Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/n1ddBGfUJrmVWxgTL2tnkOE1T2Q.roa
File: n1ddBGfUJrmVWxgTL2tnkOE1T2Q.roa (raw, json)
Hash identifier: hs4Uacz+yQEVHbmJUoQhGlwpdAZNtzRju3EXxSyKRvI=
Subject key identifier: 9F:57:5D:04:67:D4:26:B9:95:5B:18:13:2F:6B:67:90:E1:35:4F:64
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199573B7030F2166AAB7C938496960514ED
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/n1ddBGfUJrmVWxgTL2tnkOE1T2Q.roa
Signing time: Wed 17 Sep 2025 10:32:17 +0000
ROA not before: Wed 17 Sep 2025 10:32:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138888
IP address blocks: 151.242.54.0/24 maxlen: 24
151.243.107.0/24 maxlen: 24
151.243.108.0/24 maxlen: 24
151.244.16.0/21 maxlen: 24
151.244.168.0/23 maxlen: 24
151.244.216.0/23 maxlen: 24
151.244.218.0/24 maxlen: 24
151.246.48.0/21 maxlen: 24
151.246.56.0/21 maxlen: 24
151.246.80.0/21 maxlen: 24
151.246.88.0/21 maxlen: 24
151.246.96.0/21 maxlen: 24
151.246.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:3b:70:30:f2:16:6a:ab:7c:93:84:96:96:05:14:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 17 10:32:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f575d0467d426b9955b18132f6b6790e1354f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:53:a7:5e:0a:81:fb:5c:9f:98:39:a9:e8:
f4:bc:fa:30:a8:12:ac:ab:77:05:fd:a8:8c:01:d6:
e1:a4:b9:3c:f3:45:89:15:6e:28:2e:fa:3c:50:5e:
7c:61:52:e0:69:f1:34:0d:b2:4d:ff:00:4a:08:9c:
c5:c8:7d:8b:9c:ce:1f:92:9d:56:d6:15:b7:7f:41:
24:05:b0:2c:27:f5:58:53:28:df:21:92:3c:e6:8c:
67:9a:a6:58:fd:df:56:e6:83:3b:e6:28:63:bf:a8:
22:8f:a1:ed:08:ba:80:f5:cf:d6:c7:70:5b:77:a5:
cd:39:29:2d:40:3a:e5:39:a4:8c:9b:67:19:7d:e4:
4f:b4:10:11:00:fd:39:22:05:d5:f2:e6:66:23:46:
6f:1c:17:d3:6b:34:af:48:42:43:69:5e:2a:8c:e0:
88:d9:97:24:47:95:04:4d:3f:21:e3:0a:7f:06:f8:
a2:50:f9:1b:4d:ed:c0:e6:b9:c2:63:ca:74:8b:de:
9f:b0:94:0f:96:b9:0a:cd:90:93:6b:0e:90:ae:52:
9b:95:7a:2d:c3:ae:c7:08:3b:f2:3a:01:a2:e0:77:
be:bc:0e:0f:78:09:b1:0a:bf:70:0d:c8:5c:d3:6e:
64:10:eb:a1:de:9c:83:9c:56:45:f9:61:a2:b7:45:
19:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:57:5D:04:67:D4:26:B9:95:5B:18:13:2F:6B:67:90:E1:35:4F:64
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/n1ddBGfUJrmVWxgTL2tnkOE1T2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.54.0/24
151.243.107.0-151.243.108.255
151.244.16.0/21
151.244.168.0/23
151.244.216.0-151.244.218.255
151.246.48.0/20
151.246.80.0-151.246.103.255
151.246.112.0/21
Signature Algorithm: sha256WithRSAEncryption
90:5c:ca:45:18:3c:da:94:9b:53:a6:84:27:b1:a2:2f:06:b4:
97:0d:4f:2e:6d:42:9f:e4:71:02:be:e4:c2:de:a2:83:65:f5:
1a:66:ba:98:f2:46:15:47:fd:cf:9b:eb:6a:97:b5:2d:ef:08:
96:29:24:12:98:20:96:ab:7e:8e:0d:af:32:e0:ea:c2:b9:f0:
3d:52:d8:5b:10:b9:0c:a1:0c:bd:3d:09:4f:48:90:d6:18:c8:
ff:30:7e:b5:4c:af:33:34:91:12:f9:c9:63:cd:9e:a9:40:4b:
03:fa:4f:8e:13:0d:73:d2:f3:78:4a:aa:22:e7:d0:ce:a5:1b:
52:d4:9f:b6:85:40:1f:bb:b7:37:69:94:62:a1:a8:00:0c:3f:
f9:37:ab:f9:96:ac:5f:f7:67:5f:9b:d5:b0:9b:a9:4f:1e:b3:
83:6c:e5:a4:fe:e1:34:70:ea:c4:eb:91:33:17:b5:25:79:6b:
72:9b:de:81:ac:3f:76:20:b2:0a:5e:d3:2c:fc:c7:84:3d:dd:
d6:a0:f4:f6:a4:7f:fc:f9:35:e6:82:8c:ad:65:84:8d:88:49:
be:01:ca:ec:6f:29:63:77:75:c0:9a:b6:ab:79:89:fb:24:2e:
a9:12:89:07:27:bb:17:79:f5:c5:8b:0d:79:8e:20:1a:9b:60:
70:f6:59:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:38 2025 by rpki-client