Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2XqLfTpx2o5EvhoLPIHPh_3CfLs.roa
File: 2XqLfTpx2o5EvhoLPIHPh_3CfLs.roa (raw, json)
Hash identifier: mv4zUmIcV2+2SsYhyREIQSxc+cBXKVkLL7+nKi9ipkI=
Subject key identifier: D9:7A:8B:7D:3A:71:DA:8E:44:BE:1A:0B:3C:81:CF:87:FD:C2:7C:BB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197D956542301A0926D2F022CC47B339AA8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2XqLfTpx2o5EvhoLPIHPh_3CfLs.roa
Signing time: Sat 05 Jul 2025 06:46:42 +0000
ROA not before: Sat 05 Jul 2025 06:46:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 151.240.128.0/21 maxlen: 24
151.240.136.0/21 maxlen: 24
151.240.171.0/24 maxlen: 24
151.241.132.0/22 maxlen: 22
151.241.232.0/21 maxlen: 24
151.242.56.0/24 maxlen: 24
151.243.8.0/23 maxlen: 23
151.243.204.0/23 maxlen: 23
151.244.16.0/21 maxlen: 21
151.245.56.0/22 maxlen: 22
151.245.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d9:56:54:23:01:a0:92:6d:2f:02:2c:c4:7b:33:9a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 5 06:46:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d97a8b7d3a71da8e44be1a0b3c81cf87fdc27cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:70:ea:b1:2e:04:ba:7f:38:18:98:d3:39:
a2:5d:5b:ad:ff:66:13:e4:16:2c:14:39:d9:73:fe:
37:0c:e4:06:05:a5:73:e2:bb:6f:b6:5a:6d:5c:35:
83:18:69:d7:a7:4a:c4:9d:38:1e:19:5a:d4:6f:13:
b2:a0:d9:b5:16:52:28:23:4a:44:97:03:8f:6e:fe:
f2:ca:bc:09:3d:09:32:b5:86:60:34:7b:3a:14:d0:
bb:91:5f:22:74:0d:5c:ff:0c:43:27:c3:56:77:68:
1c:07:23:93:af:8a:bb:72:9d:cd:92:ba:a8:8e:b5:
72:1c:03:06:2b:73:23:fe:98:76:4a:51:9e:71:09:
b4:1f:81:92:8e:c4:28:1b:9d:60:ea:19:03:7e:33:
7f:9c:2a:78:a7:bd:ef:96:14:6f:5d:4a:f1:a5:a7:
49:c4:b7:67:6f:6e:41:99:9f:01:a0:79:cc:be:41:
d2:01:a0:aa:26:44:1e:f1:ea:30:da:c7:a7:d4:d1:
c6:9f:56:b6:b4:24:bb:76:c4:1c:cb:05:f0:c8:f6:
0e:9d:74:9b:53:f8:9c:8f:be:96:96:21:b9:e4:3f:
c6:8b:9e:d0:c6:49:f1:b6:d9:c3:0f:b1:78:1d:9a:
c1:57:e5:f5:46:3d:21:ff:6f:32:f6:55:b0:14:90:
2f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7A:8B:7D:3A:71:DA:8E:44:BE:1A:0B:3C:81:CF:87:FD:C2:7C:BB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2XqLfTpx2o5EvhoLPIHPh_3CfLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.128.0/20
151.240.171.0/24
151.241.132.0/22
151.241.232.0/21
151.242.56.0/24
151.243.8.0/23
151.243.204.0/23
151.244.16.0/21
151.245.56.0/22
151.245.188.0/24
Signature Algorithm: sha256WithRSAEncryption
84:d2:a6:5b:0f:5d:fa:89:af:d2:1a:ba:4a:8f:74:10:9b:4a:
59:9c:d0:91:f7:73:bc:49:89:7f:cc:01:d6:71:8d:df:d4:9d:
d0:a1:e7:27:85:c8:b9:9c:b4:43:8d:6d:c6:18:52:e3:38:ef:
c2:06:4d:1f:6b:a2:1c:d1:1f:f1:f1:30:ee:a6:44:3c:93:77:
3f:61:35:e3:ec:d2:54:ea:7c:d9:4f:a3:eb:58:41:f1:c5:54:
ad:d1:ae:0a:8b:f0:60:a7:83:3c:34:d3:25:75:fd:2d:fa:17:
80:6a:03:f6:cb:1a:97:3b:a9:8d:70:7c:d1:3d:bc:3e:b7:6c:
30:8f:8f:27:e0:71:77:c5:22:fc:11:c3:7a:0b:d4:b5:39:57:
b7:a2:df:33:65:5d:bc:2f:cd:10:3f:51:79:41:ec:6a:bf:e3:
ec:f2:6e:fb:91:cb:3a:4c:2e:f7:e0:a2:a7:e7:a1:41:c5:e6:
10:66:de:a8:f9:31:fe:e3:37:2f:33:6b:8e:2e:f3:9f:d8:00:
a5:e4:76:9c:32:ae:5f:d2:0c:35:8f:6e:ca:34:2f:e7:31:5f:
df:dd:90:30:d1:7a:c5:25:62:18:28:2f:11:ba:4b:af:11:8e:
25:97:ee:ed:61:b5:59:74:dc:ca:a2:b5:7a:77:e2:5e:d0:e9:
7e:ed:ff:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:33:24 2025 by rpki-client