Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ovDpoohdM1RGjBLCkRo1FDBnQr4.roa
File: ovDpoohdM1RGjBLCkRo1FDBnQr4.roa (raw, json)
Hash identifier: KVaM0xC/DMaSLYs11zZ1n2cyLjUX39QJPWha4QydV7o=
Subject key identifier: A2:F0:E9:A2:88:5D:33:54:46:8C:12:C2:91:1A:35:14:30:67:42:BE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199573B6FC23493F080D181EDBAFD24308C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ovDpoohdM1RGjBLCkRo1FDBnQr4.roa
Signing time: Wed 17 Sep 2025 10:32:17 +0000
ROA not before: Wed 17 Sep 2025 10:32:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138160
IP address blocks: 151.242.54.0/24 maxlen: 24
151.243.107.0/24 maxlen: 24
151.243.108.0/24 maxlen: 24
151.244.16.0/21 maxlen: 24
151.244.168.0/23 maxlen: 24
151.244.216.0/23 maxlen: 24
151.244.218.0/24 maxlen: 24
151.246.48.0/21 maxlen: 24
151.246.56.0/21 maxlen: 24
151.246.80.0/21 maxlen: 24
151.246.88.0/21 maxlen: 24
151.246.96.0/21 maxlen: 24
151.246.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:57:3b:6f:c2:34:93:f0:80:d1:81:ed:ba:fd:24:30:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 17 10:32:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2f0e9a2885d3354468c12c2911a3514306742be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:89:5e:64:58:a2:3a:6c:8b:12:2d:96:e6:9f:
98:2f:41:4e:a0:bf:18:a3:20:73:90:49:06:cd:94:
60:58:a7:9d:13:47:1f:57:d4:f9:4b:10:2f:22:bb:
2c:d0:0a:05:2f:94:76:76:f9:1a:ea:8a:0d:18:95:
d6:49:20:f2:45:ae:17:07:38:c4:6b:90:42:26:b3:
c0:e2:97:cf:c5:e0:fa:ec:59:8a:03:8a:2c:ce:ed:
61:dc:8c:3f:a3:88:83:36:de:57:9c:d3:7a:4d:62:
94:e4:62:f5:d5:1e:2d:a3:d5:86:6f:87:89:52:c7:
84:53:fb:9d:40:1f:6f:d4:11:f7:a6:93:51:6e:55:
32:94:c7:ea:25:f3:54:a8:6b:ae:81:e7:1b:5f:ed:
ba:37:5d:e4:48:c1:9e:21:58:57:cc:af:3f:7e:b5:
8e:39:80:d6:95:65:aa:fa:be:18:62:93:49:34:8d:
8e:ad:42:cf:07:fa:b9:27:20:f8:14:ac:38:1d:92:
25:57:59:ea:99:29:76:e2:fd:d4:6e:e9:8f:5e:18:
0c:58:da:62:b3:ff:0e:64:20:fb:dc:78:b6:fd:7a:
cd:29:21:df:d2:96:30:dd:e4:4b:6c:08:1a:8a:d2:
82:81:dd:a5:3e:a1:93:8b:84:6f:63:d5:1e:94:64:
b4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F0:E9:A2:88:5D:33:54:46:8C:12:C2:91:1A:35:14:30:67:42:BE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ovDpoohdM1RGjBLCkRo1FDBnQr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.54.0/24
151.243.107.0-151.243.108.255
151.244.16.0/21
151.244.168.0/23
151.244.216.0-151.244.218.255
151.246.48.0/20
151.246.80.0-151.246.103.255
151.246.112.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:d3:f8:70:ba:c2:2d:05:1c:48:2c:38:e1:25:22:b8:a6:1d:
e2:88:f9:27:35:56:78:51:15:1b:f1:38:9c:98:48:1a:5e:72:
d0:e6:e0:42:25:b6:19:f0:ab:b4:2e:c7:72:fb:b8:7c:3a:a8:
25:b8:55:3e:6f:71:80:07:26:93:11:a8:90:ba:a3:29:2e:84:
9f:1c:28:74:4d:0c:05:9c:8b:4f:58:71:4d:3f:41:97:d8:f9:
2e:35:26:ef:a2:62:09:10:4b:6b:ee:72:f5:c6:60:83:cd:f5:
d5:32:91:bb:af:7b:1e:c8:e9:f9:f6:35:4a:aa:be:d9:6b:18:
9c:de:f2:01:d2:8c:82:36:d3:11:87:38:8d:b0:94:ce:f4:65:
11:d4:8b:c4:c6:b1:3f:2c:30:d3:1d:97:4b:d7:23:9e:84:b7:
b5:48:00:1d:50:3a:12:ee:02:f5:e9:fc:28:b0:58:9b:e2:c6:
d4:01:4b:4c:b9:69:19:91:4b:f9:6a:ec:9c:bd:6a:a0:0d:86:
20:4f:50:a4:f6:bb:3b:6a:e1:ce:d6:bb:7d:35:f8:8c:c5:d1:
51:ec:12:bf:5d:c6:91:01:a8:62:e4:47:8b:56:67:65:ce:70:
67:bd:41:b8:d8:e5:0d:4e:49:f9:15:2e:5a:c7:04:f2:ac:6c:
b7:bf:5d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:40:01 2025 by rpki-client