Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0XkD6P5YJX-yRQX6SQdNJi7c-bI.roa
File: 0XkD6P5YJX-yRQX6SQdNJi7c-bI.roa (raw, json)
Hash identifier: +lGkj+M44b+qU0WxlQeW8YpgD+g1Hrmm5vsnjCBY92k=
Subject key identifier: D1:79:03:E8:FE:58:25:7F:B2:45:05:FA:49:07:4D:26:2E:DC:F9:B2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A2414A75AC1A42F6EEFBCD043811BF57C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0XkD6P5YJX-yRQX6SQdNJi7c-bI.roa
Signing time: Mon 27 Oct 2025 05:12:04 +0000
ROA not before: Mon 27 Oct 2025 05:12:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214987
IP address blocks: 151.241.103.0/24 maxlen: 24
151.242.16.0/24 maxlen: 24
151.243.142.0/24 maxlen: 24
151.243.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 19:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:14:a7:5a:c1:a4:2f:6e:ef:bc:d0:43:81:1b:f5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 27 05:12:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d17903e8fe58257fb24505fa49074d262edcf9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:69:b8:5e:d8:30:f3:c8:2f:f1:e8:7b:8e:88:
ad:5c:e9:8e:45:48:f7:f6:1b:60:61:a1:62:a6:97:
82:6c:95:3d:d4:94:34:10:9c:8c:43:78:00:88:3f:
95:b9:87:bb:20:66:24:d9:f4:d0:09:36:99:83:e9:
61:d4:2a:29:18:bd:36:9c:43:f3:03:7a:b5:72:60:
95:97:8c:4d:ad:c5:0a:c9:02:df:4f:4b:6f:1a:42:
3a:7a:42:72:bb:c6:34:d5:41:44:83:ad:37:1e:2d:
bd:94:04:42:d9:2a:8e:01:b3:25:68:c5:8f:98:81:
08:4f:5e:9d:53:7e:61:7b:b5:39:d8:70:ae:5e:15:
0e:fd:8b:c9:8d:cd:f1:52:e9:49:82:ef:b4:e3:59:
7b:9b:77:a1:f7:5f:cd:4a:d7:54:3b:1e:dd:32:03:
b0:73:11:07:34:76:af:e6:d3:e0:f9:d1:c4:82:6a:
78:49:56:bc:f4:08:f8:7f:eb:99:5b:f4:c1:10:86:
3c:d6:08:7a:d5:f0:a6:c0:55:21:09:04:0d:1e:ab:
8c:24:de:c2:80:e6:60:2c:c1:5d:5d:f9:18:db:a4:
0a:fd:1d:25:f8:34:d8:87:bc:a8:3a:24:9c:cb:11:
fc:42:0c:2e:02:18:52:29:3f:15:18:92:ec:5c:dc:
59:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:79:03:E8:FE:58:25:7F:B2:45:05:FA:49:07:4D:26:2E:DC:F9:B2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0XkD6P5YJX-yRQX6SQdNJi7c-bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.103.0/24
151.242.16.0/24
151.243.142.0/24
151.243.226.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:64:dd:0d:34:f1:8a:aa:1f:84:31:98:8e:3c:ca:a3:50:e6:
6d:f1:2f:13:5c:ae:7c:78:77:5f:82:04:7b:11:18:36:b5:e9:
15:9b:0b:bb:9c:05:f7:03:43:3d:f6:01:18:3a:f9:f5:9b:0d:
4d:83:bf:33:58:8e:fb:85:3a:f3:68:ad:67:23:d3:69:f5:5b:
19:a0:93:fa:63:4c:11:17:0d:dd:81:17:ba:db:a0:1d:2e:a8:
a0:07:f6:bc:da:2e:cd:13:c2:16:7a:5c:70:9e:10:66:89:78:
77:8f:b0:93:4e:86:d4:21:00:16:31:83:4d:f2:e5:cf:c6:b8:
b1:47:15:66:00:81:7f:cf:20:54:4e:32:7c:b8:44:90:bf:74:
34:3c:c0:a0:26:e7:c8:00:6b:04:ff:d9:25:a1:d0:72:ad:7f:
d9:c8:ea:0b:92:86:08:a1:6a:a2:f7:3c:70:8b:3c:46:7f:f1:
00:de:f4:f5:4f:e8:8d:00:b7:6f:97:ae:fd:98:c0:fd:90:fe:
b4:b2:1f:ca:45:5c:c2:ee:65:79:4b:53:e0:ea:5f:b7:7b:49:
c6:1a:65:6b:4f:30:e5:f9:53:19:82:a6:e4:b6:0b:e2:b4:bd:
05:13:bb:9f:f2:37:6f:b0:ae:14:0c:fb:ad:75:c3:66:da:76:
4c:b2:2c:a0
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZokFKdawaQvbu+80EOBG/V8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUxMDI3MDUxMjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTc5MDNlOGZlNTgyNTdmYjI0NTA1ZmE0OTA3NGQyNjJlZGNmOWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGm4Xtgw88gv8eh7joitXOmORUj3
9htgYaFippeCbJU91JQ0EJyMQ3gAiD+VuYe7IGYk2fTQCTaZg+lh1CopGL02nEPz
A3q1cmCVl4xNrcUKyQLfT0tvGkI6ekJyu8Y01UFEg603Hi29lARC2SqOAbMlaMWP
mIEIT16dU35he7U52HCuXhUO/YvJjc3xUulJgu+041l7m3eh91/NStdUOx7dMgOw
cxEHNHav5tPg+dHEgmp4SVa89Aj4f+uZW/TBEIY81gh61fCmwFUhCQQNHquMJN7C
gOZgLMFdXfkY26QK/R0l+DTYh7yoOiScyxH8QgwuAhhSKT8VGJLsXNxZPwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFNF5A+j+WCV/skUF+kkHTSYu3PmyMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvMFhrRDZQNVlKWC15UlFYNlNRZE5KaTdjLWJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/FnAwQA
l/IQAwQAl/OOAwQAl/PiMA0GCSqGSIb3DQEBCwUAA4IBAQCNZN0NNPGKqh+EMZiO
PMqjUOZt8S8TXK58eHdfggR7ERg2tekVmwu7nAX3A0M99gEYOvn1mw1Ng78zWI77
hTrzaK1nI9Np9VsZoJP6Y0wRFw3dgRe626AdLqigB/a82i7NE8IWelxwnhBmiXh3
j7CTTobUIQAWMYNN8uXPxrixRxVmAIF/zyBUTjJ8uESQv3Q0PMCgJufIAGsE/9kl
odByrX/ZyOoLkoYIoWqi9zxwizxGf/EA3vT1T+iNALdvl679mMD9kP60sh/KRVzC
7mV5S1Pg6l+3e0nGGmVrTzDl+VMZgqbktgvitL0FE7uf8jdvsK4UDPutdcNm2nZM
siyg
-----END CERTIFICATE-----
Generated at Thu Nov 6 02:42:32 2025 by rpki-client