
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/N11CSoBTQqfK1UlHKqGJdX80Ths.roa
File: N11CSoBTQqfK1UlHKqGJdX80Ths.roa (raw, json)
Hash identifier: jOPwOR+hz7o6wZI/3/xSBHfJlSzUVXbPQ/v46WpiSEI=
Subject key identifier: 37:5D:42:4A:80:53:42:A7:CA:D5:49:47:2A:A1:89:75:7F:34:4E:1B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199575A8F0874138E373FB7F2CC7813F914
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/N11CSoBTQqfK1UlHKqGJdX80Ths.roa
Signing time: Wed 17 Sep 2025 11:06:16 +0000
ROA not before: Wed 17 Sep 2025 11:06:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399073
IP address blocks: 151.240.123.0/24 maxlen: 24
151.240.228.0/24 maxlen: 24
151.240.230.0/24 maxlen: 24
151.240.231.0/24 maxlen: 24
151.240.232.0/24 maxlen: 24
151.240.239.0/24 maxlen: 24
151.240.241.0/24 maxlen: 24
151.240.255.0/24 maxlen: 24
151.241.41.0/24 maxlen: 24
151.241.76.0/24 maxlen: 24
151.241.91.0/24 maxlen: 24
151.241.96.0/24 maxlen: 24
151.241.97.0/24 maxlen: 24
151.241.98.0/24 maxlen: 24
151.241.101.0/24 maxlen: 24
151.241.102.0/24 maxlen: 24
151.241.236.0/24 maxlen: 24
151.241.237.0/24 maxlen: 24
151.241.238.0/24 maxlen: 24
151.241.239.0/24 maxlen: 24
151.241.248.0/24 maxlen: 24
151.241.249.0/24 maxlen: 24
151.241.250.0/24 maxlen: 24
151.241.251.0/24 maxlen: 24
151.243.214.0/24 maxlen: 24
151.243.220.0/24 maxlen: 24
151.243.237.0/24 maxlen: 24
151.243.238.0/24 maxlen: 24
151.243.243.0/24 maxlen: 24
151.243.246.0/24 maxlen: 24
151.243.249.0/24 maxlen: 24
151.243.252.0/24 maxlen: 24
151.244.57.0/24 maxlen: 24
151.244.65.0/24 maxlen: 24
151.244.68.0/24 maxlen: 24
151.244.70.0/24 maxlen: 24
151.244.73.0/24 maxlen: 24
151.244.86.0/24 maxlen: 24
151.244.88.0/24 maxlen: 24
151.244.95.0/24 maxlen: 24
151.244.103.0/24 maxlen: 24
151.245.231.0/24 maxlen: 24
151.245.232.0/24 maxlen: 24
151.245.233.0/24 maxlen: 24
151.245.234.0/24 maxlen: 24
151.245.235.0/24 maxlen: 24
151.245.236.0/24 maxlen: 24
151.245.237.0/24 maxlen: 24
151.245.248.0/24 maxlen: 24
151.245.249.0/24 maxlen: 24
151.245.250.0/24 maxlen: 24
151.245.251.0/24 maxlen: 24
151.245.252.0/24 maxlen: 24
151.245.253.0/24 maxlen: 24
151.246.205.0/24 maxlen: 24
151.246.206.0/24 maxlen: 24
151.246.207.0/24 maxlen: 24
151.246.208.0/24 maxlen: 24
151.246.209.0/24 maxlen: 24
151.246.211.0/24 maxlen: 24
151.246.212.0/24 maxlen: 24
151.246.213.0/24 maxlen: 24
151.246.219.0/24 maxlen: 24
151.246.220.0/24 maxlen: 24
151.246.221.0/24 maxlen: 24
151.247.64.0/24 maxlen: 24
151.247.65.0/24 maxlen: 24
151.247.66.0/24 maxlen: 24
151.247.67.0/24 maxlen: 24
151.247.68.0/24 maxlen: 24
151.247.69.0/24 maxlen: 24
151.247.70.0/24 maxlen: 24
151.247.71.0/24 maxlen: 24
151.247.72.0/24 maxlen: 24
