Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/K1zwoFCIbkGGjxUxLiNyYAuGaCM.roa
File: K1zwoFCIbkGGjxUxLiNyYAuGaCM.roa (raw, json)
Hash identifier: sQDce5kp9tEiYZp7U8E8gFApA79SpkJ/RWczBArAvzQ=
Subject key identifier: 2B:5C:F0:A0:50:88:6E:41:86:8F:15:31:2E:23:72:60:0B:86:68:23
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198D19A953DD6F73D8057CCDEE550AA8480
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/K1zwoFCIbkGGjxUxLiNyYAuGaCM.roa
Signing time: Fri 22 Aug 2025 11:47:05 +0000
ROA not before: Fri 22 Aug 2025 11:47:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 37.202.194.0/24 maxlen: 24
37.202.201.0/24 maxlen: 24
151.243.7.0/24 maxlen: 24
151.243.228.0/24 maxlen: 24
151.243.231.0/24 maxlen: 24
151.244.54.0/24 maxlen: 24
151.244.167.0/24 maxlen: 24
151.244.180.0/24 maxlen: 24
151.244.224.0/24 maxlen: 24
151.244.235.0/24 maxlen: 24
151.245.129.0/24 maxlen: 24
151.245.131.0/24 maxlen: 24
151.245.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d1:9a:95:3d:d6:f7:3d:80:57:cc:de:e5:50:aa:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 22 11:47:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b5cf0a050886e41868f15312e2372600b866823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:75:31:ae:18:cd:67:93:06:f9:24:b5:df:
3a:51:ca:65:dc:ab:8c:46:b3:28:a3:c2:b5:c6:fe:
a2:0a:52:1e:70:e7:07:84:36:16:d1:8a:ce:35:b5:
b1:b2:91:4a:4b:c5:8a:44:0e:a7:4a:27:c5:bd:57:
07:7b:52:da:36:78:7d:1a:32:65:db:b5:47:e1:dc:
d4:00:42:43:a0:60:2b:8a:fc:44:1b:1e:fe:68:86:
e8:21:00:43:07:2b:bb:fb:73:a0:63:4e:dc:4d:2c:
e9:be:ac:fe:e5:c7:00:f5:64:9a:14:f0:41:25:7c:
4f:05:c2:0a:6c:fc:01:c3:ea:1b:ab:27:4b:7b:7f:
0a:90:06:54:27:e6:4d:e1:e1:36:e2:dd:62:17:0a:
f0:5a:de:d4:b6:51:c5:a9:3c:45:a7:eb:7a:53:ac:
08:d1:90:9c:65:3c:c1:44:82:e2:1e:a3:99:cb:3f:
dd:b6:59:4d:83:e8:53:84:81:59:59:d2:2d:41:99:
0e:54:81:29:e4:ff:02:fe:f4:7e:a8:f4:30:9f:87:
6f:c6:cc:cd:53:9b:58:e9:20:29:58:5f:62:a1:ae:
dd:74:ee:22:9a:cc:29:ae:f4:30:1f:46:cc:eb:66:
a9:d5:0c:f0:87:54:35:80:1e:13:cf:c3:b6:3a:e1:
fc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5C:F0:A0:50:88:6E:41:86:8F:15:31:2E:23:72:60:0B:86:68:23
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/K1zwoFCIbkGGjxUxLiNyYAuGaCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.194.0/24
37.202.201.0/24
151.243.7.0/24
151.243.228.0/24
151.243.231.0/24
151.244.54.0/24
151.244.167.0/24
