Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1JlDQfQoejyaJ_-CHxXwE-nmFrE.roa
File: 1JlDQfQoejyaJ_-CHxXwE-nmFrE.roa (raw, json)
Hash identifier: dpJKDF7WevNOmxxDUF8AYnCJTGOS1B0812cH4KSGjFs=
Subject key identifier: D4:99:43:41:F4:28:7A:3C:9A:27:FF:82:1F:15:F0:13:E9:E6:16:B1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A61F7734692282949921B9B08D3B021A3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1JlDQfQoejyaJ_-CHxXwE-nmFrE.roa
Signing time: Sat 08 Nov 2025 05:36:38 +0000
ROA not before: Sat 08 Nov 2025 05:36:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 151.240.128.0/21 maxlen: 24
151.240.136.0/21 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.241.105.0/24 maxlen: 24
151.241.106.0/24 maxlen: 24
151.241.107.0/24 maxlen: 24
151.241.132.0/22 maxlen: 22
151.242.56.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.242.135.0/24 maxlen: 24
151.243.8.0/23 maxlen: 23
151.243.184.0/22 maxlen: 22
151.243.204.0/23 maxlen: 23
151.244.56.0/24 maxlen: 24
151.245.2.0/24 maxlen: 24
151.245.22.0/24 maxlen: 24
151.245.56.0/22 maxlen: 22
151.245.185.0/24 maxlen: 24
151.245.187.0/24 maxlen: 24
151.245.188.0/24 maxlen: 24
151.246.8.0/21 maxlen: 24
151.247.133.0/24 maxlen: 24
151.247.134.0/24 maxlen: 24
151.247.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:61:f7:73:46:92:28:29:49:92:1b:9b:08:d3:b0:21:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 8 05:36:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4994341f4287a3c9a27ff821f15f013e9e616b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:c9:bd:f7:c3:3e:aa:19:d5:5b:c6:71:26:
b6:75:89:4b:4a:59:bb:56:70:dd:58:63:8c:d5:78:
a3:dc:0f:3f:58:36:7c:1d:a4:88:58:d8:7e:30:97:
66:ec:98:8b:f9:56:52:87:48:d5:f0:be:92:b9:d3:
e9:4d:15:fb:eb:4c:1f:f9:ce:fc:90:a7:7e:80:85:
c1:2f:c6:1e:91:a6:5b:27:c2:38:74:1d:e8:5b:bc:
d3:9e:20:79:62:38:12:b8:fd:1e:39:44:9e:85:15:
44:6d:c6:24:86:10:67:3e:85:48:ba:19:70:1d:88:
b0:e6:83:fb:34:33:a9:a3:f4:c2:3d:e6:a3:62:58:
a0:64:ac:b8:89:7b:3c:d5:8d:7b:9d:d0:dd:31:08:
f4:7b:b0:18:7c:d5:69:98:f2:6b:fc:73:5d:4e:db:
53:21:39:3d:d0:b2:28:04:10:7c:59:ef:b7:02:13:
e0:44:c7:65:d3:82:0a:1f:5f:3f:70:06:7e:b6:e7:
55:90:2c:2d:65:39:b1:39:44:24:1b:8c:dd:a4:8c:
4f:e8:21:35:35:e4:4b:56:02:43:89:69:c0:d3:77:
20:3f:8b:c6:95:d6:0a:a2:65:b7:93:8a:68:c0:c6:
c0:52:bd:06:84:99:ff:db:41:09:d8:9e:51:42:13:
f4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:99:43:41:F4:28:7A:3C:9A:27:FF:82:1F:15:F0:13:E9:E6:16:B1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1JlDQfQoejyaJ_-CHxXwE-nmFrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.128.0/20
151.240.145.0/24
151.240.171.0/24
151.241.105.0-151.241.107.255
151.241.132.0/22
151.242.56.0/24
151.242.70.0/23
151.242.135.0/24
151.243.8.0/23
151.243.184.0/22
151.243.204.0/23
151.244.56.0/24
151.245.2.0/24
151.245.22.0/24
151.245.56.0/22
151.245.185.0/24
151.245.187.0-151.245.188.255
151.246.8.0/21
151.247.133.0-151.247.135.255
Signature Algorithm: sha256WithRSAEncryption
69:42:2a:d5:1f:dc:bb:8f:35:5b:17:a0:a3:d9:cb:5c:34:3f:
55:60:7c:54:3d:85:3d:97:57:95:ba:a9:68:81:9e:29:f2:a1:
e3:5e:57:75:64:43:72:21:63:b8:2a:7a:0d:15:38:52:aa:1a:
c5:1b:d4:8a:6b:10:7c:89:3a:d5:64:c8:da:dd:44:70:af:f5:
0d:4f:fc:31:19:50:11:07:08:7a:9f:58:c2:6f:5a:36:74:5a:
0e:4f:25:da:a9:6e:12:6c:60:91:6d:40:fe:f2:52:b7:10:c7:
af:7d:86:7a:97:51:10:5c:90:3f:ef:15:9a:01:dc:86:37:95:
3c:4a:27:91:9d:94:37:fb:dc:c6:1f:95:89:a2:65:30:29:ba:
b5:0c:9b:23:a1:5d:25:1c:34:a5:b4:49:bf:eb:2c:b5:bc:26:
98:2c:e3:db:78:a0:16:5d:09:2f:e3:d8:cb:75:21:bc:32:bb:
69:b0:f4:d3:d7:30:39:87:3a:49:4c:33:d0:d6:be:d1:09:aa:
c8:31:da:09:e2:d0:4c:cc:ae:b0:73:a5:8f:f5:dc:39:64:e0:
82:49:56:52:b4:ad:bc:6d:75:07:62:6d:3d:1d:5a:0c:b1:5e:
e9:c9:43:60:f8:b9:39:7c:00:e3:08:71:18:12:60:20:d0:07:
a7:4d:88:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:48:04 2025 by rpki-client