
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yeCJcqlyYkPwMhyxa0bgJoENNM0.roa
File: yeCJcqlyYkPwMhyxa0bgJoENNM0.roa (raw, json)
Hash identifier: 0url8PiNy0GqXxk4eFIc2R/WldrGxFISzlrkCd3ww4I=
Subject key identifier: C9:E0:89:72:A9:72:62:43:F0:32:1C:B1:6B:46:E0:26:81:0D:34:CD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199FADFDDC06F40B768EFAD2202EAB14FAC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yeCJcqlyYkPwMhyxa0bgJoENNM0.roa
Signing time: Sun 19 Oct 2025 05:09:59 +0000
ROA not before: Sun 19 Oct 2025 05:09:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205886
IP address blocks: 37.202.201.0/24 maxlen: 24
151.240.152.0/24 maxlen: 24
151.241.25.0/24 maxlen: 24
151.241.29.0/24 maxlen: 24
151.241.94.0/24 maxlen: 24
151.241.104.0/24 maxlen: 24
151.241.144.0/24 maxlen: 24
151.242.79.0/24 maxlen: 24
151.245.0.0/17 maxlen: 24
151.245.29.0/24 maxlen: 24
151.247.138.0/24 maxlen: 24
151.247.149.0/24 maxlen: 24
151.247.238.0/24 maxlen: 24
151.247.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:df:dd:c0:6f:40:b7:68:ef:ad:22:02:ea:b1:4f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 19 05:09:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9e08972a9726243f0321cb16b46e026810d34cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cd:a5:ef:4c:16:85:8a:a3:a5:21:c6:1c:62:
70:cb:7a:bd:a2:78:19:e2:d9:89:e5:fa:9c:31:19:
6a:4e:65:12:cb:65:d9:e9:3b:1d:9a:46:e7:f3:38:
23:da:51:ac:ba:38:34:71:74:08:8b:7e:b0:ef:89:
d5:b2:ac:5f:b0:32:a6:39:50:eb:3b:22:f4:5f:75:
6c:9a:87:1d:94:d4:4e:25:96:5a:40:b8:f4:c3:dd:
71:41:19:5e:96:d4:ba:34:84:f3:cf:0d:87:b9:4e:
61:5f:31:fd:a7:41:f0:87:e5:fc:df:49:f0:8c:67:
5f:b4:63:d3:16:5a:b6:87:37:50:80:9c:d3:e9:82:
51:da:65:d2:84:d5:c0:c1:42:f7:78:3e:3c:13:c1:
9b:0f:40:18:0f:5b:d0:aa:2d:f1:6f:66:c7:59:46:
60:98:bb:0b:7e:ae:d1:15:be:f4:87:9f:5e:28:01:
6b:e2:55:38:f8:2f:75:d3:0e:57:80:00:46:47:ea:
4b:79:71:a8:89:84:c4:12:d9:a2:11:d1:bb:da:ff:
5e:fd:43:7e:75:63:61:48:8b:91:0f:35:5b:fd:1d:
d9:ec:86:f6:c7:5e:cd:ee:4a:8d:50:7c:6a:10:b8:
af:3f:f6:88:64:47:c3:6d:65:ee:b7:1e:97:a8:b4:
51:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E0:89:72:A9:72:62:43:F0:32:1C:B1:6B:46:E0:26:81:0D:34:CD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yeCJcqlyYkPwMhyxa0bgJoENNM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.201.0/24
151.240.152.0/24
151.241.25.0/24
151.241.29.0/24
151.241.94.0/24
151.241.104.0/24
151.241.144.0/24
151.242.79.0/24
151.245.0.0/17
151.247.138.0/24
151.247.149.0/24
151.247.238.0/24
151.247.242.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:dd:66:af:dd:99:be:8a:f4:81:47:07:3a:b6:6b:e2:40:b4:
b5:c3:38:bd:f7:71:94:d9:61:b5:23:1f:b1:40:9e:a3:2c:cb:
02:7b:6d:33:83:b5:76:69:56:05:95:c6:cb:08:95:6b:d9:ea:
77:98:7a:d4:3a:fa:b9:f0:2a:92:33:e1:bb:94:9c:ee:6c:ea:
d3:5b:e2:6a:7e:39:6d:9f:c0:ae:d9:30:a3:f5:d6:5b:72:85:
e9:c9:98:37:4b:35:b1:fc:8c:8a:78:03:60:ac:ac:96:13:ed:
09:6c:c4:c8:be:0b:b8:40:04:03:5b:14:c4:23:09:2f:22:2c:
85:88:b5:c8:b3:26:a3:2f:0e:9f:e7:d7:5d:7b:a7:eb:cf:9e:
78:b5:67:7e:39:61:86:83:e6:64:9d:75:28:95:dc:d7:48:2a:
a5:8a:ff:50:2d:3d:27:79:13:65:c6:c4:b5:fe:47:76:77:04:
86:94:64:9e:c7:50:0c:9d:92:f1:56:cc:9c:db:d0:a0:e7:12:
af:c2:22:e7:72:64:46:bd:dc:33:3a:64:7c:ec:0f:73:51:96:
a8:b0:41:e2:b9:fe:28:10:7e:6d:34:d0:96:19:43:ab:5a:d5:
9d:47:d7:e3:eb:56:2c:a5:4d:40:a4:33:02:4f:06:56:0d:cc:
9e:11:13:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:18 2025 by rpki-client