Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/o8rT78IsfbZ-Q4G1D5KVJHuWm4E.roa
File: o8rT78IsfbZ-Q4G1D5KVJHuWm4E.roa (raw, json)
Hash identifier: tcuDNC539ZuPsXbWZdWivr+QwrzN9jqXPKKF7iMiRkY=
Subject key identifier: A3:CA:D3:EF:C2:2C:7D:B6:7E:43:81:B5:0F:92:95:24:7B:96:9B:81
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A0AABD2E1FE90D90DB012FCC1A780D65B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/o8rT78IsfbZ-Q4G1D5KVJHuWm4E.roa
Signing time: Wed 22 Oct 2025 06:47:03 +0000
ROA not before: Wed 22 Oct 2025 06:47:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214654
IP address blocks: 151.240.14.0/24 maxlen: 24
151.241.218.0/24 maxlen: 24
151.243.181.0/24 maxlen: 24
151.244.236.0/24 maxlen: 24
151.245.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:ab:d2:e1:fe:90:d9:0d:b0:12:fc:c1:a7:80:d6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 22 06:47:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3cad3efc22c7db67e4381b50f9295247b969b81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:63:08:81:12:0a:47:fc:13:92:2d:51:e6:22:
fe:da:2e:d6:d2:23:b5:d1:23:a0:88:72:6f:72:20:
0b:81:fa:47:ec:3a:57:0f:2e:5a:a8:78:e8:cc:70:
dd:43:4f:0a:8f:a3:33:40:e3:1f:75:a8:5f:c2:fa:
15:ef:2d:13:a5:d6:9d:21:3a:51:be:1c:70:7c:96:
24:36:d4:4f:c5:99:c1:c9:6a:a7:9c:52:95:c9:60:
ae:3d:09:c1:92:a8:58:fa:26:a8:9c:7a:51:82:54:
55:64:cb:a6:1e:f8:95:39:4e:8e:09:20:32:52:0f:
c4:87:59:74:03:ef:95:38:06:44:5d:42:d3:f4:5d:
6f:eb:53:22:ca:1b:05:5a:9b:60:cf:45:ad:cf:70:
f6:e7:1b:92:57:38:1d:cf:1c:19:0c:8d:12:44:96:
20:3e:ee:ed:18:38:2a:cf:3c:0b:49:b9:6a:a7:29:
9e:4f:5a:e7:30:fc:17:bd:83:c2:6f:06:56:63:34:
ad:a4:80:2c:1e:af:e5:84:da:60:5a:18:5d:5c:67:
18:d3:ec:b5:f8:96:80:77:b7:c9:f7:e6:ee:8c:31:
42:c1:db:f7:2f:25:c8:8e:8f:5a:77:09:6b:b0:42:
9a:27:4f:73:43:45:5a:46:aa:9a:ce:2d:67:39:54:
b6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CA:D3:EF:C2:2C:7D:B6:7E:43:81:B5:0F:92:95:24:7B:96:9B:81
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/o8rT78IsfbZ-Q4G1D5KVJHuWm4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.14.0/24
151.241.218.0/24
151.243.181.0/24
151.244.236.0/24
151.245.86.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:be:65:27:36:62:45:1c:c6:41:d1:ab:a9:61:5d:9e:b9:78:
57:a5:35:59:cd:7f:c9:88:47:0c:89:5a:6e:08:e7:00:09:c6:
95:21:07:41:52:04:f2:35:d7:6a:50:83:06:6b:cb:ad:89:1c:
c3:60:2d:a7:9b:51:73:08:13:8d:bd:94:87:c2:9f:13:02:bf:
d9:10:b7:72:f1:03:3c:6a:0d:3c:1e:50:cd:e6:d6:2f:bb:9e:
68:0a:68:92:eb:88:38:fd:ba:86:19:ed:28:79:3f:2f:40:61:
3d:b4:03:77:b4:ee:9f:c5:c7:1c:e5:84:45:c0:f6:b7:36:b8:
ee:97:68:b0:70:a9:21:6e:8f:29:81:4f:c0:2e:27:37:7e:6d:
28:e5:6e:73:4d:53:4d:23:fc:f4:aa:f7:a5:4f:5f:47:a9:ef:
c5:83:3e:a4:96:eb:d0:74:9c:33:04:a9:73:45:05:11:83:4e:
27:e5:e2:15:3e:66:56:05:80:b3:d5:48:5e:12:ec:a4:f2:96:
a7:d4:41:89:8a:8b:22:43:c7:c5:20:1c:c1:45:8f:6d:7f:2a:
65:42:46:60:ef:90:34:26:59:ad:1f:d4:9e:1f:1d:27:e9:57:
be:81:33:f4:fe:0a:a9:10:6a:87:96:5f:34:53:a0:28:26:a6:
dc:b3:e2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:24:25 2025 by rpki-client