Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Jn2OG1gP-5rWMcN2hy34984ycC8.roa
File: Jn2OG1gP-5rWMcN2hy34984ycC8.roa (raw, json)
Hash identifier: 0irI0GNGmaYxy0N1c7b97KfZbiQS/QPYfm666hXUdPM=
Subject key identifier: 26:7D:8E:1B:58:0F:FB:9A:D6:31:C3:76:87:2D:F8:F7:CE:32:70:2F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A3DD9ECFF3E264F39B06EBBC8A4F52165
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Jn2OG1gP-5rWMcN2hy34984ycC8.roa
Signing time: Sat 01 Nov 2025 05:18:03 +0000
ROA not before: Sat 01 Nov 2025 05:18:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 37.202.202.0/24 maxlen: 24
151.240.1.0/24 maxlen: 24
151.240.9.0/24 maxlen: 24
151.240.17.0/24 maxlen: 24
151.240.24.0/24 maxlen: 24
151.241.1.0/24 maxlen: 24
151.241.8.0/24 maxlen: 24
151.241.68.0/24 maxlen: 24
151.241.92.0/24 maxlen: 24
151.242.67.0/24 maxlen: 24
151.242.103.0/24 maxlen: 24
151.242.117.0/24 maxlen: 24
151.243.6.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.243.160.0/22 maxlen: 22
151.244.78.0/24 maxlen: 24
151.244.192.0/24 maxlen: 24
151.244.203.0/24 maxlen: 24
151.245.54.0/24 maxlen: 24
151.245.238.0/24 maxlen: 24
151.246.177.0/24 maxlen: 24
151.246.190.0/24 maxlen: 24
151.247.168.0/24 maxlen: 24
151.247.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3d:d9:ec:ff:3e:26:4f:39:b0:6e:bb:c8:a4:f5:21:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 1 05:18:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=267d8e1b580ffb9ad631c376872df8f7ce32702f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:8d:4b:af:79:0f:e7:a3:3b:0e:47:77:7e:
56:08:20:d6:35:26:55:90:a2:ca:94:21:3f:40:35:
81:15:c6:31:05:07:59:3c:de:fd:27:36:96:75:93:
67:c8:2f:da:9c:62:25:01:19:4e:8d:2d:9f:93:40:
34:88:b2:39:f7:b9:f2:af:df:4a:d0:d6:e4:51:21:
bd:37:69:30:66:22:10:11:33:9d:6e:7d:36:2c:b3:
ce:dd:4e:76:f5:26:9c:4d:78:bf:cc:0b:24:65:96:
d6:b5:d8:be:fb:04:94:29:13:ed:45:35:ff:b5:d4:
27:38:79:aa:bb:f1:ac:93:69:16:26:f0:d6:f6:88:
63:76:27:6f:a0:31:76:72:40:a4:fd:cb:0e:09:1e:
16:2c:22:8b:b3:d0:58:2e:23:1a:2c:64:d7:de:db:
65:39:ff:eb:f6:94:fa:9b:ab:b9:e1:d8:21:a7:b3:
da:9e:af:bd:03:ed:30:9f:44:da:c7:b6:cf:2c:30:
ac:de:29:72:9e:9f:50:fc:cd:e0:09:db:d5:60:0c:
44:cb:fb:a8:10:e1:82:a9:58:1d:58:20:6d:21:f0:
b4:9b:84:74:5f:94:11:29:0e:e9:57:b5:23:bd:5b:
29:4b:9b:f0:76:28:c0:04:33:19:c3:97:5e:b2:55:
46:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7D:8E:1B:58:0F:FB:9A:D6:31:C3:76:87:2D:F8:F7:CE:32:70:2F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Jn2OG1gP-5rWMcN2hy34984ycC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.202.0/24
151.240.1.0/24
151.240.9.0/24
151.240.17.0/24
151.240.24.0/24
151.241.1.0/24
151.241.8.0/24
151.241.68.0/24
151.241.92.0/24
151.242.67.0/24
151.242.103.0/24
151.242.117.0/24
151.243.6.0/24
151.243.120.0/24
151.243.160.0/22
151.244.78.0/24
151.244.192.0/24
151.244.203.0/24
151.245.54.0/24
151.245.238.0/24
151.246.177.0/24
151.246.190.0/24
151.247.168.0/24
151.247.217.0/24
Signature Algorithm: sha256WithRSAEncryption
56:d0:06:60:3f:c1:6d:50:11:17:b7:bd:79:2c:6d:d3:af:6b:
47:1d:ae:b4:fa:e2:79:5a:60:3c:a4:dd:39:0a:92:c1:e6:3b:
5a:cf:fe:18:fe:da:75:72:1e:fb:7c:28:7d:e0:87:7f:27:bb:
13:d5:34:62:70:23:ab:34:4f:49:c8:47:a5:12:20:28:fb:ef:
26:63:f6:12:d5:fc:55:ee:ac:23:a8:58:f9:7a:72:8a:cf:81:
ee:23:d0:cc:2b:f7:8f:4d:eb:2d:13:90:09:a7:47:f5:21:92:
8d:c6:22:40:be:0b:0c:ac:6a:13:b0:f0:7a:03:e6:02:43:44:
51:b2:9a:ee:3c:df:01:25:89:57:1a:bb:2e:b1:72:08:35:c5:
32:30:fe:b0:ea:19:3d:b3:c1:6e:df:81:0e:da:42:f9:f9:b9:
f8:df:dc:a8:a4:75:9c:91:47:2b:18:7a:df:c9:5c:cc:de:03:
5f:ff:bb:d9:61:e3:8e:6f:af:65:6a:85:87:f5:dd:e1:fb:ad:
5b:e4:a7:4d:dc:52:a3:d4:5f:fe:fb:00:73:a6:db:d2:c4:e7:
67:45:e2:98:b9:45:76:90:d8:92:86:01:d6:4c:04:1a:87:7e:
78:f6:48:c5:ed:2d:8c:0c:cc:68:e9:7a:e5:b5:c1:b7:e0:ad:
16:44:c1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:47:34 2025 by rpki-client