Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5lfqnFqaXDbvAkjKox8JBWG4w1E.roa
File: 5lfqnFqaXDbvAkjKox8JBWG4w1E.roa (raw, json)
Hash identifier: RlVzFOK2jJQRkEotLEYkYVRafOHVQ5FaXr4fct3mLSQ=
Subject key identifier: E6:57:EA:9C:5A:9A:5C:36:EF:02:48:CA:A3:1F:09:05:61:B8:C3:51
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A2FDA8EA942458239CD3D093D388A14DC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5lfqnFqaXDbvAkjKox8JBWG4w1E.roa
Signing time: Wed 29 Oct 2025 12:04:03 +0000
ROA not before: Wed 29 Oct 2025 12:04:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 151.241.31.0/24 maxlen: 24
151.241.148.0/24 maxlen: 24
151.241.235.0/24 maxlen: 24
151.243.223.0/24 maxlen: 24
151.244.44.0/24 maxlen: 24
151.245.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:da:8e:a9:42:45:82:39:cd:3d:09:3d:38:8a:14:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 29 12:04:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e657ea9c5a9a5c36ef0248caa31f090561b8c351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:24:f5:a5:1b:2d:f2:14:da:32:13:f2:93:23:
75:9b:c1:35:16:cc:71:8e:02:ae:e4:44:62:6b:1e:
ac:10:1c:dc:b6:d5:94:62:62:cf:a9:90:49:c1:8b:
e1:43:14:f3:14:d7:d9:27:b9:4e:b5:d2:32:72:82:
31:04:49:ea:cb:49:2a:4d:a6:f1:5a:09:39:c1:56:
c7:cf:f1:6c:ee:df:d7:10:4f:b4:04:04:af:c6:fe:
4c:31:01:f5:63:c0:4f:1b:f1:f4:a9:f3:6a:9d:e9:
cb:36:f3:43:df:d8:44:10:3e:c4:25:b7:d6:51:e1:
11:72:04:93:82:08:b6:bb:19:80:b7:28:6f:52:6b:
b8:18:a6:1a:90:57:d8:00:ad:bc:a9:4b:fd:80:4f:
ce:89:d1:2f:c0:9e:98:90:7c:6f:8f:75:8c:49:b0:
2f:8f:aa:24:3f:7e:5a:33:92:aa:2a:a3:25:15:0b:
61:2b:61:49:ed:a0:76:b1:71:8a:58:5e:14:3b:d6:
a8:80:1a:55:ad:00:bd:b9:52:71:03:3b:65:26:5f:
8f:c8:83:92:95:3e:8b:bc:c7:b8:99:d3:35:82:fd:
dc:5c:01:a5:8e:b4:0b:cc:b1:9f:59:07:bd:14:08:
f7:3c:ea:6f:46:19:36:1b:2c:3d:c6:72:15:c3:49:
f9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:57:EA:9C:5A:9A:5C:36:EF:02:48:CA:A3:1F:09:05:61:B8:C3:51
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5lfqnFqaXDbvAkjKox8JBWG4w1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.31.0/24
151.241.148.0/24
151.241.235.0/24
151.243.223.0/24
151.244.44.0/24
151.245.165.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:8c:3e:42:63:df:09:d9:56:4d:da:6f:ee:6a:f6:39:c1:38:
19:84:16:2d:5e:8a:b6:0b:8c:01:a3:cd:8d:7f:9e:46:0c:fd:
7d:04:ea:e9:d3:62:9f:85:1f:07:1d:b2:4d:b8:a7:88:1f:c7:
0a:3e:35:31:0e:28:fa:0f:01:14:a1:30:d4:5e:e5:41:61:8b:
00:ea:b6:7a:d7:e3:b4:ce:ac:0a:a0:9b:0a:36:4c:60:2c:70:
05:f2:2f:ee:1b:0e:50:56:b6:29:2c:43:3c:f8:4d:4d:69:78:
44:2e:d2:b2:22:0e:f2:aa:5e:51:26:1e:07:f6:2b:e7:26:68:
22:60:da:2e:8e:14:5a:3d:45:0b:5a:16:21:6f:e1:08:7b:aa:
08:77:49:d9:52:f1:5b:60:eb:a5:03:f0:9a:16:2e:f7:ce:b1:
09:51:05:58:68:cd:be:63:2a:3b:b5:73:37:4e:61:18:8e:35:
77:78:63:0f:7c:51:66:99:1f:d7:4a:cc:db:f2:8d:cd:c5:fa:
66:65:b7:b7:26:a2:a3:6a:e2:e5:e5:d3:da:ca:7a:2a:ac:fe:
ec:5b:39:88:80:9f:95:3e:80:47:71:f1:fa:d7:97:45:9c:0c:
01:84:fe:80:26:10:4c:0b:2f:82:79:2f:10:61:14:b0:20:ec:
10:cd:26:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:46:41 2025 by rpki-client