Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AyL4-EJ7xUk5cIERcXeMLSWgb4g.roa
File: AyL4-EJ7xUk5cIERcXeMLSWgb4g.roa (raw, json)
Hash identifier: UESyhYxspxTUAifDk5as33GK+C5kkXQBADKDjJLnQIM=
Subject key identifier: 03:22:F8:F8:42:7B:C5:49:39:70:81:11:71:77:8C:2D:25:A0:6F:88
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197A16B1C1308259A8CB49D5EEB73750709
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AyL4-EJ7xUk5cIERcXeMLSWgb4g.roa
Signing time: Tue 24 Jun 2025 10:10:40 +0000
ROA not before: Tue 24 Jun 2025 10:10:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14576
IP address blocks: 151.240.206.0/24 maxlen: 24
151.240.207.0/24 maxlen: 24
151.240.208.0/24 maxlen: 24
151.240.209.0/24 maxlen: 24
151.240.210.0/24 maxlen: 24
151.240.211.0/24 maxlen: 24
151.240.212.0/24 maxlen: 24
151.240.213.0/24 maxlen: 24
151.240.214.0/24 maxlen: 24
151.240.215.0/24 maxlen: 24
151.240.216.0/24 maxlen: 24
151.240.217.0/24 maxlen: 24
151.240.218.0/24 maxlen: 24
151.240.220.0/24 maxlen: 24
151.240.222.0/24 maxlen: 24
151.240.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:11:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a1:6b:1c:13:08:25:9a:8c:b4:9d:5e:eb:73:75:07:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 24 10:10:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0322f8f8427bc5493970811171778c2d25a06f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3d:d3:18:c5:03:3b:d3:86:44:6b:03:3b:48:
e4:62:7b:b5:e1:92:9a:86:94:30:2e:42:04:fd:e4:
96:08:e2:e4:f6:a7:92:bc:d8:07:a9:bd:c4:97:70:
41:b6:2d:28:1e:dd:ff:66:d7:17:08:bb:67:20:4f:
15:60:cb:e7:a9:b7:1c:2b:79:48:2d:48:a6:87:37:
88:f6:f3:2f:0c:2a:0e:e4:24:e8:5f:f3:f2:6b:66:
af:9a:f0:cb:18:14:08:95:0f:8c:2d:a3:df:92:bf:
90:21:dc:e5:c0:4e:92:3f:aa:7b:02:11:b8:07:87:
55:d0:2b:e7:ea:8f:c3:20:ed:0e:8f:a9:57:17:81:
d6:16:01:0f:15:cd:80:5b:53:1a:d3:e9:74:c3:65:
0a:86:9c:52:2c:2a:d9:65:62:49:e8:55:9e:65:7e:
6a:12:67:f4:48:9a:d9:be:92:5c:b7:09:a5:73:a3:
94:3f:26:f7:c3:f3:36:d5:e2:fe:ba:37:e7:28:c4:
4c:ec:4c:42:09:99:7c:d0:8f:1a:aa:08:b1:b9:6c:
9a:e8:dd:b9:1f:54:c7:20:2e:8d:d6:97:73:93:74:
8a:45:77:dc:57:fb:84:83:76:04:c3:95:3f:81:ed:
48:78:41:eb:26:85:1d:4c:05:91:35:4f:50:2f:52:
34:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:22:F8:F8:42:7B:C5:49:39:70:81:11:71:77:8C:2D:25:A0:6F:88
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AyL4-EJ7xUk5cIERcXeMLSWgb4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.206.0-151.240.218.255
151.240.220.0/24
151.240.222.0/24
151.240.224.0/24
Signature Algorithm: sha256WithRSAEncryption
55:64:b9:dc:70:53:31:0d:07:fd:25:24:f9:e4:96:ff:5c:cd:
88:7a:32:fc:5c:5f:88:eb:ac:50:6c:bc:15:b6:c1:30:d2:b8:
6e:48:49:0b:af:8f:c9:1b:fb:24:9e:a5:65:34:ed:f6:23:c6:
5a:27:d9:d9:cc:c9:cd:b1:aa:9d:e6:65:45:53:23:fe:5d:51:
d5:dd:f8:85:99:fc:35:72:12:ee:5b:a6:c0:6e:95:3f:67:e3:
cc:9c:27:f6:a2:d2:e5:ae:09:b1:9b:de:a6:0c:e7:1b:31:d9:
29:f4:b4:2f:7d:2a:e6:4f:61:19:8e:2d:8b:f5:7d:2c:e5:6c:
eb:2b:56:4b:f7:c2:ee:44:33:e1:00:9e:8a:76:b6:ed:ab:d1:
4f:a8:14:68:3c:4d:49:47:e0:4e:36:79:d5:c6:ae:40:ce:c8:
b5:44:86:b2:3a:46:a6:8c:41:a5:d9:72:b4:3a:b2:2e:bc:f0:
b0:4d:11:42:dd:84:5e:f8:2e:80:61:1f:d5:c9:a2:f7:b1:ce:
26:5f:93:88:52:0b:00:bf:65:c7:92:e6:a7:11:ab:12:44:c1:
1f:ba:d5:d2:dc:31:a1:bb:ea:ae:7a:63:8c:61:4a:9a:33:20:
67:53:76:99:59:f8:02:4a:88:ca:08:a0:f0:17:06:d1:7d:b3:
7b:f8:a3:00
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZehaxwTCCWajLSdXutzdQcJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNjI0MTAxMDQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzIyZjhmODQyN2JjNTQ5Mzk3MDgxMTE3MTc3OGMyZDI1YTA2Zjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj3TGMUDO9OGRGsDO0jkYnu14ZKa
hpQwLkIE/eSWCOLk9qeSvNgHqb3El3BBti0oHt3/ZtcXCLtnIE8VYMvnqbccK3lI
LUimhzeI9vMvDCoO5CToX/Pya2avmvDLGBQIlQ+MLaPfkr+QIdzlwE6SP6p7AhG4
B4dV0Cvn6o/DIO0Oj6lXF4HWFgEPFc2AW1Ma0+l0w2UKhpxSLCrZZWJJ6FWeZX5q
Emf0SJrZvpJctwmlc6OUPyb3w/M21eL+ujfnKMRM7ExCCZl80I8aqgixuWya6N25
H1THIC6N1pdzk3SKRXfcV/uEg3YEw5U/ge1IeEHrJoUdTAWRNU9QL1I02QIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFAMi+PhCe8VJOXCBEXF3jC0loG+IMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvQXlMNC1FSjd4VWs1Y0lFUmNYZU1MU1dnYjRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAGX8M4D
BACX8NoDBACX8NwDBACX8N4DBACX8OAwDQYJKoZIhvcNAQELBQADggEBAFVkudxw
UzENB/0lJPnklv9czYh6MvxcX4jrrFBsvBW2wTDSuG5ISQuvj8kb+ySepWU07fYj
xlon2dnMyc2xqp3mZUVTI/5dUdXd+IWZ/DVyEu5bpsBulT9n48ycJ/ai0uWuCbGb
3qYM5xsx2Sn0tC99KuZPYRmOLYv1fSzlbOsrVkv3wu5EM+EAnop2tu2r0U+oFGg8
TUlH4E42edXGrkDOyLVEhrI6RqaMQaXZcrQ6si688LBNEULdhF74LoBhH9XJovex
ziZfk4hSCwC/ZceS5qcRqxJEwR+61dLcMaG76q56Y4xhSpozIGdTdplZ+AJKiMoI
oPAXBtF9s3v4owA=
-----END CERTIFICATE-----
Generated at Wed Jul 2 22:45:01 2025 by rpki-client