Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AS6YuF1v4bpFMMVaTmOJ3HGSfZI.roa
File: AS6YuF1v4bpFMMVaTmOJ3HGSfZI.roa (raw, json)
Hash identifier: RjANT6KpifqZBTrF07Aitf4V9WhVLiVgmkb37+J14FI=
Subject key identifier: 01:2E:98:B8:5D:6F:E1:BA:45:30:C5:5A:4E:63:89:DC:71:92:7D:92
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019879A590109E1F7D63C621AAED7D78CABA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AS6YuF1v4bpFMMVaTmOJ3HGSfZI.roa
Signing time: Tue 05 Aug 2025 09:52:30 +0000
ROA not before: Tue 05 Aug 2025 09:52:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208185
IP address blocks: 151.241.9.0/24 maxlen: 24
151.241.13.0/24 maxlen: 24
151.241.20.0/24 maxlen: 24
151.241.29.0/24 maxlen: 24
151.241.76.0/24 maxlen: 24
151.242.13.0/24 maxlen: 24
151.243.245.0/24 maxlen: 24
151.243.246.0/24 maxlen: 24
151.244.220.0/24 maxlen: 24
151.244.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:a5:90:10:9e:1f:7d:63:c6:21:aa:ed:7d:78:ca:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 5 09:52:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=012e98b85d6fe1ba4530c55a4e6389dc71927d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0c:53:62:5b:22:38:62:d6:da:40:7c:80:50:
07:af:bd:4f:33:f9:b8:86:73:7b:70:2e:d5:b4:7a:
cd:63:30:0a:45:64:cc:5f:9c:e0:a9:d6:57:b2:03:
a8:0a:47:49:79:42:e9:0a:60:89:a6:cb:6e:96:20:
3b:28:c0:80:51:18:d5:35:88:85:15:de:3b:6f:b0:
7c:ab:b4:c3:34:72:3a:9d:f7:dd:dc:0c:1c:7a:58:
70:56:85:fc:1f:4f:37:5b:24:61:cb:5c:c5:50:b6:
7e:a8:86:60:8b:c3:76:76:d7:68:8f:e3:a3:f8:31:
c3:a8:76:d1:d5:88:12:ed:b3:6b:3b:2d:dd:43:24:
48:fd:10:90:f4:1e:de:14:b7:35:33:e3:97:f3:6d:
db:cd:d5:bf:19:bf:08:e8:07:ca:15:51:13:eb:00:
14:ef:0c:92:54:e9:3e:62:26:96:64:b2:52:ae:26:
53:8d:a8:c8:b1:f9:a7:4e:56:61:c0:c8:44:8a:98:
91:7d:74:34:6f:42:4c:de:53:0a:66:d3:56:42:1e:
a3:db:43:84:5e:70:22:ff:18:11:1b:6a:c3:48:46:
c6:3e:b9:f0:cf:ff:b0:90:c0:25:8c:f1:67:d9:80:
97:d1:b9:9f:a6:ed:66:a7:04:a1:a3:c0:56:90:03:
ec:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2E:98:B8:5D:6F:E1:BA:45:30:C5:5A:4E:63:89:DC:71:92:7D:92
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AS6YuF1v4bpFMMVaTmOJ3HGSfZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.9.0/24
151.241.13.0/24
151.241.20.0/24
151.241.29.0/24
151.241.76.0/24
151.242.13.0/24
151.243.245.0-151.243.246.255
151.244.220.0/24
151.244.242.0/24
Signature Algorithm: sha256WithRSAEncryption
88:11:6c:49:e7:82:8c:87:6f:0e:61:07:51:85:ca:fb:45:bd:
e0:68:65:ca:4e:45:eb:c0:00:76:20:ad:31:90:2f:48:0a:42:
d9:1b:8b:8b:54:f3:7c:f1:eb:32:e0:94:b1:9f:13:4f:e9:74:
eb:2c:f6:61:60:e9:e0:f4:fb:93:e7:4c:ee:d7:c1:26:ab:48:
f0:5c:16:53:d5:98:54:31:09:04:c8:3c:a3:ee:3f:0e:49:7f:
87:bd:25:ba:ba:6d:ef:98:d3:39:28:8d:b3:cd:06:be:6a:2a:
24:7c:a3:84:d3:d4:9a:ff:2f:3b:15:4c:60:13:a4:54:34:ae:
b9:ae:9a:34:4b:a6:7b:af:b1:f2:89:11:c0:4d:23:3a:10:e1:
cf:95:ca:36:80:cb:c1:c1:75:c7:53:e1:2a:4f:e8:c5:93:25:
d2:6e:50:73:e6:18:74:6a:cd:37:01:5b:6c:94:a1:82:8f:25:
75:72:90:a2:55:06:9f:91:49:60:9a:d5:b1:f7:4f:58:e8:18:
fa:f7:97:ec:fc:17:c8:c2:b7:8e:c3:dd:6f:49:e9:5b:86:f6:
c6:47:db:93:20:de:85:59:84:42:2e:95:cd:3a:0a:df:8a:38:
32:1e:de:f1:e8:c6:d2:cb:2c:8d:8f:5e:1f:ee:9d:24:75:c6:
78:d9:ee:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:45:37 2025 by rpki-client