Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fdOLzL-d6qNIE7P8C0BgJT1jveY.roa
File: fdOLzL-d6qNIE7P8C0BgJT1jveY.roa (raw, json)
Hash identifier: pxHKdM9e9YHA8wY/jb/CpDeg4Shqn3+m6lbyj/ezZl4=
Subject key identifier: 7D:D3:8B:CC:BF:9D:EA:A3:48:13:B3:FC:0B:40:60:25:3D:63:BD:E6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A1A17911F514ABC3CACD8D1941B4B4832
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fdOLzL-d6qNIE7P8C0BgJT1jveY.roa
Signing time: Sat 25 Oct 2025 06:39:03 +0000
ROA not before: Sat 25 Oct 2025 06:39:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 151.241.232.0/23 maxlen: 24
151.243.54.0/24 maxlen: 24
151.245.222.0/23 maxlen: 24
151.246.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:17:91:1f:51:4a:bc:3c:ac:d8:d1:94:1b:4b:48:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 25 06:39:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dd38bccbf9deaa34813b3fc0b4060253d63bde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f3:4b:17:22:5d:da:c1:9d:d0:60:fb:dd:6d:
4d:12:ad:ad:e6:11:26:be:c8:3d:28:1f:50:73:53:
5b:1a:ce:c2:9f:62:ff:88:3f:b5:cf:f1:cc:8c:6a:
d4:b2:fc:45:c9:de:dd:45:7a:5d:19:4c:59:04:3d:
30:c1:10:c6:a5:d5:69:cb:52:37:34:09:66:86:e2:
b5:55:d9:ec:db:f6:a9:29:3f:79:ae:1b:88:64:e4:
be:8d:7a:24:36:ea:bc:11:f5:55:de:d9:cf:05:16:
a4:80:f7:82:a3:b0:f6:89:51:13:78:4d:21:54:b3:
3a:8d:17:36:50:ef:e9:0b:ae:13:fb:63:38:3a:c9:
de:8d:dc:11:62:89:23:d6:71:09:7a:f1:a6:82:ee:
4f:54:ad:4a:7c:a5:cd:cd:85:76:49:fc:e5:b6:b2:
c0:d5:f3:bf:57:24:6c:78:58:73:83:c2:57:ce:a5:
88:3b:2a:a9:f2:2a:f8:0d:75:fc:56:13:46:67:c1:
68:d2:d0:af:f9:f5:2d:27:71:4b:f6:6b:84:40:05:
a7:ae:43:3e:7e:ae:36:24:56:f9:94:7d:8d:67:d8:
2e:95:86:32:09:f9:71:b2:25:90:f5:84:de:d7:83:
b2:0e:d7:61:ac:83:e7:85:e4:1c:1c:41:1f:42:52:
84:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D3:8B:CC:BF:9D:EA:A3:48:13:B3:FC:0B:40:60:25:3D:63:BD:E6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fdOLzL-d6qNIE7P8C0BgJT1jveY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.232.0/23
151.243.54.0/24
151.245.222.0/23
151.246.64.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:25:3a:d6:f1:51:3c:ea:d5:ad:84:54:59:23:50:c8:19:f1:
65:ac:96:f5:73:ee:2f:f7:81:e4:80:d3:82:53:01:98:e0:6f:
43:28:1c:8a:b2:33:a4:c5:77:c5:20:a1:74:c4:65:ff:a8:d4:
69:2f:60:20:d0:88:b8:c7:5e:f5:f2:46:75:f4:21:4e:a5:db:
ab:b3:63:21:3b:8d:35:4e:b1:e5:88:aa:28:3b:58:1f:12:6d:
5d:55:9d:0e:55:98:fc:78:c2:89:d7:e0:1c:bf:36:5b:84:d3:
59:6e:87:5f:4f:28:83:f4:92:dd:7b:23:29:27:67:51:fa:64:
ad:fa:d3:81:54:e8:bc:00:9a:91:18:96:3a:6c:ce:92:81:19:
4c:50:a0:3d:c9:ae:ee:31:94:e0:d7:e3:25:d9:fa:0a:e5:21:
22:b0:7b:d2:fa:a0:43:94:71:13:74:af:41:0c:cc:22:25:4c:
8e:9d:66:4a:3b:06:a3:01:4b:ce:b9:df:40:a6:fa:e1:a7:c6:
ec:d5:92:a0:bd:42:d0:92:f9:b5:83:8a:46:4f:08:a0:8b:eb:
06:fc:01:6e:56:b2:25:f3:b2:3c:85:15:e6:34:87:bc:ad:4f:
98:72:47:47:45:5b:41:92:06:d3:d7:b1:8e:bb:e8:7a:88:a5:
1e:5b:7a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:15:57 2025 by rpki-client