Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t4L0VITpXJIMeLqtXFqH5frA1RY.roa
File: t4L0VITpXJIMeLqtXFqH5frA1RY.roa (raw, json)
Hash identifier: NNtZ+ChDYMgafNgEnuq7inxL4cjGguYeDQxV/T8CWRU=
Subject key identifier: B7:82:F4:54:84:E9:5C:92:0C:78:BA:AD:5C:5A:87:E5:FA:C0:D5:16
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198B69EED661419E6C9864EC790DE731510
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t4L0VITpXJIMeLqtXFqH5frA1RY.roa
Signing time: Sun 17 Aug 2025 06:02:05 +0000
ROA not before: Sun 17 Aug 2025 06:02:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 151.241.12.0/24 maxlen: 24
151.241.128.0/22 maxlen: 24
151.242.4.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.17.0/24 maxlen: 24
151.242.27.0/24 maxlen: 24
151.242.32.0/24 maxlen: 24
151.242.40.0/24 maxlen: 24
151.242.78.0/24 maxlen: 24
151.242.79.0/24 maxlen: 24
151.242.82.0/24 maxlen: 24
151.242.139.0/24 maxlen: 24
151.243.44.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.244.3.0/24 maxlen: 24
151.244.128.0/24 maxlen: 24
151.244.129.0/24 maxlen: 24
151.244.130.0/24 maxlen: 24
151.245.85.0/24 maxlen: 24
151.245.120.0/21 maxlen: 24
151.247.195.0/24 maxlen: 24
151.247.196.0/24 maxlen: 24
151.247.197.0/24 maxlen: 24
151.247.198.0/24 maxlen: 24
151.247.199.0/24 maxlen: 24
151.247.200.0/24 maxlen: 24
151.247.218.0/24 maxlen: 24
151.247.219.0/24 maxlen: 24
151.247.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b6:9e:ed:66:14:19:e6:c9:86:4e:c7:90:de:73:15:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 17 06:02:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b782f45484e95c920c78baad5c5a87e5fac0d516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:67:2a:3b:0b:38:c1:9b:0d:cb:f1:c0:9e:58:
fa:e8:ca:6b:18:58:ca:77:78:be:47:b5:de:f4:5c:
88:57:16:c1:31:65:64:e5:19:fc:1e:4a:10:f2:d1:
62:26:c5:c0:92:e3:d4:f0:7c:79:2c:52:33:2d:49:
3f:60:ad:04:3d:58:a4:c2:19:d2:cf:da:e1:a0:59:
39:49:56:9c:6b:14:21:41:51:86:49:93:59:b9:a2:
3e:33:44:9c:35:b0:62:f9:a4:2e:44:2b:a0:a7:1f:
b4:cc:15:fd:67:4f:eb:79:72:18:b7:0b:23:40:04:
c2:c7:9f:7b:17:a8:01:7d:b4:bc:99:e5:ff:3c:ba:
91:03:0c:e3:28:89:27:64:2f:91:67:b3:5d:30:85:
77:ca:66:6e:bc:6b:ce:e1:d0:56:86:6e:6d:65:c2:
89:6f:d9:95:5a:58:ab:b6:21:2d:ea:4f:08:c4:c0:
48:d2:07:74:88:7d:49:32:02:74:21:3b:03:e2:fb:
eb:e4:c8:25:4b:1e:d0:0f:a5:f3:3b:ea:0a:6e:d3:
32:6f:1a:5e:a7:29:d3:8d:ff:bb:ac:30:e3:39:1f:
c6:59:63:f8:46:a3:d3:73:6f:83:6f:d8:c2:fb:b2:
d2:db:e9:03:42:ef:ed:02:46:15:ef:4d:e6:63:1e:
a7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:82:F4:54:84:E9:5C:92:0C:78:BA:AD:5C:5A:87:E5:FA:C0:D5:16
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t4L0VITpXJIMeLqtXFqH5frA1RY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.12.0/24
151.241.128.0/22
151.242.4.0/24
151.242.14.0/24
151.242.17.0/24
151.242.27.0/24
151.242.32.0/24
151.242.40.0/24
151.242.78.0/23
151.242.82.0/24
151.242.139.0/24
151.243.44.0/24
151.243.115.0/24
151.244.3.0/24
151.244.128.0-151.244.130.255
151.245.85.0/24
151.245.120.0/21
151.247.195.0-151.247.200.255
151.247.218.0-151.247.220.255
Signature Algorithm: sha256WithRSAEncryption
78:5c:e3:4e:f6:1b:ff:99:ed:70:db:22:73:d5:81:8f:93:ce:
cf:47:47:e7:32:40:41:5e:90:44:33:1c:8d:aa:4f:24:29:2c:
7b:b6:09:1a:37:c9:c8:7c:d9:58:15:9c:58:a1:70:8c:7e:d9:
6f:b3:18:6c:43:3f:a9:77:07:d6:22:82:b3:4a:aa:51:10:35:
f8:9e:09:b6:b9:8c:18:cd:cc:6d:b6:d1:60:fa:b5:85:13:0a:
79:08:92:62:0d:39:dd:e0:fc:da:18:5b:7e:34:cb:15:70:07:
76:c6:21:ab:7d:b1:b2:f2:04:ba:09:40:f7:ce:d6:6e:e9:cd:
dc:21:23:56:bf:4d:8e:64:a6:93:57:15:2e:61:46:51:da:5e:
27:28:4c:19:05:29:f9:0c:0a:94:f4:5a:08:1d:dd:f2:a4:57:
4d:86:f0:1f:a1:26:e7:29:87:ce:e7:ae:0b:f0:85:71:8b:0b:
42:50:9e:63:d3:d6:8b:28:cc:3c:13:3b:6c:10:8c:20:6e:e2:
42:39:21:8c:92:21:29:d4:62:d8:9d:24:3a:89:c2:d6:3a:82:
a3:d6:21:af:fb:74:83:72:4e:19:6a:a4:fc:74:5e:4d:c1:27:
7b:73:2e:65:65:b4:26:a1:8b:d5:20:85:0b:69:0f:b2:d6:af:
2a:a7:2c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:23 2025 by rpki-client