Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xJE14O6Oa81c38HbVz9oKDB5Z_w.roa
File: xJE14O6Oa81c38HbVz9oKDB5Z_w.roa (raw, json)
Hash identifier: gqpmLXRqBn33VzGITaOFpA9yVICW3NFFQrKHV1rOyTY=
Subject key identifier: C4:91:35:E0:EE:8E:6B:CD:5C:DF:C1:DB:57:3F:68:28:30:79:67:FC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01999AA4EABDD2C7478C4412F47CBE0B8A44
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xJE14O6Oa81c38HbVz9oKDB5Z_w.roa
Signing time: Tue 30 Sep 2025 12:42:03 +0000
ROA not before: Tue 30 Sep 2025 12:42:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401776
IP address blocks: 151.241.137.0/24 maxlen: 24
151.242.27.0/24 maxlen: 24
151.244.3.0/24 maxlen: 24
151.245.151.0/24 maxlen: 24
151.245.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9a:a4:ea:bd:d2:c7:47:8c:44:12:f4:7c:be:0b:8a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 30 12:42:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c49135e0ee8e6bcd5cdfc1db573f6828307967fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:50:1d:e8:d6:c8:ea:4d:ca:69:86:5b:dd:
bc:9c:a2:fc:44:67:83:95:a9:05:35:b6:31:f1:24:
20:44:d1:90:5a:84:fd:00:1d:2d:38:dd:db:3d:71:
5e:18:ac:85:37:cb:77:13:a9:fd:7a:db:d2:5c:9f:
7e:3e:09:5e:12:34:ae:e8:49:1a:69:29:ae:a2:66:
0a:4f:22:9e:4e:d6:00:4d:85:4d:15:4b:f7:35:3a:
c9:9e:72:94:d3:d5:47:7e:42:94:f8:67:d7:56:35:
49:d2:47:5e:81:c3:8e:81:38:49:06:5f:aa:85:54:
3f:69:a8:5b:3b:e4:74:de:ca:01:7c:d1:2d:0c:2e:
a8:15:fd:81:23:d5:db:18:9c:ba:16:77:4a:1a:c7:
32:0e:cd:15:03:fd:c5:2e:16:e6:00:3a:73:d9:54:
44:54:e9:51:a7:9e:23:66:45:9c:18:f3:9b:d3:bc:
77:8f:e0:5f:ce:3d:fc:02:c5:68:94:26:e5:89:0f:
ad:03:8c:fc:9d:9e:06:cd:0c:73:1c:9c:bb:b3:c4:
4d:65:7b:78:97:23:c7:91:b6:15:4c:6d:43:c7:ce:
b0:b9:be:06:0b:9e:11:5c:42:f1:cc:70:09:3c:c9:
3d:79:49:11:98:7b:06:cd:dc:3f:67:0a:f3:4f:02:
06:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:91:35:E0:EE:8E:6B:CD:5C:DF:C1:DB:57:3F:68:28:30:79:67:FC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xJE14O6Oa81c38HbVz9oKDB5Z_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.137.0/24
151.242.27.0/24
151.244.3.0/24
151.245.151.0/24
151.245.221.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:fb:29:cc:9b:c5:d4:b5:c4:69:24:13:d3:0c:3d:fc:07:16:
79:88:06:4e:e4:59:ba:70:28:f8:46:ba:bc:fe:ea:5d:4e:8b:
a4:98:46:36:e4:91:0f:ce:7b:e8:2f:d6:8e:a6:8c:ff:33:bf:
7e:a8:6a:ea:d2:b7:ef:ad:26:c8:5e:77:b4:9e:9a:3d:e5:61:
8b:3a:da:e7:de:ee:fb:b4:8b:c2:50:55:ba:74:9b:53:90:93:
ef:fe:e8:c0:d0:76:e8:ff:71:4c:a6:fa:dc:b8:45:25:b3:b1:
1a:cf:3e:1e:c8:4f:01:7b:dd:ee:cd:a5:77:e3:3d:a7:34:65:
55:17:43:e1:ee:b4:96:62:47:7f:c9:24:77:a5:bd:78:e4:75:
1f:36:fe:b0:49:fa:1c:af:2a:a7:38:24:55:b5:8f:79:02:0f:
70:dd:6c:4f:55:36:eb:52:cc:e8:a0:5a:e6:b3:81:b7:f6:97:
25:58:f2:3f:18:3e:eb:0d:6d:16:e1:b5:3d:d3:ae:1e:aa:0f:
ed:14:57:15:bf:2c:8c:73:e2:8f:ed:9b:d8:3e:9e:a9:76:7a:
23:47:d5:1b:e4:a3:d4:60:f6:2e:43:69:15:dc:55:6b:f5:89:
85:f7:2c:6e:75:fe:77:38:a0:63:60:1f:77:f4:05:22:e0:b0:
62:3f:23:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:04:33 2025 by rpki-client