
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/p9__ymO39b2RM_v_ui8Cjrfule8.roa
File: p9__ymO39b2RM_v_ui8Cjrfule8.roa (raw, json)
Hash identifier: 3sDys6Bva+alowBMDdMa/+7kBO/GH56Sax+454snqiA=
Subject key identifier: A7:DF:FF:CA:63:B7:F5:BD:91:33:FB:FF:BA:2F:02:8E:B7:EE:95:EF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198406E94D9DCCC633E39A5726B8CE26CF2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/p9__ymO39b2RM_v_ui8Cjrfule8.roa
Signing time: Fri 25 Jul 2025 07:14:05 +0000
ROA not before: Fri 25 Jul 2025 07:14:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 151.241.128.0/22 maxlen: 24
151.242.4.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.17.0/24 maxlen: 24
151.242.27.0/24 maxlen: 24
151.242.32.0/24 maxlen: 24
151.242.40.0/24 maxlen: 24
151.242.78.0/24 maxlen: 24
151.242.79.0/24 maxlen: 24
151.242.82.0/24 maxlen: 24
151.242.139.0/24 maxlen: 24
151.243.44.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.244.3.0/24 maxlen: 24
151.244.128.0/24 maxlen: 24
151.244.129.0/24 maxlen: 24
151.244.130.0/24 maxlen: 24
151.245.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:6e:94:d9:dc:cc:63:3e:39:a5:72:6b:8c:e2:6c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 25 07:14:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7dfffca63b7f5bd9133fbffba2f028eb7ee95ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:64:80:ff:15:60:a6:16:78:f4:c1:41:d3:23:
10:4d:53:ad:fe:bc:e0:29:74:88:c2:e6:d5:59:5a:
f8:1f:78:f2:a5:78:b2:d1:14:44:a9:05:cc:c6:b9:
68:b7:c1:7f:52:b7:59:62:3f:1e:7e:90:d8:a2:0e:
19:b8:e4:51:4c:dd:75:03:30:f0:9a:9a:bd:5d:d2:
2f:9c:cc:46:1c:e2:d0:f8:00:40:04:34:df:a2:7e:
81:db:23:c5:84:d5:91:1b:02:38:eb:14:3f:dc:8b:
5b:40:e5:ef:5a:63:12:c8:00:9c:78:1f:ac:30:bf:
d1:46:8b:4b:38:0e:ef:47:df:b3:47:48:16:a5:ad:
ee:9a:da:a4:e2:5c:5a:a2:e7:77:64:83:8f:fc:ce:
6e:54:7d:94:50:ea:68:8a:e0:86:a5:5b:0c:5f:06:
c1:ff:9b:8a:ee:6a:9d:88:ec:d2:c2:c6:41:d7:13:
f2:f1:fe:8f:26:b4:ab:85:c6:25:98:f7:be:6b:24:
17:b8:67:22:5b:19:dc:04:9d:c5:2d:01:44:97:7c:
d2:26:3a:0a:83:0f:06:01:72:ea:d3:c7:85:2b:34:
e8:68:41:0c:5d:a5:51:46:65:eb:e9:81:5e:6f:b2:
ea:c4:74:27:89:72:33:bb:57:15:ca:97:ad:57:3f:
64:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DF:FF:CA:63:B7:F5:BD:91:33:FB:FF:BA:2F:02:8E:B7:EE:95:EF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/p9__ymO39b2RM_v_ui8Cjrfule8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
151.242.4.0/24
151.242.14.0/24
151.242.17.0/24
