Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pdOUR7BxK9JxMxa188L6woudclE.roa
File: pdOUR7BxK9JxMxa188L6woudclE.roa (raw, json)
Hash identifier: Kth1060zZp68zQLEsomxL9f0gQdxhLLBFxKj95vcNH8=
Subject key identifier: A5:D3:94:47:B0:71:2B:D2:71:33:16:B5:F3:C2:FA:C2:8B:9D:72:51
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01973B5B72011CA6CA2B2EF78B8CADBAA402
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pdOUR7BxK9JxMxa188L6woudclE.roa
Signing time: Wed 04 Jun 2025 14:32:18 +0000
ROA not before: Wed 04 Jun 2025 14:32:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 37.202.202.0/24 maxlen: 24
151.240.14.0/24 maxlen: 24
151.240.17.0/24 maxlen: 24
151.240.100.0/24 maxlen: 24
151.241.76.0/24 maxlen: 24
151.242.39.0/24 maxlen: 24
151.242.67.0/24 maxlen: 24
151.242.117.0/24 maxlen: 24
151.242.159.0/24 maxlen: 24
151.243.6.0/24 maxlen: 24
151.243.160.0/22 maxlen: 22
151.244.78.0/24 maxlen: 24
151.245.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3b:5b:72:01:1c:a6:ca:2b:2e:f7:8b:8c:ad:ba:a4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 4 14:32:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5d39447b0712bd2713316b5f3c2fac28b9d7251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:31:a8:f5:2c:cd:20:e3:b7:04:d5:69:ed:
64:2e:9d:be:0c:ff:20:00:fc:a1:54:99:1b:0f:02:
4c:a0:b4:6b:09:c0:88:7b:10:92:ed:78:6e:cc:12:
85:fa:34:13:44:16:07:66:d6:e5:ee:4d:4d:95:5e:
b8:c4:7d:ed:6d:a3:b8:5c:55:3d:0d:37:93:4a:67:
1e:65:85:3d:c5:65:66:74:1b:72:e9:a8:d2:0e:8a:
d9:63:0f:86:02:12:c0:ae:5a:2c:1d:7a:0f:92:89:
48:7d:85:42:79:ab:d4:58:39:06:63:81:42:3c:56:
11:23:32:f3:ed:c0:75:af:d8:b8:ad:c2:46:f2:b5:
d1:51:c5:c7:aa:ad:6f:39:d5:cc:ea:3f:07:2c:45:
ff:80:87:21:ec:56:a4:c6:08:41:69:dd:b3:fc:d2:
4a:72:c5:23:c8:9a:53:d6:b0:f5:28:11:a3:82:a7:
5f:70:47:7b:27:43:bd:40:1a:a0:5a:b5:c0:cf:83:
7a:17:bf:26:c4:b0:21:a8:04:b6:db:8f:36:0c:15:
40:ab:c3:e3:16:09:fb:b7:e4:3c:56:e5:1d:e5:1d:
85:4a:6c:59:5c:e6:0e:d7:0e:c7:a9:c0:f8:76:e0:
f8:86:fd:f5:99:e0:89:61:14:8f:3d:18:fe:36:ac:
99:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D3:94:47:B0:71:2B:D2:71:33:16:B5:F3:C2:FA:C2:8B:9D:72:51
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pdOUR7BxK9JxMxa188L6woudclE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.202.0/24
151.240.14.0/24
151.240.17.0/24
151.240.100.0/24
151.241.76.0/24
151.242.39.0/24
151.242.67.0/24
151.242.117.0/24
151.242.159.0/24
151.243.6.0/24
151.243.160.0/22
151.244.78.0/24
151.245.112.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:94:41:48:f6:c4:45:0c:22:9f:65:f8:e4:a7:e9:d2:59:9e:
44:6d:27:17:7f:7f:13:10:f1:30:59:bc:52:21:06:64:f9:be:
d2:45:48:ee:e4:6f:bc:e8:b1:0c:65:8f:53:ea:6c:b3:a9:d6:
c1:1a:07:26:32:77:e5:30:55:65:34:40:91:98:5a:4b:43:31:
60:02:78:9a:71:4f:e7:f0:dc:c4:70:62:c9:63:fc:5f:15:1c:
4c:a3:24:24:39:44:e0:cd:72:ae:2d:3b:94:13:1d:cb:46:60:
7c:c7:78:7e:ad:ee:8b:44:ce:bb:16:66:91:ad:58:40:0a:74:
da:c9:43:b0:6c:10:79:9b:b1:00:2b:4b:44:de:04:e5:9b:a7:
66:b6:60:00:8e:a6:be:85:40:2d:4d:45:31:19:7d:ca:da:1b:
c2:e9:99:74:17:2c:41:54:00:41:e3:64:66:1c:00:68:f3:f8:
fd:a0:c6:d1:97:3b:4a:9d:bd:9d:02:20:b5:47:76:c8:31:19:
f7:48:57:97:9f:f6:39:44:a3:95:ed:c9:95:0d:a6:11:c7:f4:
02:d3:2e:4a:0d:09:66:8c:39:96:fc:ed:00:65:70:fc:2a:b6:
13:69:ca:8d:b3:4a:0d:f7:d1:2c:31:78:67:5e:3a:ee:e6:cc:
26:9c:a9:f8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAZc7W3IBHKbKKy73i4ytuqQCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNjA0MTQzMjE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWQzOTQ0N2IwNzEyYmQyNzEzMzE2YjVmM2MyZmFjMjhiOWQ3MjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKwxqPUszSDjtwTVae1kLp2+DP8g
APyhVJkbDwJMoLRrCcCIexCS7XhuzBKF+jQTRBYHZtbl7k1NlV64xH3tbaO4XFU9
DTeTSmceZYU9xWVmdBty6ajSDorZYw+GAhLArlosHXoPkolIfYVCeavUWDkGY4FC
PFYRIzLz7cB1r9i4rcJG8rXRUcXHqq1vOdXM6j8HLEX/gIch7FakxghBad2z/NJK
csUjyJpT1rD1KBGjgqdfcEd7J0O9QBqgWrXAz4N6F78mxLAhqAS22482DBVAq8Pj
Fgn7t+Q8VuUd5R2FSmxZXOYO1w7HqcD4duD4hv31meCJYRSPPRj+NqyZawIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFKXTlEewcSvScTMWtfPC+sKLnXJRMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvcGRPVVI3QnhLOUp4TXhhMTg4TDZ3b3VkY2xFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQAJcrKAwQA
l/AOAwQAl/ARAwQAl/BkAwQAl/FMAwQAl/InAwQAl/JDAwQAl/J1AwQAl/KfAwQA
l/MGAwQCl/OgAwQAl/ROAwQAl/VwMA0GCSqGSIb3DQEBCwUAA4IBAQB9lEFI9sRF
DCKfZfjkp+nSWZ5EbScXf38TEPEwWbxSIQZk+b7SRUju5G+86LEMZY9T6myzqdbB
GgcmMnflMFVlNECRmFpLQzFgAniacU/n8NzEcGLJY/xfFRxMoyQkOUTgzXKuLTuU
Ex3LRmB8x3h+re6LRM67FmaRrVhACnTayUOwbBB5m7EAK0tE3gTlm6dmtmAAjqa+
hUAtTUUxGX3K2hvC6Zl0FyxBVABB42RmHABo8/j9oMbRlztKnb2dAiC1R3bIMRn3
SFeXn/Y5RKOV7cmVDaYRx/QC0y5KDQlmjDmW/O0AZXD8KrYTacqNs0oN99EsMXhn
Xjru5swmnKn4
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:29:53 2025 by rpki-client