Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zGh5bV1jofWC2JYOlKW8xSJ3QuE.roa
File: zGh5bV1jofWC2JYOlKW8xSJ3QuE.roa (raw, json)
Hash identifier: Lr9Emv1Rf/3SUnRALlpSma1B4ThswocutwbsVQTXgzw=
Subject key identifier: CC:68:79:6D:5D:63:A1:F5:82:D8:96:0E:94:A5:BC:C5:22:77:42:E1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019768BBDDBD13AE82F2EC5BAB4C522F6EF8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zGh5bV1jofWC2JYOlKW8xSJ3QuE.roa
Signing time: Fri 13 Jun 2025 10:00:31 +0000
ROA not before: Fri 13 Jun 2025 10:00:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 151.240.45.0/24 maxlen: 24
151.240.120.0/23 maxlen: 23
151.242.45.0/24 maxlen: 24
151.242.57.0/24 maxlen: 24
151.242.136.0/23 maxlen: 23
151.242.144.0/23 maxlen: 23
151.242.158.0/24 maxlen: 24
151.243.2.0/24 maxlen: 24
151.243.105.0/24 maxlen: 24
151.243.159.0/24 maxlen: 24
151.243.248.0/22 maxlen: 22
151.244.57.0/24 maxlen: 24
151.244.111.0/24 maxlen: 24
151.244.115.0/24 maxlen: 24
151.245.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:dd:bd:13:ae:82:f2:ec:5b:ab:4c:52:2f:6e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 13 10:00:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc68796d5d63a1f582d8960e94a5bcc5227742e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4a:5e:f7:c6:32:1b:17:60:1d:e4:5e:6d:3e:
5a:5a:45:2e:53:fb:2a:a4:fe:dd:31:df:28:15:3e:
62:b0:07:95:4e:8b:07:20:30:40:e3:02:50:7e:e4:
c8:fc:96:dd:fe:fa:3f:09:dd:a5:63:85:bb:55:14:
14:5c:7f:10:fe:c9:78:a1:5b:50:ec:6a:a4:cd:aa:
41:fd:71:5e:ef:56:4e:e4:ca:5e:f6:0a:d5:b7:e4:
c6:06:7d:07:d1:02:60:40:89:5d:20:da:b5:55:22:
0c:2c:12:4a:16:73:db:31:4a:39:94:13:8b:e2:dc:
cc:a4:31:33:62:b0:c1:58:5a:a2:9d:48:7b:91:88:
6c:64:cb:ba:87:34:5b:74:dd:c4:81:f9:be:79:17:
3a:82:6c:22:b8:73:9d:53:99:c2:8b:32:9a:2e:43:
eb:4a:f4:3f:63:10:61:69:35:af:82:3c:d9:14:a2:
39:19:e0:5c:12:26:14:cb:23:b2:8d:f2:10:8c:0c:
76:1d:12:49:51:3c:b5:5f:cf:49:87:13:4a:10:ba:
f6:d6:ce:b2:a1:38:5e:ff:6a:f3:08:b6:93:87:51:
84:7e:b5:91:90:4e:d2:be:d7:83:a8:d8:df:4f:0b:
df:ad:2c:5e:d1:c9:ad:b2:78:9f:82:30:6b:89:04:
60:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:68:79:6D:5D:63:A1:F5:82:D8:96:0E:94:A5:BC:C5:22:77:42:E1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zGh5bV1jofWC2JYOlKW8xSJ3QuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.45.0/24
151.240.120.0/23
151.242.45.0/24
151.242.57.0/24
151.242.136.0/23
151.242.144.0/23
151.242.158.0/24
