Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bJfXztpJmWm_z9J-qX4JTWeBBkk.roa
File: bJfXztpJmWm_z9J-qX4JTWeBBkk.roa (raw, json)
Hash identifier: oqsHzuoSI5nLeQgSuxAZqlZdWkvJcU4V4+ALv4WMelk=
Subject key identifier: 6C:97:D7:CE:DA:49:99:69:BF:CF:D2:7E:A9:7E:09:4D:67:81:06:49
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A1EE177EA00D9D7050D658F97C750FCCA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bJfXztpJmWm_z9J-qX4JTWeBBkk.roa
Signing time: Sun 26 Oct 2025 04:58:04 +0000
ROA not before: Sun 26 Oct 2025 04:58:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203446
IP address blocks: 151.247.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:e1:77:ea:00:d9:d7:05:0d:65:8f:97:c7:50:fc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 26 04:58:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c97d7ceda499969bfcfd27ea97e094d67810649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fe:2e:13:99:e2:d6:3c:d7:cd:85:44:3f:85:
b2:fa:e2:4a:91:85:03:27:3d:68:d5:90:16:de:23:
4a:2f:cc:4e:3c:2e:2d:6b:86:35:40:5e:f0:e7:be:
5b:d5:3a:26:3d:10:43:59:a7:57:cd:86:3b:68:0d:
d9:23:50:4d:0f:df:03:c7:1a:b8:77:30:de:26:e7:
9a:68:aa:08:c5:28:5b:65:b1:c8:a8:98:7e:51:53:
6b:73:21:cc:6c:80:6e:5c:7a:16:9d:cb:c1:32:e7:
a6:32:ed:9d:5d:84:f5:bf:1c:75:29:d1:c1:d0:4c:
a9:07:14:a2:d6:49:40:f8:e0:63:54:1b:ce:45:a4:
5f:19:0f:8f:92:79:e4:a2:ea:43:c0:64:a3:73:29:
0c:b6:2f:24:a0:97:b5:39:eb:92:f7:0f:c7:dd:86:
15:3f:f8:38:ab:53:cc:55:16:f0:61:ea:5c:cb:8b:
df:f8:08:3d:3d:06:9f:ee:78:83:6e:d1:2d:b3:c8:
c0:66:db:ed:ee:f3:17:e4:13:3e:48:cf:a4:8c:99:
fb:fb:eb:30:df:9c:38:a7:91:47:b9:b8:0c:a3:d9:
d0:7b:25:64:20:2b:c7:3c:b9:c2:80:2f:9e:11:be:
0c:bc:eb:00:b4:2a:5f:99:d7:18:c1:0a:e3:f5:b8:
90:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:97:D7:CE:DA:49:99:69:BF:CF:D2:7E:A9:7E:09:4D:67:81:06:49
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bJfXztpJmWm_z9J-qX4JTWeBBkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.207.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:47:b8:79:e0:8a:2e:12:71:5d:c8:fe:45:f6:b4:c6:68:02:
35:31:76:04:de:0a:34:84:42:76:86:dc:4f:e1:8a:c0:27:d9:
22:95:be:e5:2f:a0:ca:c5:bb:f7:0a:a1:5e:52:73:74:a3:17:
f3:86:a7:ff:d7:ac:74:db:61:43:f7:71:2b:35:ed:81:92:9a:
93:0a:d8:d4:63:2b:15:90:b1:01:36:f8:66:6e:d7:45:ce:bf:
d8:8d:83:b1:ff:e3:a4:d5:5c:bb:4f:26:23:1d:93:15:60:ac:
ce:2d:02:0a:4b:2d:35:01:07:12:dc:9b:e7:aa:43:c9:41:01:
74:bd:d3:d4:2c:82:43:2d:55:ec:21:8a:d7:af:cc:e7:0e:33:
ee:6f:e7:4f:b0:53:2d:96:50:c7:10:91:cf:9e:a0:b3:1c:be:
72:44:4e:24:63:54:4a:b2:40:f2:1d:cd:0b:ac:be:bf:bb:45:
82:47:15:86:ed:57:f0:5e:96:76:7c:88:3d:29:50:f5:bb:9d:
1b:b6:f1:7d:41:9c:76:ba:84:aa:1c:a9:e0:74:4a:95:39:ca:
16:21:25:17:c0:ee:4e:70:09:56:e9:1c:d9:51:da:db:9d:2f:
ee:5d:35:6c:3d:e8:ab:d4:ad:f0:f8:2a:9d:9c:95:bc:25:c9:
35:87:a0:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZoe4XfqANnXBQ1lj5fHUPzKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUxMDI2MDQ1ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Yzk3ZDdjZWRhNDk5OTY5YmZjZmQyN2VhOTdlMDk0ZDY3ODEwNjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf4uE5ni1jzXzYVEP4Wy+uJKkYUD
Jz1o1ZAW3iNKL8xOPC4ta4Y1QF7w575b1TomPRBDWadXzYY7aA3ZI1BND98Dxxq4
dzDeJueaaKoIxShbZbHIqJh+UVNrcyHMbIBuXHoWncvBMuemMu2dXYT1vxx1KdHB
0EypBxSi1klA+OBjVBvORaRfGQ+PknnkoupDwGSjcykMti8koJe1OeuS9w/H3YYV
P/g4q1PMVRbwYepcy4vf+Ag9PQaf7niDbtEts8jAZtvt7vMX5BM+SM+kjJn7++sw
35w4p5FHubgMo9nQeyVkICvHPLnCgC+eEb4MvOsAtCpfmdcYwQrj9biQIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGyX187aSZlpv8/Sfql+CU1ngQZJMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvYkpmWHp0cEptV21fejlKLXFYNEpUV2VCQmtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/fPMA0G
CSqGSIb3DQEBCwUAA4IBAQCbR7h54IouEnFdyP5F9rTGaAI1MXYE3go0hEJ2htxP
4YrAJ9kilb7lL6DKxbv3CqFeUnN0oxfzhqf/16x022FD93ErNe2BkpqTCtjUYysV
kLEBNvhmbtdFzr/YjYOx/+Ok1Vy7TyYjHZMVYKzOLQIKSy01AQcS3JvnqkPJQQF0
vdPULIJDLVXsIYrXr8znDjPub+dPsFMtllDHEJHPnqCzHL5yRE4kY1RKskDyHc0L
rL6/u0WCRxWG7VfwXpZ2fIg9KVD1u50btvF9QZx2uoSqHKngdEqVOcoWISUXwO5O
cAlW6RzZUdrbnS/uXTVsPeir1K3w+CqdnJW8Jck1h6A/
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:47:34 2025 by rpki-client