Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UnRBWRjSn3CW5cetoFMypIWHUoY.roa
File: UnRBWRjSn3CW5cetoFMypIWHUoY.roa (raw, json)
Hash identifier: xmadeGARNxkLcettVDNUh2byosfhu5Js1ZB1PwW6zEY=
Subject key identifier: 52:74:41:59:18:D2:9F:70:96:E5:C7:AD:A0:53:32:A4:85:87:52:86
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199573B6F763EDD1ECEA618C8629351D49B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UnRBWRjSn3CW5cetoFMypIWHUoY.roa
Signing time: Wed 17 Sep 2025 10:32:16 +0000
ROA not before: Wed 17 Sep 2025 10:32:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137557
IP address blocks: 151.242.54.0/24 maxlen: 24
151.243.107.0/24 maxlen: 24
151.243.108.0/24 maxlen: 24
151.244.16.0/21 maxlen: 24
151.244.168.0/23 maxlen: 24
151.244.216.0/23 maxlen: 24
151.244.218.0/24 maxlen: 24
151.246.48.0/21 maxlen: 24
151.246.56.0/21 maxlen: 24
151.246.80.0/21 maxlen: 24
151.246.88.0/21 maxlen: 24
151.246.96.0/21 maxlen: 24
151.246.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:3b:6f:76:3e:dd:1e:ce:a6:18:c8:62:93:51:d4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 17 10:32:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5274415918d29f7096e5c7ada05332a485875286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bd:bb:25:a6:8e:ce:50:e3:95:82:e4:b4:4c:
6f:37:59:02:18:cb:2a:c7:a1:13:33:2c:c2:61:cd:
67:d7:1d:92:2c:66:22:8d:30:67:9d:4a:28:02:bb:
cb:01:f6:ac:88:e3:56:67:b1:be:c0:3d:9e:ec:30:
40:13:84:b5:db:3b:ac:19:1c:2b:53:8a:c2:00:52:
a4:a3:b5:7a:e5:cb:7c:7f:85:e3:bf:85:bc:20:48:
71:e8:54:2d:ce:65:ab:ea:ef:71:51:de:6e:68:10:
ea:c4:7f:42:2e:8e:7c:57:c2:93:42:a2:bb:4c:18:
1c:14:fc:e1:10:4f:d4:96:c1:d5:92:12:d1:4a:7a:
a1:df:b6:67:da:99:fe:ec:cb:38:07:9b:97:6d:0a:
c7:38:a7:54:22:bd:1b:c9:2a:82:ef:29:34:99:63:
c6:6d:31:b7:47:ed:7d:c1:d5:93:51:b8:f8:dd:cb:
9c:bb:71:e1:9c:95:a5:99:70:00:a8:06:b1:ce:eb:
e1:34:83:56:05:3c:14:2a:a1:7b:2e:d7:94:9f:37:
01:15:64:12:28:d9:04:b5:72:99:62:61:14:e1:7d:
6f:00:1b:a6:6a:e1:78:4e:bb:c6:6c:bc:77:01:b5:
3d:55:68:4b:c5:04:a0:04:fd:1f:12:14:e3:37:bb:
cf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:74:41:59:18:D2:9F:70:96:E5:C7:AD:A0:53:32:A4:85:87:52:86
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UnRBWRjSn3CW5cetoFMypIWHUoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.54.0/24
151.243.107.0-151.243.108.255
151.244.16.0/21
151.244.168.0/23
151.244.216.0-151.244.218.255
151.246.48.0/20
151.246.80.0-151.246.103.255
151.246.112.0/21
Signature Algorithm: sha256WithRSAEncryption
82:fa:8a:7a:b6:c7:41:2a:66:b2:fb:3e:81:e1:1a:39:9b:c8:
f5:02:2e:f0:4f:51:aa:e6:8b:1f:d5:38:7f:a2:71:92:fa:a1:
59:e2:c8:60:09:51:6a:fa:d4:3a:c7:08:60:d0:9e:37:e2:65:
38:07:fe:c4:3b:4a:04:dd:fb:4c:05:d7:74:fc:06:7b:04:7a:
0b:41:ee:fc:1f:2d:23:8f:c3:4d:51:75:1c:6d:75:30:f0:e7:
16:42:91:ff:3f:51:4b:de:b4:48:05:d4:cf:fa:68:da:12:a5:
01:40:d5:69:cc:40:9f:c1:dc:8f:26:a2:ff:95:01:b6:f5:a5:
2b:84:a3:1f:16:45:dc:3b:03:72:08:7b:e1:97:eb:d6:2a:f4:
2d:5c:20:2e:76:be:29:2a:c3:dc:33:8d:c1:18:2e:ea:02:7f:
b2:f1:87:58:33:de:33:10:b7:30:b5:d7:b2:0a:39:6e:59:af:
e5:61:73:83:0f:e7:b5:df:23:b7:7e:26:75:05:7e:20:42:a1:
25:c7:b6:ac:dc:35:07:c7:c8:79:fc:23:cc:7d:58:02:dd:ee:
e7:fe:cb:04:44:54:b2:f2:ed:b3:a3:f5:73:8c:5e:82:8b:84:
33:2e:77:73:ad:b5:3f:e7:15:94:14:0d:79:f2:4a:7d:7e:3f:
84:b0:0f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:06:59 2025 by rpki-client