQA4o3eqeyLZhPQAh9IHwnVEX/o8fRV5nvmGmdDYYhxb
fo1gTSpzTTZtkAQ+99+Hh6SaWOfHccWcToqxHbcPe0tYhm7Vwu7oJXmztTpKpchC
BC5hV+ffLUwQrMcK1KfkNBTGlbU+xi8nWtxv732Q4DtDdrAKyTP+H/CNABAwsvmH
gQT/7c5qPVry0NfDNvrFq0XHzLBqXsTioWuINf8r8VOXwAhYc/iHgUpMjl2nAHKv
CbFIbM10a88xXm8OaBvItZIN5Yz/GraHiEBo8JGHMFTh6B/O+RXWt5ynlrKOEAri
7Xjq890jtGh11tw/AKwJGXwuRlkVKfDWO91epQ3aP+cX
-----END CERTIFICATE-----
Generated at Tue Nov 4 08:01:09 2025 by rpki-client