Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/z-K8RhcUjxg068FXfmv55Q_ziAA.roa
File: z-K8RhcUjxg068FXfmv55Q_ziAA.roa (raw, json)
Hash identifier: X3fuMctnb4q8IJ8yoMaxaa0vW95dquynKW6r0uTGTro=
Subject key identifier: CF:E2:BC:46:17:14:8F:18:34:EB:C1:57:7E:6B:F9:E5:0F:F3:88:00
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01984076D22663D9F0FFF85DF42625E128F6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/z-K8RhcUjxg068FXfmv55Q_ziAA.roa
Signing time: Fri 25 Jul 2025 07:23:05 +0000
ROA not before: Fri 25 Jul 2025 07:23:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48266
IP address blocks: 151.242.125.0/24 maxlen: 24
151.242.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:76:d2:26:63:d9:f0:ff:f8:5d:f4:26:25:e1:28:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 25 07:23:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfe2bc4617148f1834ebc1577e6bf9e50ff38800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d8:5f:f6:53:8b:09:be:5f:05:ef:65:00:15:
a6:82:cf:33:cd:40:28:33:51:8e:a4:b0:50:40:6b:
ad:f9:55:93:68:1e:88:e0:de:e6:fa:d7:32:51:e4:
2b:20:81:65:13:93:3c:c1:7c:a2:a8:66:cb:da:4b:
ac:5a:54:ef:7e:d5:7d:27:98:e7:57:ed:8a:c6:68:
81:86:ca:0f:21:fd:4b:db:7f:50:dd:49:96:fc:95:
08:41:5f:9f:b5:4d:57:cb:38:68:09:cb:bc:3b:8d:
3f:e6:1e:55:0d:39:39:31:10:a2:6e:bb:05:76:90:
e3:b8:5c:7c:92:a9:f1:36:7f:1c:b1:bb:4c:f9:b3:
1b:39:4d:8e:4b:b9:8a:8e:3a:7e:c6:b4:a1:8d:3c:
7b:b4:a1:b7:d9:d8:50:85:2d:12:a6:ad:ad:2a:b6:
f9:58:b6:35:ff:b6:28:25:d6:f7:e2:4e:4f:27:3c:
9c:db:64:ba:43:1b:29:43:00:73:99:99:31:e1:87:
cc:a4:6d:7b:68:a0:b3:32:61:20:57:16:26:be:c8:
b9:4e:e2:9c:77:75:88:65:a6:bd:fb:f7:b0:30:ac:
32:48:94:dd:cd:c4:f2:5c:f1:7a:9a:53:00:20:3c:
46:11:84:51:bb:b1:e8:d8:f3:b3:07:6a:46:fd:bb:
ed:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E2:BC:46:17:14:8F:18:34:EB:C1:57:7E:6B:F9:E5:0F:F3:88:00
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/z-K8RhcUjxg068FXfmv55Q_ziAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.125.0/24
151.242.137.0/24
Signature Algorithm: sha256WithRSAEncryption
06:d5:09:05:88:99:51:91:1d:cc:c6:27:58:f0:00:24:b4:7c:
33:42:ed:cd:ee:fd:f2:dd:47:7e:a3:3f:13:87:65:67:10:35:
e6:f5:19:60:d8:ae:0f:f0:e7:ca:f7:75:d0:27:f1:4b:41:33:
b5:b8:e6:0d:bf:a9:ed:b8:ca:f1:66:ce:a7:2a:05:1a:20:99:
ed:46:c1:6a:4f:7f:c2:14:eb:8e:4d:81:99:c6:01:86:a8:c1:
d3:97:4a:e1:de:8c:ea:0e:57:a9:2b:6a:22:8e:28:28:92:88:
18:89:9b:ba:91:83:46:37:f6:7d:d3:1e:13:52:09:dd:c6:35:
70:79:ba:18:a1:4d:4b:8d:a5:33:bb:99:79:d2:e3:31:77:8a:
f4:15:bb:26:ad:f5:46:fb:fa:69:a5:55:b1:01:32:71:83:bb:
40:26:75:7e:6d:cf:2a:aa:33:1e:3e:77:9c:6d:cd:5b:31:c7:
0d:48:f9:5b:bf:22:f1:54:0e:af:a7:3b:0e:03:4c:83:ec:22:
c6:f4:08:c5:83:13:fc:d0:aa:31:f9:65:b7:30:f7:4a:7e:e6:
23:bf:ff:2f:9b:d5:10:31:bd:bb:8b:e8:b0:ab:35:49:4c:c6:
87:af:c5:98:99:88:da:b8:fd:56:92:02:85:37:7d:e8:a9:06:
2c:09:44:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:48:55 2025 by rpki-client