Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/w49c7BpsQXP9JMqJJ0nj57lxovs.roa
File: w49c7BpsQXP9JMqJJ0nj57lxovs.roa (raw, json)
Hash identifier: HE0LtpVhoL40p7taALeDU7qS2WABG5J3S8j/I9h1Jes=
Subject key identifier: C3:8F:5C:EC:1A:6C:41:73:FD:24:CA:89:27:49:E3:E7:B9:71:A2:FB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199A9707427FC6AAAA87E70A552E5FBAE36
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/w49c7BpsQXP9JMqJJ0nj57lxovs.roa
Signing time: Fri 03 Oct 2025 09:39:03 +0000
ROA not before: Fri 03 Oct 2025 09:39:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 151.243.128.0/22 maxlen: 22
151.243.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a9:70:74:27:fc:6a:aa:a8:7e:70:a5:52:e5:fb:ae:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 3 09:39:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c38f5cec1a6c4173fd24ca892749e3e7b971a2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:50:4c:95:65:1a:c5:8c:51:b1:c9:55:10:39:
09:c6:a1:90:3b:c9:be:20:5a:06:53:81:61:67:72:
ac:57:23:28:13:b8:5c:15:b3:d2:db:01:35:fc:4b:
5e:58:c9:7f:ef:58:72:a7:a5:e5:46:e8:b5:8b:fb:
fd:fa:39:20:f4:40:79:a2:a6:c0:47:d8:6b:bd:e9:
74:ce:22:e3:50:5f:f3:22:c6:72:83:f2:e8:25:3e:
12:68:2b:0d:2e:68:df:b9:64:c2:44:3b:bb:9c:d9:
6b:19:fc:9f:0c:6f:e0:4c:92:58:fa:e4:7d:a2:14:
ce:8e:99:b3:07:01:92:5b:a5:7b:45:c9:d1:eb:75:
f4:d1:36:e0:04:9c:18:c6:28:d5:a8:36:1b:8a:54:
94:13:42:b6:53:93:0d:29:f8:20:1a:18:3a:89:2c:
38:db:51:55:aa:1b:fb:d1:9f:3d:bf:57:6c:e6:f4:
83:78:f6:3b:6a:15:84:05:68:81:09:27:87:61:fc:
72:73:d9:97:df:a6:28:69:e8:c7:3b:9b:20:64:ae:
9b:59:ca:d0:7f:b1:14:22:a9:0b:11:cc:92:8b:56:
ed:52:d5:dd:95:db:1e:95:d9:75:24:8b:2a:b2:be:
63:1a:65:1a:af:22:3a:e2:72:0a:ca:bb:7b:24:08:
d0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8F:5C:EC:1A:6C:41:73:FD:24:CA:89:27:49:E3:E7:B9:71:A2:FB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/w49c7BpsQXP9JMqJJ0nj57lxovs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.128.0/22
151.243.133.0/24
Signature Algorithm: sha256WithRSAEncryption
37:69:dd:b5:c0:49:dc:5b:e3:43:46:8a:c1:ef:6f:bb:c3:57:
0a:18:53:b2:8f:40:32:a2:ba:54:75:4f:40:86:90:d0:87:4e:
2e:71:e9:7a:c7:65:09:7c:78:aa:b2:75:06:9e:0c:ed:46:42:
12:6f:29:18:19:b4:26:8c:b3:99:e2:eb:84:71:87:2f:bb:a2:
fe:d8:ef:4b:f9:ef:45:9b:9b:2f:64:24:11:3f:7d:73:1a:e8:
d0:22:fc:fc:f4:78:36:e3:d7:96:86:5e:b1:25:81:24:59:b0:
04:cb:d4:c8:8b:e0:0b:27:86:79:b3:04:6e:af:bd:d2:e9:d0:
bc:9e:9c:f6:af:89:83:1c:9e:57:65:9a:03:b7:30:04:a9:6b:
d9:72:99:d5:8e:cf:ca:e8:f7:ca:9b:a2:b6:a8:23:75:0a:15:
e3:1d:d6:6f:30:12:04:a4:a8:48:c4:ce:0d:df:b6:ea:87:a2:
27:51:c6:65:3d:19:26:f8:55:88:0f:39:73:ab:db:d5:cf:d0:
cd:bd:22:d4:c9:4b:82:c1:90:8a:56:d0:96:a6:a2:ea:0d:4f:
d2:19:58:41:29:ba:c4:a6:91:5c:8c:d3:19:45:c7:f8:2a:fe:
c5:e4:c1:5c:05:36:52:15:3a:33:7c:c4:67:33:59:86:e0:0e:
40:2d:52:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:39:54 2025 by rpki-client