Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/M8l7pbK1m9EtbYQB0XFpZb7IbwY.roa
File: M8l7pbK1m9EtbYQB0XFpZb7IbwY.roa (raw, json)
Hash identifier: eslpNhlfUyI1j7Yq81Ny5UVDGoF4QOI7V1IgSfchCsk=
Subject key identifier: 33:C9:7B:A5:B2:B5:9B:D1:2D:6D:84:01:D1:71:69:65:BE:C8:6F:06
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 019945B8137CF875F4D46C37E27B31175C5D
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/M8l7pbK1m9EtbYQB0XFpZb7IbwY.roa
Signing time: Sun 14 Sep 2025 00:55:15 +0000
ROA not before: Sun 14 Sep 2025 00:55:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20115
IP address blocks: 151.145.128.0/20 maxlen: 20
151.145.128.0/24 maxlen: 24
151.145.144.0/20 maxlen: 20
158.120.48.0/24 maxlen: 24
158.120.50.0/24 maxlen: 24
158.120.52.0/24 maxlen: 24
158.120.54.0/24 maxlen: 24
158.120.56.0/24 maxlen: 24
158.120.58.0/24 maxlen: 24
158.120.60.0/24 maxlen: 24
158.120.62.0/24 maxlen: 24
170.100.148.0/22 maxlen: 22
170.100.204.0/24 maxlen: 24
170.100.206.0/23 maxlen: 23
192.6.64.0/22 maxlen: 22
192.6.172.0/22 maxlen: 22
192.6.252.0/22 maxlen: 22
192.25.180.0/22 maxlen: 22
192.25.200.0/22 maxlen: 22
192.25.208.0/22 maxlen: 22
192.25.232.0/22 maxlen: 22
192.25.244.0/22 maxlen: 22
192.137.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:45:b8:13:7c:f8:75:f4:d4:6c:37:e2:7b:31:17:5c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Sep 14 00:55:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33c97ba5b2b59bd12d6d8401d1716965bec86f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:df:c0:2d:9f:0f:08:90:b0:2d:57:5a:1a:94:
63:c9:4b:19:5f:b6:d6:66:17:42:41:91:85:cd:65:
8e:17:60:32:ff:30:38:df:92:8a:24:79:b9:23:0c:
76:b9:22:6a:13:1f:4b:2e:39:f6:fc:40:5e:3f:da:
c7:94:1b:43:92:e2:b8:cc:26:72:f7:c3:e0:ce:b4:
cc:da:e0:65:55:1c:df:26:9a:f1:85:91:9d:45:e5:
7c:4d:67:47:a8:16:86:ce:a6:ca:4b:98:50:45:44:
3d:f6:f3:75:72:7c:c9:6e:9c:18:8a:14:d7:90:7b:
ba:fc:f5:ad:8d:a6:45:8a:73:aa:25:84:58:f9:23:
a3:6e:99:e1:d2:0d:50:bf:1c:ae:86:2e:7b:d1:07:
16:18:67:57:94:c4:fb:0a:02:d8:ab:e8:12:b3:a0:
00:f8:c1:c9:06:bf:ef:99:bf:12:84:dc:04:f6:2d:
7d:58:99:ae:2d:54:4d:d3:43:55:46:ce:49:b0:c2:
99:57:da:ab:3d:23:af:5b:53:c5:c3:4c:5b:bb:00:
c9:84:8e:db:7e:2f:0f:aa:93:13:18:7e:c4:0c:c1:
d8:96:82:48:2c:e2:b5:b5:8d:19:9e:ea:0e:a6:48:
5c:7a:04:9e:a1:4e:29:94:9a:92:73:37:bd:af:99:
d2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C9:7B:A5:B2:B5:9B:D1:2D:6D:84:01:D1:71:69:65:BE:C8:6F:06
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/M8l7pbK1m9EtbYQB0XFpZb7IbwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.145.128.0/19
158.120.48.0/24
158.120.50.0/24
158.120.52.0/24
158.120.54.0/24
158.120.56.0/24
158.120.58.0/24
158.120.60.0/24
158.120.62.0/24
170.100.148.0/22
170.100.204.0/24
170.100.206.0/23
192.6.64.0/22
192.6.172.0/22
192.6.252.0/22
192.25.180.0/22
192.25.200.0/22
192.25.208.0/22
192.25.232.0/22
192.25.244.0/22
192.137.24.0/22
Signature Algorithm: sha256WithRSAEncryption
03:f5:cd:66:e7:f7:5c:f0:c9:54:fd:c7:27:fd:98:f1:31:9f:
95:44:ed:d8:ef:b7:bb:af:a3:1f:d7:f7:2b:c8:94:63:a8:a3:
8c:89:07:f3:c4:43:e7:13:83:20:b4:11:28:38:17:64:fa:f7:
23:6f:a9:dd:be:75:4b:65:3a:79:51:fc:ad:76:0c:9e:de:e2:
01:43:5b:83:5a:9f:04:d0:29:bf:50:f6:c3:a6:20:b5:97:a6:
f0:fc:00:19:d3:48:1f:46:a6:2c:ef:ed:5f:85:8d:49:d6:94:
7e:56:f6:63:1d:71:ee:10:a4:1e:11:27:3b:fd:ac:4d:b1:9f:
e1:9d:d9:43:05:4e:df:5a:57:87:d9:c7:32:59:f7:37:07:1a:
75:74:0f:f7:c3:ec:72:df:15:0a:65:13:ae:45:2f:06:13:a4:
db:9a:30:bd:f2:05:07:6d:78:bd:b0:78:bb:11:25:25:52:0e:
43:37:dc:80:65:a6:76:8a:74:2c:4e:9b:1b:68:69:d0:72:ab:
6f:ac:96:95:75:76:47:bb:34:d5:dd:23:db:da:3a:99:89:29:
38:25:e9:d1:92:48:b4:aa:86:29:d9:fc:a7:d8:80:f5:a8:26:
41:ff:4c:2b:7f:ce:f7:4e:a7:ac:53:bc:a4:11:c9:73:ee:9c:
b1:bd:7c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:27:38 2025 by rpki-client