151.244.180.0/24
151.244.224.0/24
151.244.235.0/24
151.245.129.0/24
151.245.131.0-151.245.132.255
Signature Algorithm: sha256WithRSAEncryption
ad:3f:2f:c7:3a:f3:39:19:56:30:f4:1c:3c:01:67:6f:74:17:
25:db:b4:7f:fd:bf:0f:7b:cb:66:78:a3:4f:9b:8a:4d:1e:00:
79:93:71:48:00:eb:20:37:3b:1c:0a:f5:44:de:e7:35:5d:a5:
9c:96:de:2d:d1:6b:42:0d:b4:18:05:a2:45:49:fe:0d:50:17:
f8:bf:d2:17:28:a1:1b:6b:7e:7e:09:ed:cc:ae:71:36:fd:2a:
65:ae:27:a3:78:04:6c:d3:e3:65:63:bf:71:f0:89:71:d3:32:
8c:6c:ea:df:bd:e9:76:01:5d:11:aa:a0:05:5d:c3:55:f2:f3:
72:cd:49:ca:0a:3f:c2:6a:c4:ed:42:e7:da:8f:b1:18:5c:1b:
02:bd:28:5d:04:2f:09:0c:16:78:3b:2b:dd:19:3a:2d:55:c7:
02:57:ca:a8:00:06:67:bc:30:ee:bf:05:31:e2:8b:39:79:70:
af:93:e4:20:29:47:67:1d:22:2d:b3:d1:b6:2a:f5:94:18:23:
19:d3:76:18:2c:59:8c:75:4a:9e:48:b4:70:b2:34:d7:27:7f:
ae:f7:be:b8:93:bf:9e:d8:b8:f4:0e:22:b5:f8:28:e5:25:39:
e0:f2:b9:d4:e0:a1:20:98:ea:d9:97:52:0d:b8:b1:5a:ea:92:
86:66:27:56
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAZjRmpU91vc9gFfM3uVQqoSAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwODIyMTE0NzA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjVjZjBhMDUwODg2ZTQxODY4ZjE1MzEyZTIzNzI2MDBiODY2ODIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmt1Ma4YzWeTBvkktd86Ucpl3KuM
RrMoo8K1xv6iClIecOcHhDYW0YrONbWxspFKS8WKRA6nSifFvVcHe1LaNnh9GjJl
27VH4dzUAEJDoGArivxEGx7+aIboIQBDByu7+3OgY07cTSzpvqz+5ccA9WSaFPBB
JXxPBcIKbPwBw+obqydLe38KkAZUJ+ZN4eE24t1iFwrwWt7UtlHFqTxFp+t6U6wI
0ZCcZTzBRILiHqOZyz/dtllNg+hThIFZWdItQZkOVIEp5P8C/vR+qPQwn4dvxszN
U5tY6SApWF9ioa7ddO4imswprvQwH0bM62ap1Qzwh1Q1gB4Tz8O2OuH8WQIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFCtc8KBQiG5Bho8VMS4jcmALhmgjMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvSzF6d29GQ0lia0dHanhVeExpTnlZQXVHYUNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQAJcrCAwQA
JcrJAwQAl/MHAwQAl/PkAwQAl/PnAwQAl/Q2AwQAl/SnAwQAl/S0AwQAl/TgAwQA
l/TrAwQAl/WBMAwDBACX9YMDBACX9YQwDQYJKoZIhvcNAQELBQADggEBAK0/L8c6
8zkZVjD0HDwBZ290FyXbtH/9vw97y2Z4o0+bik0eAHmTcUgA6yA3OxwK9UTe5zVd
pZyW3i3Ra0INtBgFokVJ/g1QF/i/0hcooRtrfn4J7cyucTb9KmWuJ6N4BGzT42Vj
v3HwiXHTMoxs6t+96XYBXRGqoAVdw1Xy83LNScoKP8JqxO1C59qPsRhcGwK9KF0E
LwkMFng7K90ZOi1VxwJXyqgABme8MO6/BTHiizl5cK+T5CApR2cdIi2z0bYq9ZQY
IxnTdhgsWYx1Sp5ItHCyNNcnf673vriTv57YuPQOIrX4KOUlOeDyudTgoSCY6tmX
Ug24sVrqkoZmJ1Y=
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:48:31 2025 by rpki-client