Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/joWKwlzklKowWX70vyrHZbxmIzI.roa
File: joWKwlzklKowWX70vyrHZbxmIzI.roa (raw, json)
Hash identifier: c1cEejNDoVX6XU+bhpcKrHP1nUSr8t9Kg/yE2XQRWI4=
Subject key identifier: 8E:85:8A:C2:5C:E4:94:AA:30:59:7E:F4:BF:2A:C7:65:BC:66:23:32
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A48371FE9066F325CF4D2FD8FE5C73AF5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/joWKwlzklKowWX70vyrHZbxmIzI.roa
Signing time: Mon 03 Nov 2025 05:36:03 +0000
ROA not before: Mon 03 Nov 2025 05:36:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 151.241.51.0/24 maxlen: 24
151.243.87.0/24 maxlen: 24
151.244.192.0/24 maxlen: 24
151.245.16.0/24 maxlen: 24
151.245.38.0/24 maxlen: 24
151.245.102.0/24 maxlen: 24
151.245.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:48:37:1f:e9:06:6f:32:5c:f4:d2:fd:8f:e5:c7:3a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 3 05:36:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e858ac25ce494aa30597ef4bf2ac765bc662332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d8:6f:40:1c:a0:14:5e:92:91:68:d8:ea:a4:
47:e9:73:ba:73:ad:d8:5a:30:45:94:44:27:d1:6f:
0f:5c:e1:0e:71:87:9b:f4:9d:11:44:4a:20:b1:63:
c2:3d:8f:a1:4c:ba:7c:46:c9:30:d1:24:43:1c:69:
01:6e:1a:e9:1f:79:37:de:b8:aa:15:eb:98:7c:36:
29:dd:07:30:4f:31:5b:1c:4f:22:c8:04:e4:22:05:
56:51:02:90:d0:bc:8e:2a:9f:58:3e:bf:da:b2:0f:
69:ed:9f:15:ba:58:19:b8:00:9f:e8:a1:94:72:b8:
70:3e:d0:01:10:bc:64:83:c1:6e:3e:bf:6b:20:93:
8b:7e:a6:84:71:d1:9c:ea:b1:24:32:65:9f:24:16:
7d:91:81:24:f8:67:ad:9e:e4:75:d8:61:c0:b2:a2:
e2:a5:a3:82:d6:b3:0e:18:f2:38:64:b7:b3:b0:5a:
5d:5c:b9:8c:a7:af:e7:65:0f:55:b7:23:b2:fd:d3:
ca:0f:e2:eb:e8:1c:d2:40:44:ae:01:49:01:e9:8d:
09:5e:92:b5:70:c7:d7:e9:89:e5:88:65:3c:02:f5:
08:54:48:75:eb:19:a3:fa:ef:e9:94:bb:d5:73:7d:
f2:d1:3e:ff:d2:63:25:11:6c:e0:42:dd:26:38:48:
ba:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:85:8A:C2:5C:E4:94:AA:30:59:7E:F4:BF:2A:C7:65:BC:66:23:32
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/joWKwlzklKowWX70vyrHZbxmIzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.51.0/24
151.243.87.0/24
151.244.192.0/24
151.245.16.0/24
151.245.38.0/24
151.245.102.0/24
151.245.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:cb:65:ce:5a:1c:29:24:f3:bc:eb:7e:0d:da:43:46:66:f6:
3e:99:fc:79:e5:88:70:ec:0f:b3:2b:81:2b:bd:cf:07:63:ba:
34:0f:29:d3:49:a9:fb:f6:76:2d:62:1a:46:fd:a7:4a:98:8d:
ff:78:2d:46:38:fe:f1:86:08:8c:76:aa:45:31:27:72:22:5c:
fd:28:86:1b:ff:08:cc:81:c0:4f:a9:ae:70:f3:2a:de:81:ea:
ba:b2:99:3e:e2:61:5e:ac:2c:21:ff:86:1f:11:4f:83:b6:79:
e4:27:07:5b:b9:68:d6:1e:98:1a:c9:85:a3:51:72:33:6e:83:
5a:87:5c:7d:25:98:26:8d:b6:e5:35:74:8b:d6:67:62:49:f1:
9d:d9:2f:4e:31:fc:ab:3c:26:75:6a:98:00:1c:7f:2a:1a:fb:
dc:fd:2a:d5:c7:9f:08:5c:a8:43:9d:51:6d:fb:f8:c1:52:87:
48:f0:34:f1:be:0c:0c:35:de:31:d5:f4:a2:53:28:5b:79:05:
f8:a6:ac:56:1c:62:2a:d5:ef:e9:ec:1d:13:ba:a7:da:2e:fe:
90:45:e1:e0:b3:8c:68:87:58:c6:b9:ec:02:80:c6:15:2c:50:
b3:7e:5a:61:ce:de:1f:2e:c2:60:e4:f6:b5:46:bd:1a:f9:5d:
88:8d:6c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:37:55 2025 by rpki-client