Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Ey6NFTqxN8HewprTeJCF8OdlzmA.roa
File: Ey6NFTqxN8HewprTeJCF8OdlzmA.roa (raw, json)
Hash identifier: M10mBf6BlP8NDJCVdSAwiveVwfQr/yOY8KWBEmM5UIU=
Subject key identifier: 13:2E:8D:15:3A:B1:37:C1:DE:C2:9A:D3:78:90:85:F0:E7:65:CE:60
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A4948DDC36F5FFE71C471D0CF0EAA9BCF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Ey6NFTqxN8HewprTeJCF8OdlzmA.roa
Signing time: Mon 03 Nov 2025 10:35:03 +0000
ROA not before: Mon 03 Nov 2025 10:35:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 151.240.205.0/24 maxlen: 24
151.241.119.0/24 maxlen: 24
151.241.122.0/24 maxlen: 24
151.241.123.0/24 maxlen: 24
151.241.125.0/24 maxlen: 24
151.243.227.0/24 maxlen: 24
151.243.235.0/24 maxlen: 24
151.243.241.0/24 maxlen: 24
151.245.120.0/23 maxlen: 24
151.245.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:49:48:dd:c3:6f:5f:fe:71:c4:71:d0:cf:0e:aa:9b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 3 10:35:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=132e8d153ab137c1dec29ad3789085f0e765ce60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:52:82:eb:51:90:ce:c8:fe:24:13:4b:7d:be:
d1:53:71:d4:9a:fa:fd:2c:0a:e9:51:25:47:07:c9:
69:c3:e0:df:e1:2c:5f:fa:cb:e8:85:fa:9a:6c:e3:
cc:d0:fc:73:8c:7b:4d:40:04:62:af:a9:77:32:8d:
49:6d:45:e2:9a:d4:a3:ff:c2:f6:65:22:92:8a:6c:
96:2e:cc:57:bb:e3:e9:f7:3a:0d:c7:e9:89:88:05:
74:9f:dc:7d:e5:21:0e:95:c7:08:ac:a0:5f:12:61:
4f:7c:ab:e6:fe:f3:07:32:09:3d:0f:cc:b1:42:c2:
35:c2:d3:08:32:eb:06:e8:a9:16:60:d4:5d:cb:d7:
ec:69:10:d4:0a:41:f0:6f:bd:e9:ec:c6:4a:62:28:
65:e2:6a:cd:45:0e:41:b1:75:e1:4d:d9:8f:6d:43:
1d:f3:39:9b:ba:60:d1:40:2b:9f:50:09:a2:e1:ab:
09:62:39:24:f3:62:a8:94:fd:fe:d9:b7:40:9f:97:
f2:37:a4:84:58:7d:31:92:45:71:c7:d8:45:4b:24:
bf:73:23:51:72:b1:b4:e7:63:eb:62:ee:42:07:47:
2b:68:f8:dd:32:63:32:92:85:76:89:89:ee:54:5c:
1c:11:04:7f:22:5a:a7:07:5a:6b:3c:f0:04:5c:8f:
8d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2E:8D:15:3A:B1:37:C1:DE:C2:9A:D3:78:90:85:F0:E7:65:CE:60
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Ey6NFTqxN8HewprTeJCF8OdlzmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.205.0/24
151.241.119.0/24
151.241.122.0/23
151.241.125.0/24
151.243.227.0/24
151.243.235.0/24
151.243.241.0/24
151.245.120.0/23
151.245.124.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:36:fb:c6:9f:0b:4a:a2:35:3a:ab:49:3c:40:bd:7f:44:33:
6d:9f:78:e4:4a:72:29:9e:2f:3c:ee:05:3a:51:32:1a:c8:4d:
3b:7a:a6:11:97:bc:09:50:f1:76:bf:4c:ba:d2:13:4a:51:63:
b3:af:8b:1e:e7:61:12:f8:72:ed:55:dc:b8:3d:60:f7:db:75:
84:8c:95:ff:28:62:41:95:41:33:2b:d6:ce:b5:db:55:c2:2a:
64:14:53:15:aa:53:37:63:d0:33:fa:1a:6f:19:51:f4:54:10:
8a:54:47:69:6a:c5:9e:69:f1:73:43:6a:0c:88:57:0a:1f:39:
67:5d:f8:64:49:6e:34:52:aa:25:81:e0:42:ce:c8:ba:46:76:
de:63:14:7c:43:5f:56:4d:21:c5:5d:fd:d3:b3:1e:63:b8:81:
d3:7f:9f:5f:bf:08:99:5a:f4:9a:0c:d2:76:1a:2b:01:8a:bf:
9e:df:7d:f5:e4:ce:62:b9:f5:6e:a5:1c:c9:9f:29:9c:4d:55:
2d:73:e9:e2:f0:95:44:1c:94:19:ec:e5:26:ac:4c:01:74:4b:
20:fa:fc:5a:ec:41:6d:f6:63:43:94:d7:7b:91:36:75:ab:60:
6e:81:06:9e:9a:a6:9e:c3:13:5e:f1:36:8e:a2:4b:ef:c7:d4:
40:40:fb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:46:52 2025 by rpki-client