151.247.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:5a:8f:08:74:13:8e:37:3f:b7:f2:cc:78:13:f9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 17 11:06:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=375d424a805342a7cad549472aa189757f344e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:cd:96:0b:76:12:e5:79:56:ad:4a:76:90:
b7:d4:bb:bd:a0:f1:d4:04:63:a4:d1:3b:17:89:e5:
77:70:09:25:1d:df:2f:58:97:c9:0f:28:68:f4:8d:
a4:a3:ab:a4:fa:1d:d4:86:35:ff:04:aa:1d:57:2b:
92:c0:56:56:59:54:cd:6c:91:ce:d1:dc:81:40:70:
03:3e:8c:8d:14:1f:9b:a1:fa:4c:28:30:6b:1c:5e:
65:be:e6:6f:56:6f:95:ee:94:8d:78:99:41:b2:4c:
3b:5b:bb:a4:7d:b9:54:ce:8d:35:d5:26:6a:96:50:
b5:ea:b0:de:81:72:3f:2d:e8:10:fc:33:62:73:ab:
5d:0a:35:6e:a2:ea:3e:67:52:84:48:67:9c:b7:c9:
a6:84:ec:f0:54:df:0b:82:97:50:0c:1f:ac:39:3f:
52:28:4e:8a:57:46:8d:ef:bb:69:b4:28:12:a4:cb:
f3:b8:a8:40:1e:ab:8b:cd:17:16:30:ff:67:b4:4d:
a1:58:33:52:d9:af:c0:61:3e:31:6c:ab:cc:25:79:
03:26:46:d7:d0:78:98:2d:fd:c2:a8:ac:59:22:73:
fc:76:12:3a:f7:a2:2f:64:82:d1:40:05:4e:94:84:
80:37:35:e2:8b:c9:b7:bc:ec:3b:73:e3:5e:59:79:
f0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5D:42:4A:80:53:42:A7:CA:D5:49:47:2A:A1:89:75:7F:34:4E:1B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/N11CSoBTQqfK1UlHKqGJdX80Ths.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.123.0/24
151.240.228.0/24
151.240.230.0-151.240.232.255
151.240.239.0/24
151.240.241.0/24
151.240.255.0/24
151.241.41.0/24
151.241.76.0/24
151.241.91.0/24
151.241.96.0-151.241.98.255
151.241.101.0-151.241.102.255
151.241.236.0/22
151.241.248.0/22
151.243.214.0/24
151.243.220.0/24
151.243.237.0-151.243.238.255
151.243.243.0/24
151.243.246.0/24
151.243.249.0/24
151.243.252.0/24
151.244.57.0/24
151.244.65.0/24
151.244.68.0/24
151.244.70.0/24
151.244.73.0/24
151.244.86.0/24
151.244.88.0/24
151.244.95.0/24
151.244.103.0/24
151.245.231.0-151.245.237.255
151.245.248.0-151.245.253.255
151.246.205.0-151.246.209.255
151.246.211.0-151.246.213.255
151.246.219.0-151.246.221.255
151.247.64.0-151.247.73.255
Signature Algorithm: sha256WithRSAEncryption
26:e8:dd:1e:27:42:63:b7:20:75:8e:92:6b:96:1e:a0:79:7a:
1e:24:ea:43:4d:a7:04:11:ff:8b:13:06:92:6a:30:76:37:06:
6f:c4:ab:09:e6:b1:3e:07:c0:70:a9:11:79:91:82:d1:2c:f5:
8e:12:49:eb:81:d5:e6:ec:7d:0e:3e:5e:91:39:d1:c3:8a:46:
7e:08:dd:0c:16:2b:f3:e0:66:a3:b1:02:dc:77:e1:aa:c1:ce:
cb:47:f5:25:15:41:b9:48:4b:a3:b4:5b:ea:aa:2c:74:cc:2e:
44:23:11:aa:15:c2:b3:ae:db:9b:81:ac:fe:e2:f9:8c:33:0c:
8f:26:58:87:4e:59:6b:9a:a2:5b:dc:57:e9:4e:0c:3d:28:05:
32:4b:c4:38:a7:de:0b:7e:42:64:a0:e6:c5:46:cb:1d:c5:0e:
ff:a9:fc:b2:d7:10:50:1f:33:98:2a:7d:c0:92:78:fa:fd:cd:
db:e4:5f:33:fd:1b:e5:ec:c0:a1:52:f1:e3:81:7f:29:e7:f5:
57:a6:0a:f7:e1:75:98:47:37:9b:23:11:43:c3:7c:a3:5b:49:
ed:e3:42:0c:9c:d9:50:24:8f:b8:c4:11:92:e3:6d:2e:84:80:
0f:6f:bf:b7:4b:61:be:73:37:74:72:47:16:6b:3f:f1:e5:a8:
48:aa:59:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:10 2025 by rpki-client