Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/I5ftpqNgMPYiD7hhompmdDLTzok.roa
File: I5ftpqNgMPYiD7hhompmdDLTzok.roa (raw, json)
Hash identifier: 8TmsLk1aFm6DssxwkLVaHJ9ImZPvq54jRSaqCeZ0+Js=
Subject key identifier: 23:97:ED:A6:A3:60:30:F6:22:0F:B8:61:A2:6A:66:74:32:D3:CE:89
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A3F2F6D2C7C3D00DD4BDB6A42165CD272
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/I5ftpqNgMPYiD7hhompmdDLTzok.roa
Signing time: Sat 01 Nov 2025 11:31:04 +0000
ROA not before: Sat 01 Nov 2025 11:31:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 151.241.27.0/24 maxlen: 24
151.242.200.0/23 maxlen: 24
151.242.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3f:2f:6d:2c:7c:3d:00:dd:4b:db:6a:42:16:5c:d2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 1 11:31:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2397eda6a36030f6220fb861a26a667432d3ce89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1c:85:82:be:3d:20:57:1f:1e:fd:ee:7e:4e:
5f:47:82:80:33:bc:2e:e7:b3:27:ff:56:72:09:d1:
8c:57:10:3f:1f:e0:da:19:f6:06:62:29:9a:2a:d0:
84:53:ea:1b:0e:86:d9:99:a7:4c:76:9d:6e:5e:31:
b5:59:76:db:22:49:f2:6e:77:fc:e9:fb:2f:f7:33:
13:15:cb:18:33:17:32:92:96:a6:ec:60:f5:be:fc:
1e:75:83:df:95:46:d8:25:39:b2:1b:bd:77:91:fd:
78:45:66:ff:c8:63:d5:85:8f:6b:20:65:09:c3:e0:
91:95:99:6d:c0:38:33:ae:2a:4f:6b:84:71:da:92:
68:c1:22:e1:1d:39:69:ed:42:2c:97:a8:4e:1c:4b:
92:ce:2a:2f:ef:e4:c2:9a:3e:cf:86:dd:95:9e:cf:
2f:70:52:f3:80:12:19:2e:67:42:f2:5e:4f:80:a4:
90:b4:8d:1c:09:a7:76:db:df:c4:40:46:ef:07:90:
11:78:5c:22:a0:c9:ba:67:07:61:51:60:1c:69:84:
95:a9:5d:fd:af:69:11:bb:63:0b:a8:5c:1e:b7:9f:
ea:25:4f:0b:37:aa:28:24:57:df:24:e9:ac:6c:a4:
45:3a:cf:75:74:d5:3f:c4:4a:95:90:3e:81:59:80:
ec:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:97:ED:A6:A3:60:30:F6:22:0F:B8:61:A2:6A:66:74:32:D3:CE:89
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/I5ftpqNgMPYiD7hhompmdDLTzok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.27.0/24
151.242.200.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:04:13:7f:02:2e:c6:d1:32:f8:a4:e3:9e:8d:6e:ac:70:de:
c0:0d:01:23:18:11:b6:13:26:6e:1f:b5:65:44:a5:7a:88:a0:
8d:5d:78:84:03:bf:44:30:84:e8:f6:e4:a3:b4:f8:28:24:c1:
13:2e:d7:2a:fe:12:28:ab:a7:42:f0:ca:a3:c4:b9:3e:66:7f:
52:f4:92:67:d7:59:ba:6f:73:56:53:ac:f7:0d:0f:1b:0d:78:
c9:e1:21:d6:b7:7b:fa:d5:e9:b4:66:15:4a:41:88:d0:42:17:
0f:a0:35:8f:d9:b2:e4:8d:11:27:d2:46:3d:5d:67:23:a1:e4:
80:17:2d:6e:40:0f:d4:9d:f1:32:b5:8c:f0:ae:78:22:ce:2e:
b0:99:d5:28:e4:4f:d6:97:03:d9:48:f1:01:41:eb:d4:28:b5:
32:95:c7:39:64:9e:87:05:e6:41:65:29:ac:92:03:65:6d:f4:
1a:6d:3e:b6:9c:2f:ee:7a:2d:06:c5:87:63:86:f6:39:70:c9:
6c:e1:31:67:57:bc:56:fe:45:d6:94:25:51:c0:3c:8f:3c:8e:
3a:ce:b7:8b:a8:a5:16:5d:e7:fc:9a:0b:0a:d6:db:fa:9c:fb:
2c:f9:7a:e3:56:ec:af:29:ce:97:da:78:87:de:3a:62:49:78:
69:12:9e:fe
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZo/L20sfD0A3UvbakIWXNJyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUxMTAxMTEzMTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzk3ZWRhNmEzNjAzMGY2MjIwZmI4NjFhMjZhNjY3NDMyZDNjZTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ByFgr49IFcfHv3ufk5fR4KAM7wu
57Mn/1ZyCdGMVxA/H+DaGfYGYimaKtCEU+obDobZmadMdp1uXjG1WXbbIknybnf8
6fsv9zMTFcsYMxcykpam7GD1vvwedYPflUbYJTmyG713kf14RWb/yGPVhY9rIGUJ
w+CRlZltwDgzripPa4Rx2pJowSLhHTlp7UIsl6hOHEuSziov7+TCmj7Pht2Vns8v
cFLzgBIZLmdC8l5PgKSQtI0cCad229/EQEbvB5AReFwioMm6ZwdhUWAcaYSVqV39
r2kRu2MLqFwet5/qJU8LN6ooJFffJOmsbKRFOs91dNU/xEqVkD6BWYDsOwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCOX7aajYDD2Ig+4YaJqZnQy086JMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvSTVmdHBxTmdNUFlpRDdoaG9tcG1kRExUem9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/EbAwQB
l/LIMA0GCSqGSIb3DQEBCwUAA4IBAQB+BBN/Ai7G0TL4pOOejW6scN7ADQEjGBG2
EyZuH7VlRKV6iKCNXXiEA79EMITo9uSjtPgoJMETLtcq/hIoq6dC8MqjxLk+Zn9S
9JJn11m6b3NWU6z3DQ8bDXjJ4SHWt3v61em0ZhVKQYjQQhcPoDWP2bLkjREn0kY9
XWcjoeSAFy1uQA/UnfEytYzwrngizi6wmdUo5E/WlwPZSPEBQevUKLUylcc5ZJ6H
BeZBZSmskgNlbfQabT62nC/uei0GxYdjhvY5cMls4TFnV7xW/kXWlCVRwDyPPI46
zreLqKUWXef8mgsK1tv6nPss+XrjVuyvKc6X2niH3jpiSXhpEp7+
-----END CERTIFICATE-----
Generated at Tue Nov 4 08:01:25 2025 by rpki-client