151.242.27.0/24
151.242.32.0/24
151.242.40.0/24
151.242.78.0/23
151.242.82.0/24
151.242.139.0/24
151.243.44.0/24
151.243.115.0/24
151.244.3.0/24
151.244.128.0-151.244.130.255
151.245.120.0/21
Signature Algorithm: sha256WithRSAEncryption
16:d1:d9:cd:51:c9:27:6d:13:42:0d:65:1d:ca:a0:01:00:80:
6d:86:e8:80:78:34:12:34:47:bf:bc:74:0b:77:e4:69:ea:0f:
bc:96:0a:7c:ea:ff:e3:2e:c2:49:43:6d:b9:39:20:93:fa:62:
bc:e7:ce:91:5a:0a:f6:22:05:cc:02:e4:d5:b2:73:fc:df:33:
70:05:ab:38:5d:ea:61:4d:75:23:05:89:4c:9c:10:52:16:cb:
b7:2d:86:5d:54:43:55:3f:82:b4:c9:c2:d1:ca:5b:6f:77:da:
f9:34:d6:6d:89:39:a4:fe:70:69:8f:5d:8a:29:32:4c:30:b5:
2f:46:e8:29:e0:f9:6d:ec:90:4b:78:b0:6f:8c:2f:35:c9:b2:
a7:1e:6e:ea:cc:51:33:97:3f:1d:8e:04:9b:15:45:b4:a4:78:
f4:5a:d0:56:f1:fb:bf:e4:3e:93:14:77:c8:00:b6:c2:5e:ad:
97:f9:da:34:9a:77:2e:59:ec:9c:3d:f1:e5:b3:5a:91:ce:f8:
6c:63:b4:8a:ab:37:cf:96:d6:48:23:04:43:eb:8d:4e:e0:f0:
04:6a:bd:d4:67:b3:d1:13:c3:ff:d9:00:cc:86:1e:22:96:a2:
99:58:58:2b:49:1f:9d:56:9d:7b:b5:b6:af:6a:23:b3:25:5a:
4c:db:47:67
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgISAZhAbpTZ3MxjPjmlcmuM4mzyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNzI1MDcxNDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2RmZmZjYTYzYjdmNWJkOTEzM2ZiZmZiYTJmMDI4ZWI3ZWU5NWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42SA/xVgphZ49MFB0yMQTVOt/rzg
KXSIwubVWVr4H3jypXiy0RREqQXMxrlot8F/UrdZYj8efpDYog4ZuORRTN11AzDw
mpq9XdIvnMxGHOLQ+ABABDTfon6B2yPFhNWRGwI46xQ/3ItbQOXvWmMSyACceB+s
ML/RRotLOA7vR9+zR0gWpa3umtqk4lxaoud3ZIOP/M5uVH2UUOpoiuCGpVsMXwbB
/5uK7mqdiOzSwsZB1xPy8f6PJrSrhcYlmPe+ayQXuGciWxncBJ3FLQFEl3zSJjoK
gw8GAXLq08eFKzToaEEMXaVRRmXr6YFeb7LqxHQniXIzu1cVypetVz9kJwIDAQAB
o4ICZTCCAmEwHQYDVR0OBBYEFKff/8pjt/W9kTP7/7ovAo637pXvMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvcDlfX3ltTzM5YjJSTV92X3VpOENqcmZ1bGU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAATBiAwQCl/GAAwQA
l/IEAwQAl/IOAwQAl/IRAwQAl/IbAwQAl/IgAwQAl/IoAwQBl/JOAwQAl/JSAwQA
l/KLAwQAl/MsAwQAl/NzAwQAl/QDMAwDBAeX9IADBACX9IIDBAOX9XgwDQYJKoZI
hvcNAQELBQADggEBABbR2c1RySdtE0INZR3KoAEAgG2G6IB4NBI0R7+8dAt35Gnq
D7yWCnzq/+MuwklDbbk5IJP6YrznzpFaCvYiBcwC5NWyc/zfM3AFqzhd6mFNdSMF
iUycEFIWy7cthl1UQ1U/grTJwtHKW2932vk01m2JOaT+cGmPXYopMkwwtS9G6Cng
+W3skEt4sG+MLzXJsqceburMUTOXPx2OBJsVRbSkePRa0Fbx+7/kPpMUd8gAtsJe
rZf52jSady5Z7Jw98eWzWpHO+GxjtIqrN8+W1kgjBEPrjU7g8ARqvdRns9ETw//Z
AMyGHiKWoplYWCtJH51WnXu1tq9qI7MlWkzbR2c=
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:16:38 2025 by rpki-client