Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TpKl6U_G02hqwE57KUbaDqvkSYg.roa
File: TpKl6U_G02hqwE57KUbaDqvkSYg.roa (raw, json)
Hash identifier: FF7xaTI53oa4qCOO9FueSF8uiIfI1O5SuUga1lufw8A=
Subject key identifier: 4E:92:A5:E9:4F:C6:D3:68:6A:C0:4E:7B:29:46:DA:0E:AB:E4:49:88
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01996FFF9447B9E2C99206E23E562F0481A3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TpKl6U_G02hqwE57KUbaDqvkSYg.roa
Signing time: Mon 22 Sep 2025 05:57:24 +0000
ROA not before: Mon 22 Sep 2025 05:57:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 141968
IP address blocks: 151.240.0.0/24 maxlen: 24
151.243.222.0/24 maxlen: 24
151.245.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:6f:ff:94:47:b9:e2:c9:92:06:e2:3e:56:2f:04:81:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 22 05:57:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e92a5e94fc6d3686ac04e7b2946da0eabe44988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:ca:a7:0d:5c:53:54:ac:ed:e1:73:ab:ff:
e1:fb:70:a6:1d:76:54:ab:b2:1f:99:c9:03:33:cc:
86:9e:94:6b:9f:85:7f:0c:02:53:1d:78:a2:86:f7:
bc:fa:a5:c6:2e:d5:a7:9b:2f:f4:96:83:5b:b4:74:
f4:28:c1:84:29:b7:6d:a4:14:b0:13:ae:ad:11:a6:
a4:1c:e0:b4:92:3f:ab:d4:ff:ec:e9:89:e8:94:e0:
3a:ec:48:cb:dd:bd:72:7f:ae:18:63:7a:ac:57:ea:
69:6f:9d:c7:1d:6c:79:a9:99:b3:dc:af:9f:2e:bf:
4d:b3:b3:b5:53:a7:57:99:88:e3:2d:5e:be:30:5b:
b4:e3:02:11:27:b8:2e:f6:ef:3f:c1:84:32:e0:76:
a6:42:4b:04:fd:38:7c:1b:79:43:f1:d0:31:42:0c:
46:4f:fe:c8:1e:c4:fe:62:b0:66:25:bc:65:47:89:
db:f8:e2:a5:0a:03:b0:fd:f8:01:4f:cd:3e:36:a6:
c5:18:30:5d:e0:08:5b:25:63:6b:df:46:ed:3d:e4:
2f:a1:1b:60:35:77:47:b7:bd:f0:4e:8c:db:e2:03:
2a:12:70:3f:a8:04:0e:fa:1d:af:c5:f8:56:e3:64:
9b:7d:72:05:6a:8b:83:c5:c9:09:be:53:8a:9e:19:
96:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:92:A5:E9:4F:C6:D3:68:6A:C0:4E:7B:29:46:DA:0E:AB:E4:49:88
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TpKl6U_G02hqwE57KUbaDqvkSYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.0.0/24
151.243.222.0/24
151.245.85.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:00:0f:38:46:2f:83:df:f9:59:48:f1:bf:ad:c3:30:9b:39:
ad:a1:8a:01:4c:7e:7d:de:f0:4d:bb:f0:e3:5d:d6:b1:91:15:
76:34:cc:24:7b:f1:35:a7:f8:db:c0:fc:d5:f4:25:ff:f9:c8:
bb:23:2b:ff:81:2d:6f:24:c1:a3:51:83:e1:94:a7:e5:08:8e:
ee:74:1c:f4:00:f9:4c:1d:ba:9a:a6:e9:67:be:4a:e1:53:63:
8a:8a:f5:00:0c:51:6d:18:e4:72:77:4e:74:7f:96:be:0f:4c:
7a:e6:38:8e:30:9f:be:ac:ad:1e:de:e6:d8:90:7a:e0:60:53:
37:2d:58:1d:5d:2d:0f:c0:e1:8a:50:3e:5c:dd:a9:39:1f:81:
15:eb:03:79:6f:42:44:68:ab:d6:29:9a:2a:12:40:48:59:23:
54:fd:62:d7:a0:13:e2:d2:47:47:bc:5c:12:46:91:57:04:67:
5d:fc:5d:a6:e3:fc:c8:2a:91:63:07:6d:85:84:9e:3b:08:81:
1f:b0:e2:7f:5d:4c:6a:5a:bd:25:a7:99:07:9b:e5:ec:91:eb:
ec:71:c5:96:f8:58:2c:26:31:c4:ed:5d:65:be:6b:34:a0:75:
df:a0:bb:a8:d3:fa:ba:e4:54:18:1e:02:a8:4f:d8:38:15:0a:
e7:5a:b7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:32 2025 by rpki-client