Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kZ6B68FZgzYjnFrsiElohKT1lvY.roa
File: kZ6B68FZgzYjnFrsiElohKT1lvY.roa (raw, json)
Hash identifier: TM9tsFG/k/iINWVb23jmMYJNNHPOF+SQfaUNPwUDK9g=
Subject key identifier: 91:9E:81:EB:C1:59:83:36:23:9C:5A:EC:88:49:68:84:A4:F5:96:F6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199E7F498B9CD24D44C3B74FF855DBEE803
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kZ6B68FZgzYjnFrsiElohKT1lvY.roa
Signing time: Wed 15 Oct 2025 12:59:50 +0000
ROA not before: Wed 15 Oct 2025 12:59:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215703
IP address blocks: 151.241.100.0/24 maxlen: 24
151.241.161.0/24 maxlen: 24
151.243.93.0/24 maxlen: 24
151.243.113.0/24 maxlen: 24
151.244.72.0/24 maxlen: 24
151.244.233.0/24 maxlen: 24
151.244.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e7:f4:98:b9:cd:24:d4:4c:3b:74:ff:85:5d:be:e8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 15 12:59:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=919e81ebc1598336239c5aec88496884a4f596f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:7e:8f:89:db:aa:90:a7:63:4f:7a:b2:a9:
06:93:55:07:03:60:8a:15:36:23:47:30:61:79:07:
dc:6a:5d:4f:4c:b1:2e:e8:42:3a:f9:4c:d2:9c:16:
0b:22:63:6d:3c:2f:95:cf:9c:ad:3b:16:bc:31:2f:
f0:0b:22:01:74:97:c3:8a:da:f0:1c:66:df:71:a0:
eb:10:f8:91:31:e7:19:d5:f3:bc:05:bf:0d:e9:ca:
39:99:b9:b1:99:b2:53:75:aa:21:fc:9e:4d:33:9b:
d1:98:f7:a4:ec:78:8b:df:af:a1:b1:79:2d:1c:66:
d5:cd:ae:f4:cd:0e:76:c6:5a:35:64:4e:bd:1b:76:
36:c5:82:bf:b4:59:57:64:18:90:43:f4:9f:68:36:
0f:68:f8:ff:83:e0:6c:93:67:56:56:d4:12:58:79:
98:f2:c3:49:58:75:dc:28:28:d3:30:7d:29:f9:42:
db:d8:fc:e6:45:91:50:5d:8b:84:dc:1f:4f:32:67:
a3:84:1d:ce:49:d0:4c:3e:e6:5f:39:75:89:a9:bb:
a9:8c:63:77:55:db:57:9f:e1:b1:b7:32:43:63:73:
9f:39:d4:33:ad:27:22:47:3d:ae:cf:55:93:3c:e0:
45:06:a9:d1:da:78:b5:6b:50:00:d9:0a:56:af:02:
b6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9E:81:EB:C1:59:83:36:23:9C:5A:EC:88:49:68:84:A4:F5:96:F6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kZ6B68FZgzYjnFrsiElohKT1lvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.100.0/24
151.241.161.0/24
151.243.93.0/24
151.243.113.0/24
151.244.72.0/24
151.244.233.0/24
151.244.237.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:17:a2:29:40:01:92:ad:71:f4:cf:2f:98:b6:72:d9:76:4f:
13:4a:4d:48:71:60:9e:54:ff:e5:e5:e4:b4:54:9c:d1:f1:eb:
94:d1:1f:9d:f6:33:de:5e:c3:f4:16:ad:cc:56:ca:8b:a9:03:
11:3b:32:70:a5:1f:7b:52:29:80:fb:4d:99:98:25:7e:a4:29:
0c:cb:9f:97:95:e7:fd:24:f1:c0:22:f8:e9:49:48:b5:d6:0d:
be:aa:31:ad:22:67:f1:e1:e9:6a:0e:21:b7:ad:42:c7:2e:f8:
ed:32:58:1e:92:b4:a8:37:71:05:70:94:c1:b0:09:3c:0b:39:
93:b6:88:7a:7c:bf:da:77:2b:63:93:6d:6c:d4:89:a9:4d:74:
f6:ca:42:34:73:ae:db:cb:df:85:96:da:be:0c:86:26:dc:c7:
e3:8d:c9:74:d7:69:9a:64:8a:23:0f:42:d6:84:01:e6:6c:4e:
a0:5d:64:32:b1:cf:3f:ce:2c:ce:7c:69:7b:24:f2:f1:ba:3d:
48:10:31:d7:0e:64:e6:c7:5d:6e:48:eb:c7:9c:37:70:73:8c:
e1:e8:b7:9a:32:97:fa:5f:01:bd:12:26:02:c5:6e:de:c7:d5:
8b:ad:11:cf:0c:45:69:b1:6c:18:38:37:64:c4:7d:63:9a:66:
1e:54:09:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:57 2025 by rpki-client