Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SK5ofiV0aHeKqj05K8xe2ynY_9Q.roa
File: SK5ofiV0aHeKqj05K8xe2ynY_9Q.roa (raw, json)
Hash identifier: Ac7SAA7+ieEa/X0MZVSXKZ9ssRqcADk1xsBPJcjATAg=
Subject key identifier: 48:AE:68:7E:25:74:68:77:8A:AA:3D:39:2B:CC:5E:DB:29:D8:FF:D4
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199BD032040570D4F04F80CEA1B2E4EAC5A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SK5ofiV0aHeKqj05K8xe2ynY_9Q.roa
Signing time: Tue 07 Oct 2025 04:52:02 +0000
ROA not before: Tue 07 Oct 2025 04:52:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212336
IP address blocks: 151.241.88.0/24 maxlen: 24
151.242.11.0/24 maxlen: 24
151.242.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:bd:03:20:40:57:0d:4f:04:f8:0c:ea:1b:2e:4e:ac:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 7 04:52:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48ae687e257468778aaa3d392bcc5edb29d8ffd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b6:a3:19:dd:34:0b:a9:40:66:af:04:b5:6b:
0b:64:d5:ba:37:5d:c1:03:03:a3:27:2e:ba:41:29:
99:8b:26:1e:e7:b0:e6:c9:25:3c:b0:8b:c3:6b:3a:
eb:ae:d7:34:c1:05:9d:28:4d:db:71:92:d9:9c:72:
a3:01:bd:81:f7:e6:ca:6f:d0:1a:2d:34:6c:60:d1:
14:be:3d:77:d5:c5:2a:86:fc:f8:a7:84:f3:9c:fc:
49:1c:19:91:d9:f4:16:f3:26:7a:7d:f2:ed:35:cd:
e6:ef:60:53:84:06:1e:b5:a5:f0:19:67:00:38:e6:
48:7c:b5:dc:71:90:15:08:63:07:ca:19:ce:d1:5c:
cf:1d:8c:e3:c2:d8:41:b1:5b:25:fc:51:f3:ed:9d:
c3:81:c8:7c:d5:db:51:c8:89:7f:98:48:68:02:54:
0a:5b:3d:eb:f0:31:86:2b:bb:b9:28:1c:07:17:e2:
01:10:2a:aa:59:f6:0c:51:53:76:ff:73:9c:c2:4b:
74:ba:74:e5:c7:d9:1a:ca:da:db:93:62:1b:72:f0:
b7:04:d1:83:8a:ff:e6:c2:5e:cf:a0:ac:ed:f0:13:
64:e0:7a:62:d2:28:4f:6f:90:76:b5:03:a0:3e:87:
d2:f1:fd:aa:98:57:49:60:0c:ba:70:b5:d3:26:5b:
84:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AE:68:7E:25:74:68:77:8A:AA:3D:39:2B:CC:5E:DB:29:D8:FF:D4
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SK5ofiV0aHeKqj05K8xe2ynY_9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.88.0/24
151.242.11.0/24
151.242.188.0/23
Signature Algorithm: sha256WithRSAEncryption
07:0d:d1:37:c0:09:af:d4:08:d4:c1:d4:71:46:e2:4d:06:6d:
d3:dd:f3:db:73:81:9a:5e:bd:72:a9:6d:a0:e2:00:8d:b2:fc:
dd:fc:23:ed:93:7c:5b:aa:51:68:d1:27:89:be:7c:17:f1:f1:
4b:ec:87:d5:20:7c:6e:c1:bf:d3:6e:f3:d1:c5:7d:d3:a3:45:
1d:b7:b3:18:9f:c3:2e:bc:1a:9c:88:ac:ac:37:b0:5e:d8:fc:
c4:91:c6:dc:45:ca:c5:cf:52:4c:82:83:18:4b:ea:41:cb:b4:
c3:a1:b5:15:ec:5f:15:d4:b8:f6:a3:34:bd:a4:b3:4c:82:c9:
41:bf:5f:c3:86:0e:bc:65:17:92:ca:ba:ca:ce:7a:67:7d:0e:
f9:74:62:2c:3c:39:11:40:6f:69:cf:37:17:21:9c:61:71:bf:
d6:e9:a1:50:55:69:46:e0:83:49:99:cc:17:61:10:6a:04:59:
76:ec:23:06:ea:d1:6a:e5:97:b2:5e:35:f9:dc:6b:4a:a6:f6:
1a:b3:20:cd:9e:d2:b1:6e:fa:d9:5d:0d:62:d2:88:c8:fc:a4:
72:5f:9a:3c:8c:8b:f0:a0:d6:1d:b4:85:d4:a3:dd:f9:37:ff:
c1:60:af:9f:f4:6b:b1:b1:04:c1:c3:e4:73:98:e4:4b:04:71:
27:4e:ae:cd
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZm9AyBAVw1PBPgM6hsuTqxaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUxMDA3MDQ1MjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGFlNjg3ZTI1NzQ2ODc3OGFhYTNkMzkyYmNjNWVkYjI5ZDhmZmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLajGd00C6lAZq8EtWsLZNW6N13B
AwOjJy66QSmZiyYe57DmySU8sIvDazrrrtc0wQWdKE3bcZLZnHKjAb2B9+bKb9Aa
LTRsYNEUvj131cUqhvz4p4TznPxJHBmR2fQW8yZ6ffLtNc3m72BThAYetaXwGWcA
OOZIfLXccZAVCGMHyhnO0VzPHYzjwthBsVsl/FHz7Z3Dgch81dtRyIl/mEhoAlQK
Wz3r8DGGK7u5KBwHF+IBECqqWfYMUVN2/3Ocwkt0unTlx9kaytrbk2IbcvC3BNGD
iv/mwl7PoKzt8BNk4Hpi0ihPb5B2tQOgPofS8f2qmFdJYAy6cLXTJluELwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEiuaH4ldGh3iqo9OSvMXtsp2P/UMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvU0s1b2ZpVjBhSGVLcWowNUs4eGUyeW5ZXzlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/FYAwQA
l/ILAwQBl/K8MA0GCSqGSIb3DQEBCwUAA4IBAQAHDdE3wAmv1AjUwdRxRuJNBm3T
3fPbc4GaXr1yqW2g4gCNsvzd/CPtk3xbqlFo0SeJvnwX8fFL7IfVIHxuwb/TbvPR
xX3To0Udt7MYn8MuvBqciKysN7Be2PzEkcbcRcrFz1JMgoMYS+pBy7TDobUV7F8V
1Lj2ozS9pLNMgslBv1/Dhg68ZReSyrrKznpnfQ75dGIsPDkRQG9pzzcXIZxhcb/W
6aFQVWlG4INJmcwXYRBqBFl27CMG6tFq5ZeyXjX53GtKpvYasyDNntKxbvrZXQ1i
0ojI/KRyX5o8jIvwoNYdtIXUo935N//BYK+f9GuxsQTBw+RzmORLBHEnTq7N
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:39 2025 by rpki-client