Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wr5KZ0vqhBII2xS9efIz7LWHe_s.roa
File: wr5KZ0vqhBII2xS9efIz7LWHe_s.roa (raw, json)
Hash identifier: DBrzk0TNiF7Wwvb5hwOykQyqrjqTmKCIVsIByF2zdbY=
Subject key identifier: C2:BE:4A:67:4B:EA:84:12:08:DB:14:BD:79:F2:33:EC:B5:87:7B:FB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199990F593BC28E1ED707E62E7AADBDA364
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wr5KZ0vqhBII2xS9efIz7LWHe_s.roa
Signing time: Tue 30 Sep 2025 05:19:03 +0000
ROA not before: Tue 30 Sep 2025 05:19:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 37.202.194.0/24 maxlen: 24
151.241.21.0/24 maxlen: 24
151.243.7.0/24 maxlen: 24
151.243.228.0/24 maxlen: 24
151.243.231.0/24 maxlen: 24
151.244.54.0/24 maxlen: 24
151.244.167.0/24 maxlen: 24
151.244.180.0/24 maxlen: 24
151.244.224.0/24 maxlen: 24
151.244.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:99:0f:59:3b:c2:8e:1e:d7:07:e6:2e:7a:ad:bd:a3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 30 05:19:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2be4a674bea841208db14bd79f233ecb5877bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:11:10:1a:81:d5:16:00:b6:61:9d:7a:f1:2a:
71:75:8a:54:36:d9:45:9a:d1:5c:88:d7:74:fc:2a:
b6:e0:60:ab:b9:e7:bc:8f:ab:de:47:17:38:dd:91:
d2:85:06:06:71:63:a6:a8:c0:01:cc:0b:44:74:9d:
b0:75:86:64:a1:f7:a7:ab:f4:c7:97:6d:47:6c:40:
c5:7f:1b:ea:b6:cc:93:3a:ad:66:04:36:e3:dd:1f:
dc:95:63:41:de:7e:c8:89:df:15:72:de:70:a0:3d:
79:df:29:79:20:72:b9:f1:d4:30:2f:ad:df:80:57:
f5:e6:18:69:f9:68:98:6c:ed:29:36:de:1c:06:0c:
10:70:52:80:a7:25:55:41:e9:2a:b1:66:c9:cb:88:
ca:5e:5f:d0:59:66:f4:8e:37:28:24:01:9c:fc:54:
57:8d:c3:7b:a4:41:1b:0a:fe:20:c2:9f:59:5d:f0:
67:41:28:4d:61:a1:22:9b:49:8c:7a:9d:76:a7:64:
9e:dc:f1:be:88:86:0e:0e:c7:38:91:f9:ec:58:94:
df:d3:35:bf:bd:45:49:23:6f:92:b4:2c:bd:cb:97:
07:31:3d:e6:76:7e:0f:ba:98:ae:f6:6a:87:1c:7f:
6b:20:3b:20:2d:50:be:99:87:4e:a0:f1:ba:54:ed:
48:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BE:4A:67:4B:EA:84:12:08:DB:14:BD:79:F2:33:EC:B5:87:7B:FB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wr5KZ0vqhBII2xS9efIz7LWHe_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.194.0/24
151.241.21.0/24
151.243.7.0/24
151.243.228.0/24
151.243.231.0/24
151.244.54.0/24
151.244.167.0/24
151.244.180.0/24
151.244.224.0/24
151.244.235.0/24
Signature Algorithm: sha256WithRSAEncryption
74:56:89:b5:8b:f7:fc:06:bf:75:11:77:58:e6:bc:c9:89:39:
6b:98:7f:2f:31:a0:dd:ef:f7:e2:c7:08:f4:69:f0:98:a6:b3:
e0:a8:26:8a:56:18:1a:8d:df:81:ed:27:1d:69:94:43:a6:b8:
b9:24:f4:8a:af:01:68:68:74:98:c7:84:74:57:3f:9e:2d:1b:
2e:5d:28:aa:ea:f0:d5:70:a2:d6:bf:5b:4d:40:a5:78:ff:8c:
4f:0c:c9:78:53:1f:03:5b:25:80:23:08:6e:89:56:6a:ca:77:
1d:d5:c6:4f:1c:46:8e:1d:14:e0:bc:d6:03:b0:8f:4e:29:85:
5c:79:54:11:b8:77:c0:7c:83:81:4f:a4:70:81:ee:24:aa:1e:
9d:e7:c5:15:36:7c:e6:ca:cc:df:7f:c2:ba:74:d5:18:9f:18:
2b:23:a6:ed:5f:7c:bd:5c:54:63:34:75:66:c9:8a:91:1f:b9:
c4:2c:b3:43:b3:ad:ec:3e:9b:b2:8a:61:f4:57:c7:ef:ed:ad:
16:4a:18:e0:0c:53:9e:c8:88:37:da:9f:c7:a0:23:57:40:2b:
72:13:d0:4d:05:91:74:b7:3b:50:48:fc:9d:ac:12:88:2f:ee:
1c:9c:39:5a:ac:8e:2d:93:eb:d1:91:6b:3f:ca:83:64:27:b6:
5d:b6:cb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:40:13 2025 by rpki-client