Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9iotjB6uxDJQ4HxvHqaJMc-9wCs.roa
File: 9iotjB6uxDJQ4HxvHqaJMc-9wCs.roa (raw, json)
Hash identifier: vdkf79iqWGwEON9J+4RuETBvtxy7yMbNhH1YQw4t4mk=
Subject key identifier: F6:2A:2D:8C:1E:AE:C4:32:50:E0:7C:6F:1E:A6:89:31:CF:BD:C0:2B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01985992334E2F6C74D10B3F60DA19CADDF1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9iotjB6uxDJQ4HxvHqaJMc-9wCs.roa
Signing time: Wed 30 Jul 2025 04:23:30 +0000
ROA not before: Wed 30 Jul 2025 04:23:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206378
IP address blocks: 151.240.230.0/24 maxlen: 24
151.243.36.0/24 maxlen: 24
151.243.47.0/24 maxlen: 24
151.243.207.0/24 maxlen: 24
151.243.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:92:33:4e:2f:6c:74:d1:0b:3f:60:da:19:ca:dd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 30 04:23:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f62a2d8c1eaec43250e07c6f1ea68931cfbdc02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:75:18:f5:ef:d7:4b:d6:ab:cd:b5:27:0a:39:
74:a4:fc:ec:00:14:e4:bb:cf:61:d0:d2:eb:e5:94:
56:0d:9f:49:55:13:21:d5:ee:63:fe:1a:fb:89:0c:
df:2b:cc:af:86:3e:72:fc:c6:6d:ca:14:74:e3:f2:
84:a5:1d:5b:8c:dc:6e:a8:27:e2:45:89:16:0c:4b:
a4:de:4c:bb:e7:3e:59:5b:89:95:69:8b:12:fc:de:
c2:9f:39:d9:73:91:4a:a6:df:27:66:4f:27:30:b0:
40:b3:a3:c4:21:17:e7:ff:c4:c0:f0:e8:b7:24:89:
df:9e:68:23:f3:53:5c:4d:f2:de:06:e5:40:c4:74:
db:1f:39:1a:ee:4a:e9:be:67:a7:38:6b:00:b3:0b:
2e:c1:f1:08:0c:f2:a7:c9:57:87:c9:00:9c:fe:45:
48:7f:43:03:4b:4c:1a:1d:90:71:a3:d2:c0:1c:6d:
7a:c7:58:cf:89:0b:96:99:21:ca:76:a1:07:c8:7b:
a7:9f:e4:25:04:b5:96:a3:3c:41:f0:78:6c:5c:f3:
97:0d:7c:ef:46:c3:25:9f:98:b7:36:d4:d7:5e:5e:
fb:63:87:0e:ff:db:3e:0a:1d:7c:2a:ba:6f:d1:1e:
d6:2e:58:38:5a:76:37:4b:c5:7c:4e:c8:ca:63:ad:
ea:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2A:2D:8C:1E:AE:C4:32:50:E0:7C:6F:1E:A6:89:31:CF:BD:C0:2B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9iotjB6uxDJQ4HxvHqaJMc-9wCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.230.0/24
151.243.36.0/24
151.243.47.0/24
151.243.207.0/24
151.243.217.0/24
Signature Algorithm: sha256WithRSAEncryption
32:24:30:57:65:8b:d1:a6:c1:ef:29:86:54:4c:d7:bb:2f:3a:
cd:b4:22:dd:7e:e5:24:b2:e8:20:af:b7:43:b0:ac:3b:9a:fb:
eb:73:83:e7:d0:b1:e1:a9:5f:bc:20:7b:c1:df:9b:7b:db:41:
06:8b:6d:29:31:0f:f0:80:25:10:41:8d:a9:f8:ae:10:c4:65:
4d:d5:82:bc:4c:61:a3:81:3c:25:bb:70:86:ff:b4:ad:c8:2f:
0c:83:70:3c:3d:3b:b7:30:19:ed:5b:d7:72:19:f3:5d:4a:3e:
e8:ec:84:b6:57:81:95:fb:3d:f7:34:e2:38:4e:9c:e7:51:a0:
9a:c5:86:43:8e:b6:7d:b2:ad:78:b9:f4:9e:69:24:1d:af:5b:
a2:8d:81:16:75:24:bd:20:07:41:98:2f:64:33:44:d8:d8:7f:
8f:ee:73:58:b5:92:58:ae:ab:ef:c4:26:20:75:f0:8c:7f:28:
5f:7d:32:f5:33:d7:6e:bf:11:ff:1b:9e:d1:86:49:14:09:06:
1c:9e:8d:5e:93:7e:f8:ef:8b:42:a3:a1:5f:c7:01:94:48:13:
a5:f4:7b:f1:bc:79:e4:55:16:53:0e:29:04:2c:c4:a1:5b:f3:
10:8c:41:4b:40:b7:4d:42:c4:68:43:c0:a7:c6:d3:81:21:21:
33:07:59:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:29:51 2025 by rpki-client