Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CvIk5iBuJGxgOBgVn9XOVenqMyQ.roa
File: CvIk5iBuJGxgOBgVn9XOVenqMyQ.roa (raw, json)
Hash identifier: tb+BNOlv3yM3sLUraXEx7IU84k88oBBQfrfyS73XrIU=
Subject key identifier: 0A:F2:24:E6:20:6E:24:6C:60:38:18:15:9F:D5:CE:55:E9:EA:33:24
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198693EF34E0A5B19BEA3FA2AAAF02C3709
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CvIk5iBuJGxgOBgVn9XOVenqMyQ.roa
Signing time: Sat 02 Aug 2025 05:26:29 +0000
ROA not before: Sat 02 Aug 2025 05:26:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9232
IP address blocks: 37.202.213.0/24 maxlen: 24
37.202.221.0/24 maxlen: 24
151.242.18.0/24 maxlen: 24
151.242.68.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.244.8.0/24 maxlen: 24
151.244.12.0/24 maxlen: 24
151.244.24.0/24 maxlen: 24
151.244.30.0/24 maxlen: 24
151.244.40.0/24 maxlen: 24
151.244.65.0/24 maxlen: 24
151.244.73.0/24 maxlen: 24
151.244.86.0/24 maxlen: 24
151.244.93.0/24 maxlen: 24
151.244.110.0/24 maxlen: 24
151.244.114.0/24 maxlen: 24
151.245.0.0/24 maxlen: 24
151.245.32.0/24 maxlen: 24
151.245.72.0/24 maxlen: 24
151.245.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:69:3e:f3:4e:0a:5b:19:be:a3:fa:2a:aa:f0:2c:37:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 2 05:26:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0af224e6206e246c603818159fd5ce55e9ea3324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:95:49:d8:cf:03:0c:3c:a0:ad:fc:2c:56:06:
b4:48:11:d4:23:f7:0b:f8:33:09:17:d3:50:ec:87:
8a:02:34:6e:1b:4b:e3:fc:0b:67:4d:98:ac:d7:81:
40:90:0c:65:67:03:49:f8:09:17:f3:cf:98:c0:b6:
bc:c3:c3:19:19:3a:d5:ff:95:9f:55:9a:ea:87:d8:
9e:54:f4:6f:34:01:c3:39:18:cc:d6:a6:0a:b7:f3:
7c:aa:c9:49:c1:bc:10:32:af:5b:15:46:a9:2e:7c:
b4:e0:21:6f:c1:d4:8f:45:88:d5:57:ba:48:43:60:
f5:c6:98:4b:fc:46:d2:b0:ef:3e:fa:97:75:f4:3e:
ee:40:55:9b:55:9e:f9:16:0d:f3:f1:e4:bb:e2:32:
bc:d6:c8:b6:0d:78:e8:52:92:49:11:ff:36:dd:45:
52:19:b3:75:21:d8:cd:4e:77:38:87:fc:72:cf:5b:
cf:6d:f1:77:73:cb:af:28:da:3c:22:b6:e1:52:36:
ae:e1:b2:15:d8:9d:76:b1:a0:90:2d:11:9a:30:d0:
e0:9a:a6:b8:cb:f4:b4:a3:91:f4:31:69:ee:99:55:
7c:c8:91:c0:ac:24:0b:b4:d4:7b:f8:f7:86:78:d6:
da:ba:6a:93:f3:6e:1c:53:27:bf:ca:6c:77:d2:74:
e1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F2:24:E6:20:6E:24:6C:60:38:18:15:9F:D5:CE:55:E9:EA:33:24
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CvIk5iBuJGxgOBgVn9XOVenqMyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.213.0/24
37.202.221.0/24
151.242.18.0/24
151.242.68.0/24
151.242.70.0/23
151.244.8.0/24
151.244.12.0/24
151.244.24.0/24
151.244.30.0/24
151.244.40.0/24
151.244.65.0/24
151.244.73.0/24
151.244.86.0/24
151.244.93.0/24
151.244.110.0/24
151.244.114.0/24
151.245.0.0/24
151.245.32.0/24
151.245.72.0/24
151.245.92.0/24
Signature Algorithm: sha256WithRSAEncryption
26:2d:2a:59:69:1c:95:14:fa:fd:62:19:5a:34:81:45:37:85:
f2:1b:6c:38:d0:fa:e0:63:b0:97:fe:c3:14:ca:bd:e7:9c:ba:
f7:5d:f5:eb:61:1f:39:d8:38:9b:de:ce:48:ec:5a:64:c7:7a:
8c:2c:41:29:10:f0:bd:b8:08:47:02:45:19:34:19:6c:99:d6:
ad:d3:75:b8:e2:35:2e:7a:70:33:f8:0a:57:f4:32:57:4b:37:
24:0c:b2:7d:da:43:84:18:d9:ed:96:9d:f0:ba:ef:9e:bb:cd:
b7:15:99:72:b9:d6:e6:b4:92:bd:d1:f2:cc:30:e5:6f:a3:29:
f9:d9:0c:30:7e:b7:db:ca:8b:43:74:fa:35:51:70:85:0c:ff:
58:85:c0:e0:40:ba:8d:ef:b5:a3:68:3d:d2:39:74:eb:88:6d:
77:d6:ad:08:c0:3a:07:0a:ab:71:48:b8:d4:a8:1c:31:f0:9c:
34:67:70:d7:7d:aa:86:69:bc:7b:0d:10:60:7a:24:16:8b:81:
3f:51:17:ca:10:c2:c5:80:24:c2:91:0f:94:18:13:f2:81:e4:
33:85:0b:78:39:8b:3b:5f:c1:96:3d:47:9e:03:a2:da:ee:fa:
77:4a:c2:8c:dd:cc:46:dc:e9:aa:77:16:9c:b4:b5:13:4a:d7:
b9:15:0b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:28:15 2025 by rpki-client