Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tsbPcuGuxKdG9IMiEtL0uSNpnyw.roa
File: tsbPcuGuxKdG9IMiEtL0uSNpnyw.roa (raw, json)
Hash identifier: 8/giDiGWl7ITN7xQX3d8h6r+p/+y3v/upiUvIW/psAM=
Subject key identifier: B6:C6:CF:72:E1:AE:C4:A7:46:F4:83:22:12:D2:F4:B9:23:69:9F:2C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199E1262BE7514FF55C714AE83597B7A4F6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tsbPcuGuxKdG9IMiEtL0uSNpnyw.roa
Signing time: Tue 14 Oct 2025 05:16:39 +0000
ROA not before: Tue 14 Oct 2025 05:16:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150249
IP address blocks: 151.242.24.0/24 maxlen: 24
151.242.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e1:26:2b:e7:51:4f:f5:5c:71:4a:e8:35:97:b7:a4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 14 05:16:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6c6cf72e1aec4a746f4832212d2f4b923699f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bb:ee:55:2e:95:6f:01:3c:f9:61:3d:d1:c1:
17:c9:2b:5c:fd:2c:af:3b:2b:c4:d6:3e:bd:10:73:
cb:12:b9:fc:63:24:34:30:24:34:0a:8a:09:b6:6e:
a8:af:ef:fe:50:45:44:a0:94:8d:e8:79:d7:1d:ad:
9e:cb:ef:6a:c7:16:45:67:64:32:79:25:e4:ff:97:
09:93:cb:e5:bf:72:d7:81:40:8b:9e:54:46:61:d9:
c7:db:8e:d9:31:e3:44:74:a7:e8:df:d2:e7:44:63:
c0:b1:40:49:3f:12:04:f7:c7:5d:c6:bd:59:8c:43:
9b:2e:b7:45:54:59:bc:ae:6c:09:b1:73:2e:f3:0b:
ad:3e:89:be:86:5e:bb:91:77:13:16:12:f8:3d:87:
36:ef:07:4e:34:c2:dc:bd:f1:28:a4:4f:dd:b2:bb:
1c:7d:96:00:ae:c5:c6:39:43:2a:70:f6:09:a8:31:
04:3a:69:09:1b:89:42:bd:1f:e6:ed:dd:3b:fb:17:
8b:ae:88:29:00:60:92:f0:97:12:b0:59:98:a2:d8:
8b:82:39:9a:85:b1:54:b7:d4:f3:8c:f2:44:2e:ee:
be:2b:c3:3b:69:1e:00:5d:8a:28:bc:6f:2b:b6:68:
ce:87:ac:d9:dd:a5:d8:34:fd:a4:27:f2:6a:d8:c9:
88:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C6:CF:72:E1:AE:C4:A7:46:F4:83:22:12:D2:F4:B9:23:69:9F:2C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tsbPcuGuxKdG9IMiEtL0uSNpnyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.24.0/24
151.242.133.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:e5:be:92:0a:16:83:e4:da:8e:2f:eb:1d:ab:a3:cb:79:73:
b4:17:8e:e8:a1:97:ed:f6:20:56:c0:db:79:33:d0:c2:92:32:
de:79:06:bc:b5:56:41:c6:b2:3a:0b:a9:77:ad:89:d0:23:0a:
05:1d:05:83:d6:ac:84:5b:a5:4d:81:e3:10:85:6c:86:db:0e:
5f:3b:a6:93:13:ab:e0:63:bd:78:49:ca:85:ff:cf:e1:86:25:
de:b9:4b:f9:e4:68:e2:f0:d5:fe:12:e0:f3:06:3d:53:e7:d8:
cb:e2:3d:50:36:c8:be:66:f5:61:1e:81:96:cb:5e:20:e0:97:
d7:5c:f0:88:e6:16:49:00:e2:3f:02:60:96:c8:d1:ee:50:f4:
2d:3a:d5:4e:0a:11:cd:aa:07:a1:50:9a:9f:ff:da:ba:77:f0:
85:16:e4:ff:75:86:56:12:40:e9:1e:69:39:d9:ab:84:a3:e6:
2d:0f:4f:63:4c:09:83:b3:85:f4:35:15:98:f2:cb:07:8a:54:
5d:2a:ab:30:d3:fb:21:a4:22:92:4f:85:cc:0b:0e:44:74:71:
e2:6e:d1:c7:fc:7d:a4:11:84:2c:90:f7:04:c3:78:c3:25:df:
4d:91:d5:27:0b:ae:9f:62:a5:25:52:29:1e:2c:c1:19:09:31:
af:e7:cb:4a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZnhJivnUU/1XHFK6DWXt6T2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUxMDE0MDUxNjM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmM2Y2Y3MmUxYWVjNGE3NDZmNDgzMjIxMmQyZjRiOTIzNjk5ZjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bvuVS6VbwE8+WE90cEXyStc/Syv
OyvE1j69EHPLErn8YyQ0MCQ0CooJtm6or+/+UEVEoJSN6HnXHa2ey+9qxxZFZ2Qy
eSXk/5cJk8vlv3LXgUCLnlRGYdnH247ZMeNEdKfo39LnRGPAsUBJPxIE98ddxr1Z
jEObLrdFVFm8rmwJsXMu8wutPom+hl67kXcTFhL4PYc27wdONMLcvfEopE/dsrsc
fZYArsXGOUMqcPYJqDEEOmkJG4lCvR/m7d07+xeLrogpAGCS8JcSsFmYotiLgjma
hbFUt9TzjPJELu6+K8M7aR4AXYoovG8rtmjOh6zZ3aXYNP2kJ/Jq2MmI5QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLbGz3LhrsSnRvSDIhLS9LkjaZ8sMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvdHNiUGN1R3V4S2RHOUlNaUV0TDB1U05wbnl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/IYAwQA
l/KFMA0GCSqGSIb3DQEBCwUAA4IBAQBP5b6SChaD5NqOL+sdq6PLeXO0F47ooZft
9iBWwNt5M9DCkjLeeQa8tVZBxrI6C6l3rYnQIwoFHQWD1qyEW6VNgeMQhWyG2w5f
O6aTE6vgY714ScqF/8/hhiXeuUv55Gji8NX+EuDzBj1T59jL4j1QNsi+ZvVhHoGW
y14g4JfXXPCI5hZJAOI/AmCWyNHuUPQtOtVOChHNqgehUJqf/9q6d/CFFuT/dYZW
EkDpHmk52auEo+YtD09jTAmDs4X0NRWY8ssHilRdKqsw0/shpCKST4XMCw5EdHHi
btHH/H2kEYQskPcEw3jDJd9NkdUnC66fYqUlUikeLMEZCTGv58tK
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:40:06 2025 by rpki-client