Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZkekfyeaVcJr-fk4yOmedupGZRE.roa
File: ZkekfyeaVcJr-fk4yOmedupGZRE.roa (raw, json)
Hash identifier: pOVaH9ic4NPtGSUTPM2c4t42B09c4QSnNLFvwppxxTI=
Subject key identifier: 66:47:A4:7F:27:9A:55:C2:6B:F9:F9:38:C8:E9:9E:76:EA:46:65:11
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198A39064B3A297A1BCFDC9FD0732AB1BB9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZkekfyeaVcJr-fk4yOmedupGZRE.roa
Signing time: Wed 13 Aug 2025 13:13:25 +0000
ROA not before: Wed 13 Aug 2025 13:13:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209854
IP address blocks: 151.240.11.0/24 maxlen: 24
151.240.32.0/24 maxlen: 24
151.240.33.0/24 maxlen: 24
151.240.34.0/24 maxlen: 24
151.240.35.0/24 maxlen: 24
151.240.36.0/24 maxlen: 24
151.240.37.0/24 maxlen: 24
151.240.38.0/24 maxlen: 24
151.240.39.0/24 maxlen: 24
151.240.40.0/24 maxlen: 24
151.240.41.0/24 maxlen: 24
151.240.42.0/24 maxlen: 24
151.240.88.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.90.0/24 maxlen: 24
151.240.204.0/24 maxlen: 24
151.240.254.0/24 maxlen: 24
151.241.6.0/24 maxlen: 24
151.244.36.0/24 maxlen: 24
151.244.55.0/24 maxlen: 24
151.244.60.0/24 maxlen: 24
151.244.107.0/24 maxlen: 24
151.244.127.0/24 maxlen: 24
151.245.94.0/24 maxlen: 24
151.245.96.0/24 maxlen: 24
151.245.100.0/24 maxlen: 24
151.245.104.0/24 maxlen: 24
151.245.106.0/24 maxlen: 24
151.245.108.0/24 maxlen: 24
151.245.110.0/24 maxlen: 24
151.245.116.0/24 maxlen: 24
151.245.117.0/24 maxlen: 24
151.245.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a3:90:64:b3:a2:97:a1:bc:fd:c9:fd:07:32:ab:1b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 13 13:13:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6647a47f279a55c26bf9f938c8e99e76ea466511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bd:68:a4:65:f2:de:07:e2:0a:02:60:40:67:
f5:42:4a:09:57:44:15:bc:34:db:50:ea:51:44:fe:
a5:62:18:04:a7:b2:cd:63:ae:56:80:42:c0:ba:13:
bf:04:20:c7:48:31:45:2f:ff:ec:51:c4:a9:9c:96:
7f:63:f9:96:3c:23:a3:22:4e:38:ee:4c:2d:22:07:
3f:75:16:88:0f:02:d4:ef:f9:3e:ed:4a:52:56:f9:
49:8e:33:f1:e8:00:29:6d:b5:3d:dd:57:e9:ef:55:
26:06:76:a2:ac:90:55:de:2f:21:8e:c6:9b:f0:d8:
c7:d2:00:58:c4:33:a4:da:54:c1:6c:e9:7e:65:29:
67:23:70:be:ad:ca:a1:e5:a0:57:bd:ac:44:f1:ef:
d7:97:03:ad:f2:a2:d3:64:05:95:21:c1:e7:a0:41:
ed:c7:86:20:83:a2:f8:dd:36:06:e8:6b:4a:d8:97:
fe:a0:49:be:ba:3e:e3:2e:0a:05:56:46:1e:bc:ce:
ea:22:39:52:12:88:13:4d:63:6e:e4:34:58:f5:c2:
a8:61:12:f9:95:7b:e6:5b:5b:3d:c2:d3:ef:5d:01:
37:e2:37:88:90:68:80:53:58:64:49:f5:f0:86:bc:
7d:cb:e2:9d:e5:d4:d6:66:fe:36:22:a9:e2:68:c3:
ae:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:47:A4:7F:27:9A:55:C2:6B:F9:F9:38:C8:E9:9E:76:EA:46:65:11
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZkekfyeaVcJr-fk4yOmedupGZRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.11.0/24
151.240.32.0-151.240.42.255
151.240.88.0-151.240.90.255
151.240.204.0/24
151.240.254.0/24
151.241.6.0/24
151.244.36.0/24
151.244.55.0/24
151.244.60.0/24
151.244.107.0/24
151.244.127.0/24
151.245.94.0/24
151.245.96.0/24
151.245.100.0/24
151.245.104.0/24
151.245.106.0/24
151.245.108.0/24
151.245.110.0/24
151.245.116.0/23
151.245.119.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:ad:43:71:86:82:91:9c:ce:4d:d3:38:41:f1:66:57:87:74:
36:61:ec:79:10:14:af:77:19:da:42:f8:6e:49:5d:ae:ab:68:
40:d1:78:c1:96:44:fe:aa:58:2f:2e:bf:d1:96:83:31:32:75:
c4:99:3a:c5:2e:af:ef:96:fc:ba:77:99:97:ea:a3:21:55:5f:
b2:08:96:cc:d1:3d:41:a5:60:d6:67:a5:c9:b2:06:86:9a:8d:
85:57:76:95:fc:4f:3c:78:a0:cd:0f:43:9f:8e:db:e8:bb:75:
f3:2c:25:c8:f7:a9:4d:cc:24:a1:96:a5:6b:0a:b3:3c:d2:95:
94:74:67:82:5c:8d:e0:58:ab:e3:63:cc:84:85:e0:12:ae:ba:
f8:03:5a:99:9d:9b:7c:cc:59:5f:3b:05:af:63:09:c9:da:a7:
1f:a0:bf:8f:00:a3:46:87:0e:1e:2c:02:83:59:31:a8:87:f3:
b4:c6:4e:da:21:47:a3:9d:1c:3b:8d:01:dc:b4:43:45:87:12:
e1:bd:95:8d:e1:62:29:7b:55:57:0e:a7:49:f8:38:17:ce:e8:
58:7a:ff:5c:d3:94:9d:0f:e5:ea:de:da:b0:e5:65:08:3b:c5:
be:4f:82:cf:a6:32:8e:04:1f:b6:c5:48:c8:d4:1c:5a:78:35:
1e:33:b1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:23:53 2025 by rpki-client