Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/y_cEE2tfQfa9PpCfVbLxlGq8fwA.roa
File: y_cEE2tfQfa9PpCfVbLxlGq8fwA.roa (raw, json)
Hash identifier: 28KK+GtIUBMDKZEnTf8YT7Wu23ah1TZWdEEslvyMbI4=
Subject key identifier: CB:F7:04:13:6B:5F:41:F6:BD:3E:90:9F:55:B2:F1:94:6A:BC:7F:00
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019791A25272524395B2109217F5B1AA846E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/y_cEE2tfQfa9PpCfVbLxlGq8fwA.roa
Signing time: Sat 21 Jun 2025 08:37:03 +0000
ROA not before: Sat 21 Jun 2025 08:37:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 151.242.93.0/24 maxlen: 24
151.242.94.0/24 maxlen: 24
151.242.95.0/24 maxlen: 24
151.242.96.0/24 maxlen: 24
151.242.98.0/24 maxlen: 24
151.242.100.0/24 maxlen: 24
151.242.101.0/24 maxlen: 24
151.242.105.0/24 maxlen: 24
151.242.107.0/24 maxlen: 24
151.242.109.0/24 maxlen: 24
151.242.113.0/24 maxlen: 24
151.242.115.0/24 maxlen: 24
151.242.184.0/22 maxlen: 22
151.242.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 19:11:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:91:a2:52:72:52:43:95:b2:10:92:17:f5:b1:aa:84:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 21 08:37:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbf704136b5f41f6bd3e909f55b2f1946abc7f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fe:da:28:43:a2:4c:dc:78:93:10:2e:ac:3e:
f5:bd:fe:b1:17:78:34:e4:a3:8d:5e:f2:b9:03:05:
bf:f0:24:64:c2:97:67:26:53:64:b3:de:6f:45:72:
05:51:10:c3:7b:94:13:cf:9a:b2:30:7e:52:14:7d:
fc:3e:7e:20:ac:19:52:36:86:e1:32:2e:e8:fe:93:
16:aa:7f:46:b6:8e:18:5c:4c:f4:4e:04:ee:1f:83:
3a:f7:92:67:cc:d7:e9:49:2a:a1:16:eb:40:a3:36:
dc:62:e5:ac:4a:e9:ce:5e:5e:fa:7a:e2:37:65:49:
99:85:ee:61:34:b7:15:42:a4:1c:5b:21:93:89:4c:
29:0c:90:09:e9:e7:a9:00:51:65:60:6b:d2:a0:e2:
26:c9:6e:53:95:ac:3d:67:d6:27:ae:34:1c:1c:8c:
4a:3f:a4:9a:c9:e8:fa:ec:2a:c5:5c:2d:fa:17:e6:
09:1e:42:ef:81:35:18:44:52:93:5c:a2:84:ba:c8:
c8:fc:85:c6:17:cf:8d:6c:28:1d:8a:57:d7:92:18:
95:05:2d:9f:f0:3d:a0:e2:46:5f:a1:24:de:25:32:
4e:6e:bc:fc:9d:df:f1:8f:56:39:96:5f:69:68:f3:
0c:a9:56:cc:f3:c6:8c:7a:1c:fb:76:b0:69:48:08:
9e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F7:04:13:6B:5F:41:F6:BD:3E:90:9F:55:B2:F1:94:6A:BC:7F:00
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/y_cEE2tfQfa9PpCfVbLxlGq8fwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.93.0-151.242.96.255
151.242.98.0/24
151.242.100.0/23
151.242.105.0/24
151.242.107.0/24
151.242.109.0/24
151.242.113.0/24
151.242.115.0/24
151.242.184.0/22
151.242.196.0/22
Signature Algorithm: sha256WithRSAEncryption
77:16:86:d3:29:19:ff:09:e3:26:f5:e0:2a:d5:ef:3d:28:e5:
c3:37:71:e3:f1:ae:3a:ae:f3:b4:68:85:bb:e2:26:40:cb:9f:
ea:c7:28:33:11:57:fb:e0:ab:9e:d8:c1:33:3a:49:c0:58:18:
3f:a2:6b:11:67:b7:a7:f1:a2:04:f6:11:27:4e:fb:b5:3e:78:
b4:8d:39:a9:b6:47:39:07:4c:4d:d5:f5:ff:bc:5b:80:ff:d4:
f1:bd:22:76:e5:94:37:ee:d2:01:1d:d9:14:a6:7a:7f:1b:60:
b1:cc:d2:c9:8b:e2:f3:5d:7e:14:45:be:77:e7:20:1f:12:ae:
87:89:08:5b:c8:ed:fe:67:08:a1:34:43:3d:dc:27:14:58:17:
21:73:5e:48:91:90:7c:af:20:fc:63:9c:43:aa:67:f4:86:be:
91:c3:11:7e:e2:54:80:08:97:e6:4d:98:8c:2f:25:6f:44:57:
87:5d:53:de:e8:1d:48:f7:f7:d3:96:9c:ab:12:97:91:41:a8:
05:24:81:bf:29:32:49:30:03:f9:31:5a:44:40:02:e0:cf:29:
de:dc:7f:d5:be:87:0d:e6:b6:a4:a7:30:eb:d8:86:40:5e:89:
87:42:be:e3:bf:21:90:76:09:f1:0f:84:7b:65:2d:41:0e:76:
b1:a4:9c:97
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 3 01:03:49 2025 by rpki-client