Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/MQtlDSoLyaxyHDZ2Mk9E9IK8YSY.roa
File: MQtlDSoLyaxyHDZ2Mk9E9IK8YSY.roa (raw, json)
Hash identifier: bgy+A8XA24oXmuYn4C/JWLaWLe4UGsVFQOwTstuvXJ0=
Subject key identifier: 31:0B:65:0D:2A:0B:C9:AC:72:1C:36:76:32:4F:44:F4:82:BC:61:26
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199DCD6F824FA67E9A1E08A00D566C1DB2B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/MQtlDSoLyaxyHDZ2Mk9E9IK8YSY.roa
Signing time: Mon 13 Oct 2025 09:11:39 +0000
ROA not before: Mon 13 Oct 2025 09:11:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25198
IP address blocks: 151.241.148.0/24 maxlen: 24
151.243.223.0/24 maxlen: 24
151.245.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:dc:d6:f8:24:fa:67:e9:a1:e0:8a:00:d5:66:c1:db:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 13 09:11:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=310b650d2a0bc9ac721c3676324f44f482bc6126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7d:93:14:43:3e:aa:b8:c0:cd:07:32:44:6a:
58:74:a2:58:81:98:b3:5d:58:d8:ef:d0:4c:e3:6b:
44:ef:4e:34:22:e7:73:93:58:15:3c:f6:2a:ee:e7:
19:f1:03:7b:25:10:06:1d:db:8f:a1:2a:4f:6d:b0:
77:96:d6:9c:ae:98:83:32:9e:5a:4e:2b:15:30:55:
af:8c:7d:71:85:99:cb:60:1c:b5:29:53:5d:03:6e:
02:fd:94:3e:d3:89:6f:12:5a:f2:a7:99:9a:ba:80:
91:82:93:94:21:cb:b2:13:3b:cc:bc:1c:37:da:b4:
e8:04:e4:b5:e5:b4:99:4e:e6:c0:dd:17:00:68:42:
38:98:03:af:d1:2f:db:ba:37:fb:ef:86:85:7a:a6:
15:97:95:d9:19:e6:12:dd:3f:fb:7e:f5:9a:8b:fb:
ce:f7:24:fc:a3:b4:dd:78:67:9a:36:b6:eb:6c:8d:
f2:73:d2:7c:f8:22:3b:3d:cf:53:e1:4a:0b:5f:fa:
94:b4:7f:f6:dd:7b:72:ab:5c:75:5d:42:18:04:52:
04:09:b1:b0:ec:7f:5f:33:10:6b:b4:d5:45:70:34:
73:8f:a2:5b:c1:42:cf:54:70:cd:b2:a9:07:5a:b5:
bc:40:c0:88:b5:1d:f0:9c:fc:ab:fb:ca:20:47:d2:
6d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0B:65:0D:2A:0B:C9:AC:72:1C:36:76:32:4F:44:F4:82:BC:61:26
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/MQtlDSoLyaxyHDZ2Mk9E9IK8YSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.148.0/24
151.243.223.0/24
151.245.165.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:d4:f4:b2:5f:8e:b6:ac:ff:1a:ca:aa:5e:d9:dd:27:61:1b:
82:84:38:f9:de:1d:8e:36:2e:d5:49:84:67:e1:1c:73:d2:bb:
9c:b2:8a:fe:70:e9:55:99:26:c5:58:c8:6a:95:5a:e0:33:c8:
7a:85:fd:7c:bb:00:ac:68:32:79:e1:02:44:1e:4f:fe:77:0a:
f4:25:d9:ed:71:20:38:ed:73:ce:75:c6:54:ee:25:55:67:2f:
9a:f6:a2:ad:ca:80:91:85:e0:23:6b:9c:cd:09:fc:52:64:c7:
4c:00:b3:e3:7c:db:56:d3:4e:6a:86:1c:1b:c4:5f:13:a0:fc:
df:22:20:37:69:d0:07:04:84:db:94:ee:ce:6c:0a:3e:9f:fc:
86:33:53:1e:ba:62:a6:9b:a2:1b:ad:c4:f9:ee:c2:0e:7c:8e:
2b:cc:e2:a1:01:d6:94:74:40:ea:4a:ab:56:dc:80:40:f4:8e:
26:be:e6:19:c6:5c:fd:6a:a7:03:6b:07:10:ec:a5:38:df:90:
44:76:2e:f8:d1:75:9f:64:3c:59:9b:a4:54:4e:bd:5a:91:d0:
25:28:db:1c:63:dd:56:0b:76:8d:0d:a9:c6:db:ce:4b:78:24:
4c:fb:f5:4d:7c:82:7f:43:8a:cf:11:12:b7:3c:6b:63:e9:9b:
a2:a0:06:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:51 2025 by rpki-client