Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BRvqiKD7sfvghHmLLu1GFHk3FQk.roa
File: BRvqiKD7sfvghHmLLu1GFHk3FQk.roa (raw, json)
Hash identifier: TU5e1vMsfQVyuDp5gCEydXZ/moa7SXX8uj8YFKZiFvQ=
Subject key identifier: 05:1B:EA:88:A0:FB:B1:FB:E0:84:79:8B:2E:ED:46:14:79:37:15:09
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01979C9DE81113C8C8C8900CCEF9B0E97E67
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BRvqiKD7sfvghHmLLu1GFHk3FQk.roa
Signing time: Mon 23 Jun 2025 11:48:03 +0000
ROA not before: Mon 23 Jun 2025 11:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13213
IP address blocks: 151.240.156.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.241.34.0/24 maxlen: 24
151.241.38.0/24 maxlen: 24
151.241.42.0/24 maxlen: 24
151.241.44.0/24 maxlen: 24
151.241.46.0/24 maxlen: 24
151.241.49.0/24 maxlen: 24
151.241.114.0/24 maxlen: 24
151.241.118.0/24 maxlen: 24
151.241.120.0/24 maxlen: 24
151.241.121.0/24 maxlen: 24
151.241.124.0/24 maxlen: 24
151.241.126.0/24 maxlen: 24
151.244.7.0/24 maxlen: 24
151.244.9.0/24 maxlen: 24
151.244.10.0/24 maxlen: 24
151.244.13.0/24 maxlen: 24
151.244.15.0/24 maxlen: 24
151.244.25.0/24 maxlen: 24
151.244.27.0/24 maxlen: 24
151.244.29.0/24 maxlen: 24
151.244.31.0/24 maxlen: 24
151.244.33.0/24 maxlen: 24
151.244.35.0/24 maxlen: 24
151.244.37.0/24 maxlen: 24
151.244.39.0/24 maxlen: 24
151.244.41.0/24 maxlen: 24
151.244.43.0/24 maxlen: 24
151.244.45.0/24 maxlen: 24
151.244.47.0/24 maxlen: 24
151.244.49.0/24 maxlen: 24
151.244.51.0/24 maxlen: 24
151.244.53.0/24 maxlen: 24
151.244.71.0/24 maxlen: 24
151.244.74.0/24 maxlen: 24
151.244.94.0/24 maxlen: 24
151.244.96.0/24 maxlen: 24
151.244.98.0/24 maxlen: 24
151.244.100.0/24 maxlen: 24
151.244.104.0/24 maxlen: 24
151.244.197.0/24 maxlen: 24
151.244.200.0/24 maxlen: 24
151.244.202.0/24 maxlen: 24
151.245.7.0/24 maxlen: 24
151.245.17.0/24 maxlen: 24
151.245.19.0/24 maxlen: 24
151.245.21.0/24 maxlen: 24
151.245.23.0/24 maxlen: 24
151.245.27.0/24 maxlen: 24
151.245.31.0/24 maxlen: 24
151.245.33.0/24 maxlen: 24
151.245.35.0/24 maxlen: 24
151.245.37.0/24 maxlen: 24
151.245.39.0/24 maxlen: 24
151.245.41.0/24 maxlen: 24
151.245.43.0/24 maxlen: 24
151.245.45.0/24 maxlen: 24
151.245.47.0/24 maxlen: 24
151.245.49.0/24 maxlen: 24
151.245.51.0/24 maxlen: 24
151.245.53.0/24 maxlen: 24
151.245.55.0/24 maxlen: 24
151.245.71.0/24 maxlen: 24
151.245.73.0/24 maxlen: 24
151.245.75.0/24 maxlen: 24
151.245.93.0/24 maxlen: 24
151.245.95.0/24 maxlen: 24
151.245.97.0/24 maxlen: 24
151.245.99.0/24 maxlen: 24
151.245.101.0/24 maxlen: 24
151.245.103.0/24 maxlen: 24
151.245.105.0/24 maxlen: 24
151.245.107.0/24 maxlen: 24
151.245.135.0/24 maxlen: 24
151.245.197.0/24 maxlen: 24
151.245.200.0/24 maxlen: 24
151.245.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:9d:e8:11:13:c8:c8:c8:90:0c:ce:f9:b0:e9:7e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 23 11:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=051bea88a0fbb1fbe084798b2eed461479371509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f3:9f:28:6c:77:b6:4a:33:d6:f2:eb:1d:3a:
b4:7d:c4:dc:63:ad:cb:c6:02:b1:7b:0a:c8:f5:ca:
47:50:11:f5:37:fd:a1:a1:72:86:b9:74:1a:2b:49:
94:6d:7c:a5:3d:9e:8e:f7:dc:6a:98:15:d8:5a:db:
