Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7vYCQDBEAmqSWCV_UYUtHURg-70.roa
File: 7vYCQDBEAmqSWCV_UYUtHURg-70.roa (raw, json)
Hash identifier: jCVLvOHJc7SUpx/uxuim78WOJMGKUUMb4EyNi9EqxWs=
Subject key identifier: EE:F6:02:40:30:44:02:6A:92:58:25:7F:51:85:2D:1D:44:60:FB:BD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199D1A1AF8F8710E7A6477B4A7B67A356A7
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7vYCQDBEAmqSWCV_UYUtHURg-70.roa
Signing time: Sat 11 Oct 2025 04:57:38 +0000
ROA not before: Sat 11 Oct 2025 04:57:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 151.240.205.0/24 maxlen: 24
151.241.119.0/24 maxlen: 24
151.241.122.0/24 maxlen: 24
151.241.123.0/24 maxlen: 24
151.241.125.0/24 maxlen: 24
151.243.227.0/24 maxlen: 24
151.243.235.0/24 maxlen: 24
151.243.241.0/24 maxlen: 24
151.246.16.0/21 maxlen: 21
151.246.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Oct 2025 14:36:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d1:a1:af:8f:87:10:e7:a6:47:7b:4a:7b:67:a3:56:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 11 04:57:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eef602403044026a9258257f51852d1d4460fbbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:b7:5a:f8:ac:27:1f:23:c1:31:e9:73:87:
25:bd:c8:b0:ce:bb:af:77:11:2a:d1:80:82:f2:fb:
c5:3d:b6:70:ea:c3:93:54:82:76:c6:03:04:83:f8:
ed:44:42:70:1e:f6:32:7a:78:2b:64:d2:32:03:75:
3e:49:da:3c:61:d2:36:06:84:f8:cb:fa:e1:42:03:
7b:be:47:48:8a:28:3b:ad:50:21:94:3e:21:e7:43:
2b:b8:04:56:56:f4:25:99:d6:98:ea:07:b4:85:53:
d2:e3:f6:de:41:8e:25:30:91:c0:95:0b:7e:3e:b6:
fb:2e:cc:ab:4d:8f:31:69:8b:65:ba:69:f0:ba:f1:
63:fd:9a:0c:59:03:03:42:ca:35:89:12:30:de:0e:
e4:8e:38:6a:63:ca:93:62:6a:45:20:a0:39:5d:71:
e0:e2:c4:97:33:ce:de:ef:98:73:60:19:72:04:21:
50:7a:e3:32:63:f8:9e:b2:b9:45:29:48:e1:93:31:
3d:07:ed:17:17:cd:41:d7:81:f9:7b:09:3d:55:e5:
7c:e9:7a:44:0d:6a:d6:75:69:17:7e:d0:7a:96:1f:
d0:99:22:ec:a8:94:89:2a:1d:43:a7:35:23:ab:c0:
dc:ea:de:d8:23:4f:dd:ab:8a:60:46:20:a9:6c:f8:
ca:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F6:02:40:30:44:02:6A:92:58:25:7F:51:85:2D:1D:44:60:FB:BD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7vYCQDBEAmqSWCV_UYUtHURg-70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.205.0/24
151.241.119.0/24
151.241.122.0/23
151.241.125.0/24
151.243.227.0/24
151.243.235.0/24
151.243.241.0/24
151.246.16.0/21
151.246.32.0/21
Signature Algorithm: sha256WithRSAEncryption
11:3a:05:52:ed:fe:58:d1:b9:d4:cc:3f:08:b0:a1:a4:e7:f3:
5d:27:29:e7:92:93:80:48:cb:1f:83:d9:4f:1e:00:20:da:ce:
56:40:83:64:1e:3f:2e:26:c8:03:50:65:b7:b4:37:7d:81:00:
e8:da:54:20:08:45:7e:0f:9a:f2:b0:b1:c6:94:5f:45:63:0b:
e1:c1:72:55:7c:21:4e:db:3c:0a:1f:7c:8b:52:9d:f9:b1:07:
42:ee:2b:8e:85:7f:79:57:87:5f:9c:54:09:c7:95:96:44:7c:
e9:ea:fd:41:6f:aa:30:b3:7c:ce:28:1b:60:15:5b:63:5b:bb:
cb:0b:fb:15:d6:b1:c4:c4:72:68:a7:8a:ab:d4:9a:c0:e9:72:
ce:d5:79:ef:d4:3d:fb:f9:52:d9:c6:2d:a2:37:98:a6:16:e0:
be:fc:4e:40:8e:4d:41:f5:8a:8a:73:dc:c7:93:61:a2:7c:54:
aa:40:dc:f9:79:16:2f:8a:1c:80:3d:b8:01:f4:64:4a:15:8e:
9b:4d:0a:6a:f3:aa:81:e0:c6:e4:a7:8e:3d:2f:27:c7:cf:1c:
ff:ad:6d:eb:fe:0e:a2:97:90:43:ee:a6:ac:16:71:74:50:d1:
d8:11:7f:5c:86:4b:06:df:cd:82:d1:09:95:21:fc:e5:09:72:
b2:c1:25:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 13 22:06:48 2025 by rpki-client