Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t1D-pkR8VsnLne9BShTPO-yc6Kk.roa
File: t1D-pkR8VsnLne9BShTPO-yc6Kk.roa (raw, json)
Hash identifier: TY2DenLYkvK76PS/LZLrKjpSVKlAwzN/9jNFoFbR2s4=
Subject key identifier: B7:50:FE:A6:44:7C:56:C9:CB:9D:EF:41:4A:14:CF:3B:EC:9C:E8:A9
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A2AA3E58F356CAA8250248E8D0F4A2510
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t1D-pkR8VsnLne9BShTPO-yc6Kk.roa
Signing time: Tue 28 Oct 2025 11:46:15 +0000
ROA not before: Tue 28 Oct 2025 11:46:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401776
IP address blocks: 151.241.137.0/24 maxlen: 24
151.241.139.0/24 maxlen: 24
151.242.27.0/24 maxlen: 24
151.243.191.0/24 maxlen: 24
151.244.3.0/24 maxlen: 24
151.244.109.0/24 maxlen: 24
151.245.151.0/24 maxlen: 24
151.245.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:a3:e5:8f:35:6c:aa:82:50:24:8e:8d:0f:4a:25:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 28 11:46:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b750fea6447c56c9cb9def414a14cf3bec9ce8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:74:ae:12:3d:fd:99:31:34:e0:b9:d8:9b:
21:b7:1f:b1:39:91:6c:c6:43:a3:a1:72:42:ab:3f:
e3:b7:69:f4:3e:ef:a9:cf:db:c1:bc:1b:8c:04:ba:
1e:94:d7:2a:ec:34:a3:49:17:d9:b0:e6:61:15:66:
20:ef:2a:fe:36:0e:0a:fc:2f:3a:3f:e2:62:47:0a:
d9:64:e8:aa:03:45:2a:ba:e9:09:ac:7d:5d:12:50:
93:66:86:d5:f1:00:30:38:34:25:b0:ef:05:b7:e0:
3b:43:d5:08:96:e8:aa:43:22:d0:5b:15:0e:31:bf:
ca:40:26:c9:fb:08:87:90:60:3a:64:9e:7f:c4:d0:
67:b0:c1:9f:4a:cb:d0:ec:a2:3c:13:da:62:6b:37:
6d:6a:21:f3:cf:54:11:d2:72:33:51:d3:ca:26:2b:
62:ad:c2:d9:4b:8b:81:03:f6:dd:10:bd:92:99:6f:
bb:7e:cc:9a:4b:07:0f:73:d7:8c:05:d6:40:5b:80:
71:b3:4b:21:1e:01:43:0a:f1:66:3a:b9:49:47:19:
7c:08:68:b0:df:c5:03:24:1f:2f:c2:54:81:30:ff:
fb:f2:df:c6:8b:26:64:be:4c:f3:c1:29:72:a0:4b:
f8:7a:04:3f:53:2b:1f:61:76:e6:5d:d7:02:55:29:
b6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:50:FE:A6:44:7C:56:C9:CB:9D:EF:41:4A:14:CF:3B:EC:9C:E8:A9
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t1D-pkR8VsnLne9BShTPO-yc6Kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.137.0/24
151.241.139.0/24
151.242.27.0/24
151.243.191.0/24
151.244.3.0/24
151.244.109.0/24
151.245.151.0/24
151.245.221.0/24
Signature Algorithm: sha256WithRSAEncryption
98:db:48:b8:7e:d8:8e:2e:8c:df:cc:28:4b:53:96:d4:68:66:
36:08:97:c7:f0:76:88:92:e7:6b:39:87:5e:19:39:ab:dd:3c:
33:9b:1a:98:d9:9c:c3:da:b3:f6:8d:8e:8d:ec:34:72:05:f2:
f6:29:62:81:1c:75:0c:65:01:e2:3b:5f:37:c1:ff:c4:15:2f:
51:7d:1a:b9:ae:ce:19:0e:d5:6a:38:d2:53:7f:a8:6e:3d:29:
f3:a4:35:05:59:b6:cd:0f:f6:40:49:dd:36:f5:2a:f0:28:bf:
f7:8d:fc:64:7d:41:ef:a5:d3:16:f5:83:4a:24:4b:bc:c2:61:
75:be:60:ae:c2:f0:81:f7:af:5a:84:de:40:10:7a:90:50:c9:
e6:7d:3a:93:d9:5e:e3:c3:d8:83:e1:87:ff:ff:28:67:3e:01:
ef:7a:09:de:45:b2:38:5f:70:22:e2:d0:fe:92:84:76:2b:e8:
b5:e6:27:4b:e8:d3:a8:c5:b3:56:39:56:85:15:66:32:f2:c2:
1b:9d:e1:60:69:79:d8:e0:83:82:7e:47:a0:2a:5f:bc:25:15:
15:c5:8b:24:72:00:60:d1:c3:d0:95:0a:46:9b:16:8f:0f:3c:
b9:77:4e:88:02:c3:fd:b9:ae:a7:ac:78:10:3f:f7:5e:1b:cc:
2e:7d:64:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:46:36 2025 by rpki-client