5c:8a:be:95:76:fe:f2:0e:ce:54:0a:20:9b:84:90:
da:3b:40:80:23:e9:78:cf:28:77:a6:e4:3e:4d:7f:
8a:0d:07:71:c1:65:72:27:a8:38:1a:84:f3:5e:26:
f7:4d:31:aa:ee:e1:f5:2d:d4:42:b9:ce:a3:c5:28:
8e:f2:2f:f9:c5:66:49:73:bf:71:54:ca:ff:a2:aa:
b0:34:9e:7c:88:5d:6b:f6:56:78:d9:bc:b5:82:ac:
ec:d9:ab:17:e8:a7:0d:26:a4:5f:28:d2:d4:84:f9:
3a:7a:c5:e8:41:e3:64:98:1c:14:d9:ef:76:aa:8c:
61:a4:94:2b:d4:2f:e3:bd:0e:f9:04:5b:f2:ae:c7:
e2:3b:5d:7b:03:44:29:cf:28:3f:79:f9:03:58:04:
ac:33:70:ce:19:03:3b:2a:4c:4e:8f:61:81:08:fb:
3e:ff:3c:c2:d1:7a:9b:78:09:6d:8f:c0:c5:8d:a9:
a2:40:01:e1:bb:21:4d:a9:17:04:77:08:1e:d9:80:
8d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1B:EA:88:A0:FB:B1:FB:E0:84:79:8B:2E:ED:46:14:79:37:15:09
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BRvqiKD7sfvghHmLLu1GFHk3FQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.156.0/24
151.240.159.0/24
151.240.162.0/24
151.240.164.0/24
151.240.166.0/24
151.240.168.0/24
151.240.170.0/24
151.240.172.0/24
151.240.174.0/24
151.240.176.0/24
151.240.178.0/24
151.240.219.0/24
151.240.221.0/24
151.240.223.0/24
151.240.225.0/24
151.241.34.0/24
151.241.38.0/24
151.241.42.0/24
151.241.44.0/24
151.241.46.0/24
151.241.49.0/24
151.241.114.0/24
151.241.118.0/24
151.241.120.0/23
151.241.124.0/24
151.241.126.0/24
151.244.7.0/24
151.244.9.0-151.244.10.255
151.244.13.0/24
151.244.15.0/24
151.244.25.0/24
151.244.27.0/24
151.244.29.0/24
151.244.31.0/24
151.244.33.0/24
151.244.35.0/24
151.244.37.0/24
151.244.39.0/24
151.244.41.0/24
151.244.43.0/24
151.244.45.0/24
151.244.47.0/24
151.244.49.0/24
151.244.51.0/24
151.244.53.0/24
151.244.71.0/24
151.244.74.0/24
151.244.94.0/24
151.244.96.0/24
151.244.98.0/24
151.244.100.0/24
151.244.104.0/24
151.244.197.0/24
151.244.200.0/24
151.244.202.0/24
151.245.7.0/24
151.245.17.0/24
151.245.19.0/24
151.245.21.0/24
151.245.23.0/24
151.245.27.0/24
151.245.31.0/24
151.245.33.0/24
151.245.35.0/24
151.245.37.0/24
151.245.39.0/24
151.245.41.0/24
151.245.43.0/24
151.245.45.0/24
151.245.47.0/24
151.245.49.0/24
151.245.51.0/24
151.245.53.0/24
151.245.55.0/24
151.245.71.0/24
151.245.73.0/24
151.245.75.0/24
151.245.93.0/24
151.245.95.0/24
151.245.97.0/24
151.245.99.0/24
151.245.101.0/24
151.245.103.0/24
151.245.105.0/24
151.245.107.0/24
151.245.135.0/24
151.245.197.0/24
151.245.200.0/24
151.245.202.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:49:e7:e2:ef:0b:5f:8c:9f:6a:06:a0:76:30:a9:69:26:04:
78:ff:9c:73:00:57:fd:90:00:9a:a0:45:2f:7f:16:a8:cb:70:
c5:bd:60:94:45:ee:71:37:80:d1:c5:8e:ad:44:54:12:05:35:
3d:d2:29:17:ab:28:ab:fb:9a:7f:83:b2:b0:15:11:6d:26:14:
d1:06:c0:d8:15:e2:95:30:98:c8:d0:7d:fc:17:4c:5c:a5:21:
ff:80:81:1b:55:f5:0d:e2:04:92:57:4a:8b:31:1b:ec:3e:84:
da:b9:72:58:6e:bd:6d:42:77:09:b7:97:86:9d:81:7a:17:66:
96:21:1d:79:a9:e1:fa:2d:9f:cb:c7:5c:16:a3:96:87:ba:65:
5f:09:7e:bb:4c:8b:0a:10:c8:7a:2a:55:18:fd:21:5b:16:d3:
e0:bf:3f:e3:ad:9e:cd:97:51:0f:dd:4a:c2:e2:df:f6:32:32:
c4:e1:fe:c2:44:26:90:9e:d0:98:6f:04:67:a3:58:9d:d5:f1:
52:23:8f:4b:42:04:fa:dd:f1:ad:ef:bb:25:cc:c6:7e:8e:d9:
61:06:ed:91:ec:e4:09:1f:de:70:59:20:57:33:70:77:a8:1e:
75:a5:76:86:47:ed:90:a1:3c:5e:58:98:86:4b:b7:d2:45:a0:
ad:f1:d5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:45:27 2025 by rpki-client