Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tj2RkrDlJFtb3OJ_I8pyrGsyjbg.roa
File: tj2RkrDlJFtb3OJ_I8pyrGsyjbg.roa (raw, json)
Hash identifier: 87e5vvA8Wd4puyW/YGqbZ6cJGAdbPyVHmh0eohhjjo4=
Subject key identifier: B6:3D:91:92:B0:E5:24:5B:5B:DC:E2:7F:23:CA:72:AC:6B:32:8D:B8
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01985ADE8A843B3169C0876E8B55E0789312
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tj2RkrDlJFtb3OJ_I8pyrGsyjbg.roa
Signing time: Wed 30 Jul 2025 10:26:30 +0000
ROA not before: Wed 30 Jul 2025 10:26:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14061
IP address blocks: 151.240.160.0/24 maxlen: 24
151.241.19.0/24 maxlen: 24
151.241.45.0/24 maxlen: 24
151.241.93.0/24 maxlen: 24
151.244.89.0/24 maxlen: 24
151.245.74.0/24 maxlen: 24
151.245.87.0/24 maxlen: 24
151.245.198.0/24 maxlen: 24
151.245.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:de:8a:84:3b:31:69:c0:87:6e:8b:55:e0:78:93:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 30 10:26:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b63d9192b0e5245b5bdce27f23ca72ac6b328db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:af:13:17:26:52:07:62:3b:2f:65:f7:9f:0f:
08:1b:19:37:04:f4:3d:b1:e8:92:ad:29:81:8a:9f:
d5:ab:9b:da:9c:31:82:11:01:3e:76:5c:c4:0d:41:
f3:55:53:4c:57:ae:1c:20:0b:67:93:f3:c9:1c:2f:
18:97:c3:c0:4c:ac:41:88:64:d4:7a:ac:34:01:b1:
82:d2:49:77:e8:c2:8c:ef:8f:26:80:1b:ae:f4:77:
7b:88:02:d7:07:27:c1:2a:dc:31:b7:fb:bc:9e:84:
93:e7:31:1b:e7:15:65:b1:42:04:43:ac:14:25:11:
d3:42:33:9d:d6:5d:89:04:7b:4d:ed:05:d4:68:a2:
44:f7:26:2d:42:3f:9d:a9:bd:64:5a:bd:0d:a9:41:
49:27:8c:75:bb:d3:f5:3c:cb:66:dd:f4:03:80:25:
4e:a0:a2:28:ff:81:04:e9:a4:3a:21:59:ca:0b:26:
71:1e:f1:08:14:03:df:1d:10:dd:bc:43:aa:35:eb:
bf:f4:d2:e2:41:20:28:c2:79:9f:6f:92:96:0d:2f:
d4:cd:df:4a:78:0b:28:8d:90:1c:66:4f:27:db:36:
99:16:9d:9e:10:26:ae:76:a5:b2:51:47:d9:fd:a8:
1d:f4:ac:fc:f7:78:8f:a4:a5:2f:7e:a7:15:59:f1:
0e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3D:91:92:B0:E5:24:5B:5B:DC:E2:7F:23:CA:72:AC:6B:32:8D:B8
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tj2RkrDlJFtb3OJ_I8pyrGsyjbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.160.0/24
151.241.19.0/24
151.241.45.0/24
151.241.93.0/24
151.244.89.0/24
151.245.74.0/24
151.245.87.0/24
151.245.198.0/24
151.245.213.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ff:d9:fb:1d:05:2c:66:30:a5:d7:c3:13:f4:c1:a4:1d:72:
e8:3a:97:a8:58:f8:42:3a:f8:f3:50:45:94:ef:bc:d6:f5:27:
c5:7d:79:e5:12:5a:a5:b1:05:c1:8f:6f:91:66:ef:a6:fc:1f:
52:99:ab:6c:8a:d7:d7:92:bf:32:26:cc:d6:34:9c:c8:96:33:
fb:73:a1:6d:32:22:2b:fc:92:cf:dc:ed:33:05:90:d1:df:c1:
47:f8:b6:09:d5:e2:d6:75:f3:5d:30:e9:c9:9c:b1:5c:8e:c1:
74:95:8c:9a:53:e9:bc:3a:4e:ff:ce:be:3f:9d:0a:9c:e4:39:
8d:aa:89:1b:b2:b3:f3:bd:b8:51:9e:3e:6c:55:37:17:e5:25:
9f:1d:eb:94:b0:d7:88:3c:c2:e3:1c:ee:d2:7b:dc:b7:59:19:
df:31:7e:13:ce:30:dd:13:53:b6:cd:59:a0:18:92:bb:29:36:
fb:e3:46:46:92:b0:fe:df:ca:f5:3f:e8:2d:05:89:13:66:de:
fe:a0:1d:36:74:50:67:72:29:85:22:75:cb:bb:4b:d5:06:46:
a2:46:e7:a5:de:74:c4:d0:09:6d:98:92:09:00:3d:bf:d6:6f:
1b:ae:04:81:b4:f5:74:4f:54:cd:a8:ff:83:9e:ca:44:bc:1e:
4b:43:f3:c6
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZha3oqEOzFpwIdui1XgeJMSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNzMwMTAyNjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjNkOTE5MmIwZTUyNDViNWJkY2UyN2YyM2NhNzJhYzZiMzI4ZGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna8TFyZSB2I7L2X3nw8IGxk3BPQ9
seiSrSmBip/Vq5vanDGCEQE+dlzEDUHzVVNMV64cIAtnk/PJHC8Yl8PATKxBiGTU
eqw0AbGC0kl36MKM748mgBuu9Hd7iALXByfBKtwxt/u8noST5zEb5xVlsUIEQ6wU
JRHTQjOd1l2JBHtN7QXUaKJE9yYtQj+dqb1kWr0NqUFJJ4x1u9P1PMtm3fQDgCVO
oKIo/4EE6aQ6IVnKCyZxHvEIFAPfHRDdvEOqNeu/9NLiQSAownmfb5KWDS/Uzd9K
eAsojZAcZk8n2zaZFp2eECaudqWyUUfZ/agd9Kz893iPpKUvfqcVWfEOuwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFLY9kZKw5SRbW9zifyPKcqxrMo24MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvdGoyUmtyRGxKRnRiM09KX0k4cHlyR3N5amJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAl/CgAwQA
l/ETAwQAl/EtAwQAl/FdAwQAl/RZAwQAl/VKAwQAl/VXAwQAl/XGAwQAl/XVMA0G
CSqGSIb3DQEBCwUAA4IBAQBP/9n7HQUsZjCl18MT9MGkHXLoOpeoWPhCOvjzUEWU
77zW9SfFfXnlElqlsQXBj2+RZu+m/B9SmatsitfXkr8yJszWNJzIljP7c6FtMiIr
/JLP3O0zBZDR38FH+LYJ1eLWdfNdMOnJnLFcjsF0lYyaU+m8Ok7/zr4/nQqc5DmN
qokbsrPzvbhRnj5sVTcX5SWfHeuUsNeIPMLjHO7Se9y3WRnfMX4TzjDdE1O2zVmg
GJK7KTb740ZGkrD+38r1P+gtBYkTZt7+oB02dFBncimFInXLu0vVBkaiRuel3nTE
0AltmJIJAD2/1m8brgSBtPV0T1TNqP+DnspEvB5LQ/PG
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:44:13 2025 by rpki-client