151.243.2.0/24
151.243.105.0/24
151.243.159.0/24
151.243.248.0/22
151.244.57.0/24
151.244.111.0/24
151.244.115.0/24
151.245.116.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:c0:0f:d9:f1:c3:8f:3b:72:25:e8:c3:58:99:62:51:4a:bb:
fc:4a:16:24:b0:15:97:f0:58:5e:83:2b:77:65:a9:5a:9d:cc:
6b:38:2d:3b:61:8f:bc:ba:31:73:aa:b8:93:9d:16:b4:b5:f2:
76:fe:c5:60:f9:8b:8c:c1:d4:af:3e:61:df:ef:c5:0c:84:27:
15:43:26:1d:cb:e3:6e:5e:e1:22:b2:d0:71:a2:3e:8c:d3:19:
32:75:42:a3:da:2b:30:0e:2f:43:6b:de:8e:21:ef:7d:48:a5:
de:ba:22:ec:00:72:3a:f9:63:06:9a:38:6f:5b:e7:5f:d0:a3:
5c:be:b2:ed:e3:b8:d5:74:f3:fd:29:d9:a8:15:39:8a:73:70:
62:06:5d:c5:de:21:5d:83:ce:29:df:f3:45:69:cb:78:d8:ef:
cc:a4:6d:9a:d1:6d:eb:0b:23:cc:45:36:e8:fd:bb:c3:91:3a:
8e:26:0b:32:f0:5c:c4:17:c2:9c:a3:59:bb:60:ca:dd:2f:9d:
bc:ea:da:ce:33:12:80:e1:f6:e7:05:b8:4f:ea:36:c3:8f:9f:
dc:d2:86:f3:95:e0:ee:a0:0a:7d:7f:77:57:ef:0b:a1:ee:8d:
11:2b:ae:79:31:cd:19:42:98:58:2c:00:49:34:77:50:7f:c4:
61:b2:08:71
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAZdou929E66C8uxbq0xSL274MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNjEzMTAwMDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzY4Nzk2ZDVkNjNhMWY1ODJkODk2MGU5NGE1YmNjNTIyNzc0MmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0pe98YyGxdgHeRebT5aWkUuU/sq
pP7dMd8oFT5isAeVTosHIDBA4wJQfuTI/Jbd/vo/Cd2lY4W7VRQUXH8Q/sl4oVtQ
7GqkzapB/XFe71ZO5Mpe9grVt+TGBn0H0QJgQIldINq1VSIMLBJKFnPbMUo5lBOL
4tzMpDEzYrDBWFqinUh7kYhsZMu6hzRbdN3Egfm+eRc6gmwiuHOdU5nCizKaLkPr
SvQ/YxBhaTWvgjzZFKI5GeBcEiYUyyOyjfIQjAx2HRJJUTy1X89JhxNKELr21s6y
oThe/2rzCLaTh1GEfrWRkE7SvteDqNjfTwvfrSxe0cmtsnifgjBriQRghwIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFMxoeW1dY6H1gtiWDpSlvMUid0LhMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvekdoNWJWMWpvZldDMkpZT2xLVzh4U0ozUXVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQAl/AtAwQB
l/B4AwQAl/ItAwQAl/I5AwQBl/KIAwQBl/KQAwQAl/KeAwQAl/MCAwQAl/NpAwQA
l/OfAwQCl/P4AwQAl/Q5AwQAl/RvAwQAl/RzAwQCl/V0MA0GCSqGSIb3DQEBCwUA
A4IBAQB9wA/Z8cOPO3Il6MNYmWJRSrv8ShYksBWX8Fhegyt3ZalancxrOC07YY+8
ujFzqriTnRa0tfJ2/sVg+YuMwdSvPmHf78UMhCcVQyYdy+NuXuEistBxoj6M0xky
dUKj2iswDi9Da96OIe99SKXeuiLsAHI6+WMGmjhvW+df0KNcvrLt47jVdPP9Kdmo
FTmKc3BiBl3F3iFdg84p3/NFact42O/MpG2a0W3rCyPMRTbo/bvDkTqOJgsy8FzE
F8Kco1m7YMrdL5286trOMxKA4fbnBbhP6jbDj5/c0obzleDuoAp9f3dX7wuh7o0R
K655Mc0ZQphYLABJNHdQf8Rhsghx
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:44:11 2025 by rpki-client