Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oW1yHNntOxfR-RrRJpYKZpio8q8.roa
File: oW1yHNntOxfR-RrRJpYKZpio8q8.roa (raw, json)
Hash identifier: JujfXk0WqUSUGUqPPR3J3ZAvdMONNqw5O41U8tcydW4=
Subject key identifier: A1:6D:72:1C:D9:ED:3B:17:D1:F9:1A:D1:26:96:0A:66:98:A8:F2:AF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019869263D5AC443DC26AA6BEBE24D7D66DE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oW1yHNntOxfR-RrRJpYKZpio8q8.roa
Signing time: Sat 02 Aug 2025 04:59:30 +0000
ROA not before: Sat 02 Aug 2025 04:59:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50338
IP address blocks: 151.243.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:69:26:3d:5a:c4:43:dc:26:aa:6b:eb:e2:4d:7d:66:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 2 04:59:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a16d721cd9ed3b17d1f91ad126960a6698a8f2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:e2:c5:ab:94:25:36:59:ff:77:74:44:bf:
4a:69:8d:f1:74:a5:f3:38:3d:30:de:20:dd:62:39:
76:b0:96:e9:42:ab:10:02:3c:89:db:6a:78:fa:7c:
13:92:59:9e:b2:9d:1a:83:9a:15:46:f1:f7:12:1d:
7c:0f:99:46:92:7a:2d:85:2f:b5:e7:ee:81:78:f5:
02:05:b6:87:37:50:0e:75:6b:0b:d6:bc:03:cf:c3:
68:b4:e6:87:8e:e5:09:cb:9d:86:98:9b:70:43:23:
26:08:c0:b8:12:61:cd:b2:09:17:1d:56:56:04:43:
47:96:14:cf:55:a4:0e:23:2c:40:4d:45:fd:62:f3:
1e:8d:dc:9a:fd:f6:94:e0:a3:05:42:e5:4e:0c:d0:
b4:9d:c4:ff:8f:ec:71:94:79:97:a3:1e:77:eb:34:
0b:36:18:9a:2e:0d:36:10:98:50:77:26:06:99:10:
cf:bc:f2:ae:2c:71:e8:95:04:54:3e:a4:e4:3b:95:
49:0f:41:68:c5:23:94:80:2a:7d:6e:24:1b:2b:84:
13:a0:94:a5:ba:3a:7a:ca:c7:d8:5b:39:72:52:36:
09:a5:56:44:a4:1f:ff:c6:2a:0d:49:ab:b1:ef:6e:
3a:37:1e:c6:8c:ef:83:09:28:e8:45:97:99:a2:ed:
f3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6D:72:1C:D9:ED:3B:17:D1:F9:1A:D1:26:96:0A:66:98:A8:F2:AF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oW1yHNntOxfR-RrRJpYKZpio8q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.10.0/24
Signature Algorithm: sha256WithRSAEncryption
95:f7:21:f0:5e:07:5e:d4:a2:84:7f:22:1d:5e:30:a9:d4:a1:
00:0e:95:de:ee:1b:a3:fa:3b:e3:47:71:7e:40:cd:ca:cd:99:
7d:e2:0e:9f:1f:48:d2:63:36:f0:eb:36:91:a3:6e:c0:3d:b0:
f4:c4:df:77:80:83:cf:a7:0b:39:d7:54:62:98:18:ef:f8:cb:
a5:45:f8:15:67:e8:b6:a5:4e:dd:6d:6a:20:f4:57:62:7c:f5:
c9:34:b9:3b:31:94:8b:b3:4b:7a:62:10:fc:52:39:cf:ad:27:
b1:75:86:72:f7:c0:a0:c6:8c:cd:a4:e5:7e:89:c1:fd:83:4f:
63:19:e2:41:fd:ce:ec:20:c4:f9:12:83:06:fd:38:27:4d:7f:
44:df:f4:aa:95:f3:b5:9a:1d:96:ab:9f:21:b7:29:98:21:9a:
f3:31:4c:5a:b8:94:61:ba:95:23:36:b5:1e:43:77:b3:19:d6:
f1:42:32:e3:ad:96:bd:3c:7f:ba:26:6e:42:d1:f6:43:43:b0:
a2:47:80:4b:d0:e1:a6:c3:6d:5a:a3:a9:7e:b7:1d:0a:b8:8c:
25:66:16:f1:0d:8a:c3:46:ee:75:bf:61:26:ef:08:c6:6a:e8:
f9:1f:98:30:6e:54:4d:ae:cb:83:0b:76:b7:d3:66:a9:ea:da:
5e:0f:9b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 20:04:26 2025 by rpki-client