Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zY7aLKT9IuQQ7R9jSQQt6BfL8sE.roa
File: zY7aLKT9IuQQ7R9jSQQt6BfL8sE.roa (raw, json)
Hash identifier: q3K2+3VYpxVsZPTdwMpKkLer0H4JM/Mna5x0Ded/Vcc=
Subject key identifier: CD:8E:DA:2C:A4:FD:22:E4:10:ED:1F:63:49:04:2D:E8:17:CB:F2:C1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198D1A100C07F95FDB5DACC781DF3A019E8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zY7aLKT9IuQQ7R9jSQQt6BfL8sE.roa
Signing time: Fri 22 Aug 2025 11:54:06 +0000
ROA not before: Fri 22 Aug 2025 11:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54252
IP address blocks: 151.240.169.0/24 maxlen: 24
151.241.43.0/24 maxlen: 24
151.241.48.0/24 maxlen: 24
151.241.51.0/24 maxlen: 24
151.241.164.0/24 maxlen: 24
151.244.72.0/24 maxlen: 24
151.244.203.0/24 maxlen: 24
151.244.240.0/24 maxlen: 24
151.245.76.0/24 maxlen: 24
151.245.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d1:a1:00:c0:7f:95:fd:b5:da:cc:78:1d:f3:a0:19:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 22 11:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd8eda2ca4fd22e410ed1f6349042de817cbf2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:25:a4:98:e4:b8:90:1e:5a:4b:55:dc:05:
92:d5:73:95:20:24:d8:05:ce:54:ea:6d:21:60:ff:
34:c4:7f:9b:69:f8:d4:7c:fe:33:07:8c:da:e7:a1:
be:87:40:f7:27:eb:77:23:38:c9:b8:10:09:bf:88:
48:b1:a5:3c:d1:93:fd:3c:f1:44:29:83:88:22:98:
05:14:9e:c2:b8:39:02:a6:2c:8f:fb:e6:f3:31:75:
f5:b9:38:ec:51:bc:50:b1:f6:fc:64:d0:e3:86:06:
a5:24:49:92:f8:af:04:2e:1b:1e:6b:20:48:6a:68:
43:14:dc:54:e0:cd:00:38:44:47:40:60:a0:23:ea:
03:7f:b1:30:43:9d:a7:bb:ab:41:77:16:2a:91:8d:
09:ce:1d:69:a8:06:3f:8b:63:c4:fd:4b:4c:e9:1b:
99:ea:43:d3:25:6d:53:98:d2:c7:31:89:45:02:71:
7f:d6:11:53:20:c4:87:62:33:27:b1:59:2c:c8:0f:
ea:29:e9:d3:e0:df:54:1d:a9:84:5b:f4:ac:58:84:
7a:0f:04:1e:6e:62:06:a8:9a:08:99:3b:cd:53:5e:
8d:bd:db:d8:5f:46:8c:b6:89:f7:db:b5:8b:7f:b5:
a1:8b:c1:93:93:de:50:0b:3c:0d:66:21:1a:9d:61:
91:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8E:DA:2C:A4:FD:22:E4:10:ED:1F:63:49:04:2D:E8:17:CB:F2:C1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zY7aLKT9IuQQ7R9jSQQt6BfL8sE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.169.0/24
151.241.43.0/24
151.241.48.0/24
151.241.51.0/24
151.241.164.0/24
151.244.72.0/24
151.244.203.0/24
151.244.240.0/24
151.245.76.0/24
151.245.203.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ef:9c:c3:7e:99:28:5e:95:da:98:e2:d2:84:77:db:d9:a8:
84:e8:d8:a7:42:d7:aa:39:2a:4a:28:6d:41:45:bf:f2:58:e8:
b7:bc:74:9a:fe:0f:4b:cd:3c:49:3b:de:ed:22:92:e8:ca:f2:
15:9b:a3:e2:bb:41:ad:69:4b:fa:a0:21:d7:45:9e:6c:20:23:
f1:a4:2e:14:f6:92:68:b1:03:32:f8:cc:7f:25:3b:c3:ac:8d:
e5:5e:f7:c8:9a:69:75:87:a8:fe:e2:7b:2f:b1:ab:c5:ea:3a:
51:5a:77:1b:bd:1c:49:93:99:1a:ae:52:d7:80:b6:6c:c3:7b:
e5:01:04:fc:1d:8a:ff:f2:f0:85:65:8a:5e:80:a7:76:8d:22:
cb:fb:fe:33:0c:57:83:cc:44:81:a8:ca:f8:50:dc:f0:c9:e5:
74:72:48:17:c7:29:23:89:80:2d:19:f1:de:cd:4d:1b:81:64:
38:db:f3:af:91:85:67:64:f4:df:4d:3b:33:18:3a:a3:6f:15:
0d:34:b6:41:c6:73:60:99:d8:75:b0:f6:7a:2d:8e:01:25:28:
af:ef:37:85:de:6e:b7:52:13:0a:f6:37:70:c2:77:84:d4:af:
1e:95:d5:a7:df:a7:08:f3:09:02:29:86:9a:f8:ef:22:97:aa:
bf:e6:e7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:42:37 2025 by rpki-client