Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sWF6egruvZQcKkVhuuasGW2nRNI.roa
File: sWF6egruvZQcKkVhuuasGW2nRNI.roa (raw, json)
Hash identifier: OY7Gw+0ga1fMunjwUy7HdYjjd3122nTyXmMNb7cJELY=
Subject key identifier: B1:61:7A:7A:0A:EE:BD:94:1C:2A:45:61:BA:E6:AC:19:6D:A7:44:D2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199F5988E5BEEFD60D9E59C61839B67265B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sWF6egruvZQcKkVhuuasGW2nRNI.roa
Signing time: Sat 18 Oct 2025 04:33:59 +0000
ROA not before: Sat 18 Oct 2025 04:33:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 151.240.98.0/24 maxlen: 24
151.241.27.0/24 maxlen: 24
151.242.200.0/23 maxlen: 24
151.242.200.0/24 maxlen: 24
151.243.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f5:98:8e:5b:ee:fd:60:d9:e5:9c:61:83:9b:67:26:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 18 04:33:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1617a7a0aeebd941c2a4561bae6ac196da744d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:22:ba:3d:4e:14:d0:8b:85:64:5e:e7:4d:ac:
d4:d4:77:ac:86:da:83:e7:4a:d9:35:e9:da:99:99:
c7:a3:aa:f4:7e:ca:32:5c:e1:20:3b:e9:c4:46:42:
6f:dd:ee:35:5c:b3:33:e0:ba:b4:74:51:b7:ef:84:
1f:e1:8e:5e:a4:33:85:ca:09:fe:f6:cc:49:10:3f:
13:28:25:ee:34:ff:96:c1:3a:21:bb:ab:40:7e:5e:
f7:1f:89:66:a8:b9:5a:99:9e:57:26:1f:4a:e3:e2:
83:f6:4b:bc:25:44:ab:3f:ad:9b:a6:2d:7f:c5:6f:
59:90:be:80:d4:c2:03:3c:8d:0c:43:db:57:42:11:
4f:70:d1:a6:df:eb:81:70:55:11:b1:d8:9c:74:73:
60:a5:7c:f4:f7:95:0e:ec:91:1d:48:43:22:73:ed:
1a:f3:2f:00:b0:d4:d1:76:bd:2f:1b:6b:29:1c:1b:
81:7e:3a:e6:3e:3f:c4:c5:1a:3c:ac:f9:15:2e:60:
a0:32:da:a8:36:9d:99:e4:47:a9:8a:b6:80:cf:fa:
d7:83:26:bb:2c:01:54:08:16:f2:d2:99:30:dc:c8:
c5:3c:7e:54:1a:eb:d6:5a:36:8e:b1:36:b1:ae:75:
2f:87:ce:45:21:18:be:a0:a9:04:f1:5d:36:a6:1f:
ec:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:61:7A:7A:0A:EE:BD:94:1C:2A:45:61:BA:E6:AC:19:6D:A7:44:D2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sWF6egruvZQcKkVhuuasGW2nRNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.98.0/24
151.241.27.0/24
151.242.200.0/23
151.243.16.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:e5:13:c2:02:7e:c2:1e:ab:b1:0f:46:39:aa:f1:3b:a8:2e:
ec:71:41:b6:6d:7b:e9:e5:0f:e7:6c:ab:ac:5c:05:fe:0f:74:
67:06:3a:9f:bc:f1:cd:a8:e8:ca:b3:9e:8f:04:3d:69:35:65:
f1:7f:a1:69:72:f8:25:cf:58:cd:ba:5f:4d:ca:1a:c0:fc:ce:
e2:8a:be:d7:ab:56:ef:4f:8c:96:5c:3b:ec:ab:45:c1:8e:ba:
18:05:4e:06:b4:15:29:b2:ac:5c:2f:13:6c:7c:9c:fb:bc:63:
ff:1b:2b:b1:b2:ac:21:c6:94:9d:fa:c1:4e:4b:92:fa:f5:1b:
c8:a6:ef:48:d0:52:f9:61:4f:2f:fd:0f:d1:ef:20:a4:cf:63:
ff:6a:15:bc:d0:91:63:a1:7f:de:a3:3d:7e:cb:fc:b2:62:81:
ab:81:50:6c:6f:6a:6b:e0:23:57:fa:c9:46:83:62:d4:b0:82:
c5:1d:b7:77:ce:7f:c7:c8:2c:b3:b8:9a:82:7f:12:92:12:19:
61:44:f0:bc:83:85:87:67:8b:6e:92:b5:34:72:94:d7:6b:1c:
0f:dc:65:b5:ed:26:bc:26:e6:c4:6c:e3:3e:fc:2c:19:f1:14:
32:80:ea:96:39:ff:fc:3c:e4:79:2a:a5:0c:a7:fc:6f:85:0a:
aa:4f:2b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:40 2025 by rpki-client