Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/w7ZOzlKTOVifyaKa4WnF7MD9o_0.roa
File: w7ZOzlKTOVifyaKa4WnF7MD9o_0.roa (raw, json)
Hash identifier: I5Yi2v1mb602Bzk3w2zn7wwLGj7rvnqk0jbhAk0jk48=
Subject key identifier: C3:B6:4E:CE:52:93:39:58:9F:C9:A2:9A:E1:69:C5:EC:C0:FD:A3:FD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199E63FB623BC5F0834960CD9B06E95B169
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/w7ZOzlKTOVifyaKa4WnF7MD9o_0.roa
Signing time: Wed 15 Oct 2025 05:02:38 +0000
ROA not before: Wed 15 Oct 2025 05:02:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395374
IP address blocks: 151.242.146.0/24 maxlen: 24
151.243.5.0/24 maxlen: 24
151.245.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e6:3f:b6:23:bc:5f:08:34:96:0c:d9:b0:6e:95:b1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 15 05:02:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3b64ece529339589fc9a29ae169c5ecc0fda3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:ba:7a:a4:0a:84:80:be:e6:d8:0a:4d:2f:
89:20:88:a5:3a:b3:74:cc:1a:1b:f3:29:42:2c:53:
5e:35:2d:88:a4:1a:5a:45:a9:e2:fd:74:7a:1d:5b:
3e:18:fc:be:6c:e8:d6:1e:6b:88:28:21:36:64:2e:
71:cd:dc:b3:f9:89:78:48:e2:68:53:80:5f:02:83:
b8:b3:7a:4a:48:72:91:9f:c1:fd:68:73:45:f7:8c:
fb:71:95:72:66:b6:bf:2f:17:b6:18:8d:c4:55:56:
27:7e:75:0f:0f:32:18:b9:f5:f4:81:8f:17:62:9e:
8e:32:b0:cd:0a:37:b8:1e:44:5e:f9:f3:58:a2:1d:
2a:58:62:15:9c:39:7c:2a:27:9b:58:eb:9c:03:78:
b3:7b:1b:4f:2f:f3:44:5e:b0:4e:da:60:01:b6:7e:
13:07:9a:26:b7:21:26:0d:c7:65:65:ea:2f:08:ae:
35:bc:a4:0d:de:6e:47:ed:43:46:f7:0e:81:a1:59:
72:ba:82:cf:3e:a6:c2:e9:fd:42:d7:34:d2:c1:04:
72:35:2f:dd:41:5f:bc:0f:51:6f:3a:0a:f7:a3:39:
b3:98:1e:cc:b2:54:04:ef:b7:31:a2:52:bc:af:5b:
37:8c:c4:25:38:e4:bb:6a:6d:bc:73:79:3e:d0:d5:
e6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B6:4E:CE:52:93:39:58:9F:C9:A2:9A:E1:69:C5:EC:C0:FD:A3:FD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/w7ZOzlKTOVifyaKa4WnF7MD9o_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.146.0/24
151.243.5.0/24
151.245.181.0/24
Signature Algorithm: sha256WithRSAEncryption
28:75:86:98:eb:fd:53:03:56:59:80:56:2d:5d:bf:f3:f5:fd:
94:43:a8:cd:9d:4d:75:be:ce:19:13:fa:fb:f7:a2:09:8f:ee:
22:01:b1:ef:1a:80:af:10:64:85:01:49:9d:79:75:07:22:0a:
c3:42:74:c9:66:8d:74:74:12:4b:b0:75:59:a5:b2:30:83:54:
86:9a:80:51:68:d1:47:ad:26:40:ef:81:43:42:9a:14:c8:42:
4b:5a:bc:6e:29:cf:68:6f:86:b1:f2:99:ea:3f:d1:93:b9:7b:
c9:ca:dc:13:b2:ae:3c:eb:dd:59:18:c5:78:04:62:f9:b2:5e:
26:c9:48:b1:ac:b9:78:96:73:4a:85:42:f6:2b:86:0b:fa:0d:
8c:58:7e:73:74:e0:48:c8:a3:6c:5e:59:ad:79:9a:0b:36:0f:
72:37:05:5a:96:6c:fc:88:72:92:87:f3:7a:e3:0a:0e:f7:cf:
ef:d5:82:67:28:b2:4f:f7:52:f8:39:e9:a4:2b:71:17:7b:33:
71:e4:51:7d:c2:a8:54:32:a9:b3:66:ca:4f:46:fe:39:cd:f2:
10:fc:ce:02:33:3e:f2:e0:87:2e:da:5b:e7:32:9c:b4:53:bd:
6d:39:59:2d:94:11:87:04:2d:2e:f1:59:dc:da:eb:d4:f8:b9:
1f:af:e8:f0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZnmP7YjvF8INJYM2bBulbFpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUxMDE1MDUwMjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2I2NGVjZTUyOTMzOTU4OWZjOWEyOWFlMTY5YzVlY2MwZmRhM2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxm6eqQKhIC+5tgKTS+JIIilOrN0
zBob8ylCLFNeNS2IpBpaRani/XR6HVs+GPy+bOjWHmuIKCE2ZC5xzdyz+Yl4SOJo
U4BfAoO4s3pKSHKRn8H9aHNF94z7cZVyZra/Lxe2GI3EVVYnfnUPDzIYufX0gY8X
Yp6OMrDNCje4HkRe+fNYoh0qWGIVnDl8KiebWOucA3izextPL/NEXrBO2mABtn4T
B5omtyEmDcdlZeovCK41vKQN3m5H7UNG9w6BoVlyuoLPPqbC6f1C1zTSwQRyNS/d
QV+8D1FvOgr3ozmzmB7MslQE77cxolK8r1s3jMQlOOS7am28c3k+0NXm/wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMO2Ts5SkzlYn8mimuFpxezA/aP9MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvdzdaT3psS1RPVmlmeWFLYTRXbkY3TUQ5b18wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/KSAwQA
l/MFAwQAl/W1MA0GCSqGSIb3DQEBCwUAA4IBAQAodYaY6/1TA1ZZgFYtXb/z9f2U
Q6jNnU11vs4ZE/r796IJj+4iAbHvGoCvEGSFAUmdeXUHIgrDQnTJZo10dBJLsHVZ
pbIwg1SGmoBRaNFHrSZA74FDQpoUyEJLWrxuKc9ob4ax8pnqP9GTuXvJytwTsq48
691ZGMV4BGL5sl4myUixrLl4lnNKhUL2K4YL+g2MWH5zdOBIyKNsXlmteZoLNg9y
NwValmz8iHKSh/N64woO98/v1YJnKLJP91L4OemkK3EXezNx5FF9wqhUMqmzZspP
Rv45zfIQ/M4CMz7y4Icu2lvnMpy0U71tOVktlBGHBC0u8Vnc2uvU+Lkfr+jw
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:05:59 2025 by rpki-client