Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OeWzwJ0auaH2RY4KMOlzOcEtHeM.roa
File: OeWzwJ0auaH2RY4KMOlzOcEtHeM.roa (raw, json)
Hash identifier: yjkivgA3DPLwI0wOePKuBoSnCPPJ2xhIMycXIM2TSWU=
Subject key identifier: 39:E5:B3:C0:9D:1A:B9:A1:F6:45:8E:0A:30:E9:73:39:C1:2D:1D:E3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A3AE12225E60F7A1BF33BBB7916BF8051
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OeWzwJ0auaH2RY4KMOlzOcEtHeM.roa
Signing time: Fri 31 Oct 2025 15:27:04 +0000
ROA not before: Fri 31 Oct 2025 15:27:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215672
IP address blocks: 151.242.10.0/24 maxlen: 24
151.243.22.0/24 maxlen: 24
151.243.25.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:39:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:e1:22:25:e6:0f:7a:1b:f3:3b:bb:79:16:bf:80:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 31 15:27:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39e5b3c09d1ab9a1f6458e0a30e97339c12d1de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e6:fa:ad:aa:6a:93:ea:1e:e1:d9:2c:a3:4a:
c1:ca:a7:b1:ca:fd:1e:78:53:b1:c9:30:14:34:d9:
96:9e:8f:21:ec:b9:4d:c6:bb:e3:5d:ab:65:f8:05:
f7:77:7d:c8:cc:26:15:54:c1:0b:96:49:b3:d6:49:
82:d9:e2:36:3b:ef:2f:56:ea:64:4c:bb:e1:0e:9d:
3b:05:78:53:ae:89:f8:eb:10:0f:99:b6:9d:e7:b0:
ba:3a:03:c5:24:c1:34:cd:5f:8f:56:f9:7a:72:dc:
7c:c0:8a:be:f9:cb:60:47:d7:21:31:49:17:76:ef:
89:eb:f4:2f:9a:3f:ed:c7:55:b0:e4:22:d9:ab:79:
88:bf:0f:56:a3:a5:da:f8:1e:62:fb:70:16:51:a8:
08:a9:cb:33:f2:6d:0b:71:1c:25:f0:70:59:e5:d1:
42:8b:de:bd:75:56:f0:94:11:63:ce:4e:da:0d:8d:
11:10:aa:fa:f2:8c:80:fc:ce:ef:e2:eb:1b:9a:07:
a1:36:6d:eb:9b:95:11:20:6b:6e:9f:bb:89:04:0c:
17:0b:63:80:c1:b5:64:76:57:22:e5:54:af:d8:62:
6b:56:fe:41:82:e1:88:a5:5f:c4:de:65:54:a6:30:
55:cc:af:af:e9:58:d9:0c:2f:c6:de:c3:08:48:b9:
6f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E5:B3:C0:9D:1A:B9:A1:F6:45:8E:0A:30:E9:73:39:C1:2D:1D:E3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OeWzwJ0auaH2RY4KMOlzOcEtHeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.10.0/24
151.243.22.0/24
151.243.25.0/24
151.247.241.0/24
Signature Algorithm: sha256WithRSAEncryption
04:c8:04:3f:30:94:9b:43:86:63:2e:af:d6:77:3e:83:e1:36:
78:91:d5:e1:fa:96:af:22:86:28:14:ad:04:2e:bb:9d:10:ea:
1a:f0:8f:2b:b0:89:d5:6b:63:ad:88:6e:32:b3:9b:76:b1:98:
c2:00:57:c8:84:fd:31:be:52:d8:26:db:26:bf:80:65:0b:b4:
ce:3f:e6:7e:5b:19:66:34:b5:0a:08:cc:c0:eb:55:5a:79:24:
22:42:35:d5:6f:b6:c9:c0:2b:19:d5:c1:6b:c7:77:ea:08:2a:
ce:26:6e:f5:34:f9:47:8d:79:3d:08:99:34:ce:0b:89:75:f8:
d1:eb:45:e4:42:52:8c:cd:81:41:53:d7:19:06:bd:2d:51:50:
ec:3c:46:fd:bc:fb:43:b0:2e:a1:8e:57:dc:7a:e0:cd:b9:6b:
26:d2:f7:55:ce:6a:8f:4a:d7:16:8b:c2:33:15:3e:fe:ea:db:
8c:d1:3b:cf:e3:03:54:90:a1:63:10:3d:5f:0a:66:1d:cb:f2:
5f:e4:8e:11:61:bf:cf:40:6c:7f:69:e9:53:9b:12:59:ed:fd:
9d:c7:93:dd:c2:06:2d:c0:b8:d8:53:4f:83:2c:ea:52:bb:fe:
20:2a:98:e6:e9:c1:0b:61:40:81:7e:79:f1:c4:08:e2:de:c9:
d7:10:37:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:21:16 2025 by rpki-client