
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EV9LX1OQ_kumiVCO_RWXbLFcQ5s.roa
File: EV9LX1OQ_kumiVCO_RWXbLFcQ5s.roa (raw, json)
Hash identifier: r7TO3aOIJN2p12sA2kDb1EeHW3zAAwOMW1Rmfa/6xPM=
Subject key identifier: 11:5F:4B:5F:53:90:FE:4B:A6:89:50:8E:FD:15:97:6C:B1:5C:43:9B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01997A1732D0C2AD099BF8D1FC0E27BD9F2A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EV9LX1OQ_kumiVCO_RWXbLFcQ5s.roa
Signing time: Wed 24 Sep 2025 04:59:24 +0000
ROA not before: Wed 24 Sep 2025 04:59:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42960
IP address blocks: 151.242.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7a:17:32:d0:c2:ad:09:9b:f8:d1:fc:0e:27:bd:9f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 24 04:59:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=115f4b5f5390fe4ba689508efd15976cb15c439b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:77:31:8b:96:e0:16:6a:e1:97:e0:4b:7a:ec:
b4:a1:91:4b:fd:ed:50:53:97:cd:3c:9d:b4:1b:24:
fd:71:0f:3f:72:7c:d3:05:ba:ba:40:cc:7a:90:06:
0c:b1:dc:24:4d:05:cd:a0:6b:0f:42:d7:51:d4:f5:
0f:f4:e8:a3:ae:17:37:90:b3:45:da:9c:ad:d7:4d:
6a:9e:2a:69:fa:1b:8c:76:b5:a7:40:35:9a:aa:d4:
31:4e:9d:b4:47:51:0b:58:2d:93:67:c3:c4:e4:1a:
f2:28:66:08:c3:1a:e1:3b:11:f4:ea:d7:c9:ac:aa:
0e:ca:49:98:73:4a:64:43:03:c5:82:e9:f3:3c:27:
e0:c8:b2:cc:d5:69:6e:35:86:70:bb:0b:34:39:cc:
6e:9d:4c:b3:67:91:57:54:7c:8b:ae:67:54:a1:9f:
2f:63:1b:ce:0c:6f:5f:11:b3:d4:ca:b3:28:9b:91:
37:72:d6:2f:18:04:c4:56:5a:7a:24:ff:67:15:21:
c8:60:3e:41:40:62:14:14:72:80:84:de:5d:3a:66:
30:de:75:2a:b1:88:da:63:54:ac:36:52:73:1b:0d:
76:49:0e:27:71:ce:cf:b2:11:11:ee:bf:ee:1e:1d:
e4:27:34:cd:99:ef:6f:6e:f0:9f:54:39:d2:af:d0:
4f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5F:4B:5F:53:90:FE:4B:A6:89:50:8E:FD:15:97:6C:B1:5C:43:9B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EV9LX1OQ_kumiVCO_RWXbLFcQ5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.73.0/24
Signature Algorithm: sha256WithRSAEncryption
01:21:9b:00:35:6d:fa:29:3e:7b:7e:75:5b:21:6e:ce:bb:74:
af:62:c7:1f:ec:35:87:58:47:a8:8f:b4:aa:ff:b5:d4:7e:45:
4d:8d:94:7a:d7:9e:a5:43:6c:a3:12:3d:0c:11:87:43:d0:ea:
e4:14:2e:4a:2b:26:73:65:e7:7f:e6:bf:75:35:36:51:59:fb:
ce:8d:9e:1d:9f:a4:50:d2:49:fe:4c:52:9f:91:30:8d:23:62:
fb:fd:13:9f:53:ed:1a:e6:93:af:0e:1c:7a:1a:62:06:b4:bd:
81:af:9b:6e:d1:b6:a5:7e:99:74:0f:7e:e6:15:bf:03:5d:24:
57:4c:f0:f0:25:df:1b:07:30:13:af:21:5f:56:06:20:5d:5c:
6e:c6:96:f5:11:bd:a5:e6:dd:6b:0c:01:e5:d1:b8:0a:35:fa:
52:61:b7:c2:7d:05:e0:ad:07:8d:e8:9f:e9:72:ea:73:87:47:
db:c1:69:ad:2f:93:80:63:be:0b:17:83:54:28:46:ec:ba:b2:
98:79:9b:9b:0f:49:8a:ff:fe:06:3a:0b:c4:e8:7a:eb:10:67:
8d:cb:b6:89:51:5a:06:35:68:42:dc:bb:a8:e8:42:94:cd:5b:
ff:fd:83:9b:89:82:3c:7d:e7:13:30:21:70:3c:9f:cc:3e:e9:
96:d7:6b:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZl6FzLQwq0Jm/jR/A4nvZ8qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwOTI0MDQ1OTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTVmNGI1ZjUzOTBmZTRiYTY4OTUwOGVmZDE1OTc2Y2IxNWM0MzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmncxi5bgFmrhl+BLeuy0oZFL/e1Q
U5fNPJ20GyT9cQ8/cnzTBbq6QMx6kAYMsdwkTQXNoGsPQtdR1PUP9Oijrhc3kLNF
2pyt101qnipp+huMdrWnQDWaqtQxTp20R1ELWC2TZ8PE5BryKGYIwxrhOxH06tfJ
rKoOykmYc0pkQwPFgunzPCfgyLLM1WluNYZwuws0OcxunUyzZ5FXVHyLrmdUoZ8v
YxvODG9fEbPUyrMom5E3ctYvGATEVlp6JP9nFSHIYD5BQGIUFHKAhN5dOmYw3nUq
sYjaY1SsNlJzGw12SQ4ncc7PshER7r/uHh3kJzTNme9vbvCfVDnSr9BPBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBFfS19TkP5LpolQjv0Vl2yxXEObMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvRVY5TFgxT1Ffa3VtaVZDT19SV1hiTEZjUTVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/JJMA0G
CSqGSIb3DQEBCwUAA4IBAQABIZsANW36KT57fnVbIW7Ou3SvYscf7DWHWEeoj7Sq
/7XUfkVNjZR6156lQ2yjEj0MEYdD0OrkFC5KKyZzZed/5r91NTZRWfvOjZ4dn6RQ
0kn+TFKfkTCNI2L7/ROfU+0a5pOvDhx6GmIGtL2Br5tu0balfpl0D37mFb8DXSRX
TPDwJd8bBzATryFfVgYgXVxuxpb1Eb2l5t1rDAHl0bgKNfpSYbfCfQXgrQeN6J/p
cupzh0fbwWmtL5OAY74LF4NUKEbsurKYeZubD0mK//4GOgvE6HrrEGeNy7aJUVoG
NWhC3Luo6EKUzVv//YObiYI8fecTMCFwPJ/MPumW12uX
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:14 2025 by rpki-client