Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/86Iy12y0ATInhSXZoxWPr6e935I.roa
File: 86Iy12y0ATInhSXZoxWPr6e935I.roa (raw, json)
Hash identifier: KhbWY+VzzyLJoCkgkRI5uz7F53mNSwo84f5pgXwurPo=
Subject key identifier: F3:A2:32:D7:6C:B4:01:32:27:85:25:D9:A3:15:8F:AF:A7:BD:DF:92
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198B6854B70FAC3197ED8E3C4962369FBC6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/86Iy12y0ATInhSXZoxWPr6e935I.roa
Signing time: Sun 17 Aug 2025 05:34:05 +0000
ROA not before: Sun 17 Aug 2025 05:34:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 37.202.206.0/24 maxlen: 24
151.242.49.0/24 maxlen: 24
151.243.64.0/20 maxlen: 24
151.243.97.0/24 maxlen: 24
151.243.106.0/24 maxlen: 24
151.244.181.0/24 maxlen: 24
151.244.221.0/24 maxlen: 24
151.244.223.0/24 maxlen: 24
151.244.229.0/24 maxlen: 24
151.244.230.0/24 maxlen: 24
151.247.226.0/24 maxlen: 24
151.247.232.0/24 maxlen: 24
151.247.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b6:85:4b:70:fa:c3:19:7e:d8:e3:c4:96:23:69:fb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 17 05:34:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3a232d76cb40132278525d9a3158fafa7bddf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:31:09:a2:20:5f:55:00:64:25:15:97:d7:75:
60:74:96:a1:61:b3:16:61:d6:d8:98:18:05:fb:5e:
70:d8:00:23:b9:db:16:16:90:45:d5:d3:28:bd:89:
23:c0:5a:99:5d:fa:3e:83:0e:84:ff:0a:32:1d:3d:
f8:e3:de:7c:b4:70:1d:8f:21:76:6a:44:7e:cc:e1:
c6:64:db:01:27:58:c8:56:fe:04:c5:1e:84:52:24:
51:12:d4:39:b8:ff:35:f5:e3:eb:9b:5b:f6:0d:6e:
dd:be:04:18:12:04:c3:ac:e1:e3:10:fc:79:0a:ad:
81:fe:3c:9d:27:30:25:67:70:ce:e5:d4:82:5c:b7:
e1:fb:86:ff:1b:2e:f3:62:33:62:3e:3c:32:98:db:
e0:04:55:66:7e:85:5e:af:23:89:a4:06:67:41:0d:
c2:21:67:52:6f:84:49:97:a9:8b:ab:2d:bb:22:bf:
e0:45:34:8d:99:8d:d2:61:f9:16:ee:50:3f:f4:69:
c9:7e:09:cc:da:d7:42:f2:10:a9:68:1a:b8:63:39:
2e:02:e1:1f:3c:47:e0:7c:e1:c1:45:f4:e9:0f:a1:
cb:60:53:c5:f6:30:99:84:18:f6:1b:05:94:57:70:
c7:bf:c1:8a:eb:49:8c:47:73:11:b4:1b:77:49:fa:
4b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A2:32:D7:6C:B4:01:32:27:85:25:D9:A3:15:8F:AF:A7:BD:DF:92
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/86Iy12y0ATInhSXZoxWPr6e935I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.206.0/24
151.242.49.0/24
151.243.64.0/20
151.243.97.0/24
151.243.106.0/24
151.244.181.0/24
151.244.221.0/24
151.244.223.0/24
151.244.229.0-151.244.230.255
151.247.226.0/24
151.247.232.0/24
151.247.239.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:fe:b3:11:66:30:f8:42:29:79:e4:fb:11:fd:01:d7:0a:6e:
4e:61:3e:8b:87:7e:b8:a0:cc:ab:e6:07:e9:3e:37:4a:85:ef:
e1:fd:a9:b2:89:64:10:bb:6b:49:d0:ef:27:33:a4:ca:fe:75:
84:47:45:c6:63:c9:f3:4b:0b:8d:0f:e8:a4:79:b3:2b:9b:fd:
be:92:5c:36:5b:ad:96:86:90:fc:95:e1:85:fc:67:62:17:98:
f9:47:82:67:86:fa:36:f8:64:0a:72:7c:1a:85:30:ee:19:22:
42:09:f1:bc:72:99:bf:33:66:0b:99:59:4e:97:8f:21:94:38:
37:c7:97:f6:8a:82:f7:fe:e4:12:6d:37:08:18:82:d7:03:91:
e7:18:cb:aa:2c:a4:1d:ab:4f:57:24:99:d7:7c:88:4a:7c:67:
fd:9d:99:7a:9d:58:f6:49:f0:95:6a:d5:93:d9:34:c5:25:88:
64:9e:f3:6d:ee:de:86:88:d5:0e:c2:76:d0:ce:5b:c5:31:c6:
35:6a:71:72:45:fa:af:8c:ea:19:e2:a7:fa:e1:69:a3:76:cf:
fd:13:88:33:88:2d:f1:b0:fb:53:ef:77:f9:bb:d9:12:17:8a:
9a:85:bd:50:29:11:44:28:b4:67:22:23:5b:71:84:7a:58:7e:
79:da:bb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:06:52 2025 by rpki-client