Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m3SLpuSmQAjT9Jpw02CR5a4Pjw4.roa
File: m3SLpuSmQAjT9Jpw02CR5a4Pjw4.roa (raw, json)
Hash identifier: Pp7iM0kHA+NIADccIwonSbgDwZDWN23iF8UG8X/NQvA=
Subject key identifier: 9B:74:8B:A6:E4:A6:40:08:D3:F4:9A:70:D3:60:91:E5:AE:0F:8F:0E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01981319EDD80E49C4DD03A826D95B5AA17D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m3SLpuSmQAjT9Jpw02CR5a4Pjw4.roa
Signing time: Wed 16 Jul 2025 11:58:43 +0000
ROA not before: Wed 16 Jul 2025 11:58:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 37.202.202.0/24 maxlen: 24
151.240.1.0/24 maxlen: 24
151.240.9.0/24 maxlen: 24
151.240.14.0/24 maxlen: 24
151.240.17.0/24 maxlen: 24
151.242.39.0/24 maxlen: 24
151.242.67.0/24 maxlen: 24
151.242.117.0/24 maxlen: 24
151.242.159.0/24 maxlen: 24
151.243.6.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.243.160.0/22 maxlen: 22
151.244.78.0/24 maxlen: 24
151.245.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:13:19:ed:d8:0e:49:c4:dd:03:a8:26:d9:5b:5a:a1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 16 11:58:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b748ba6e4a64008d3f49a70d36091e5ae0f8f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c9:3a:56:60:25:9e:38:2a:d8:96:f4:82:e0:
39:4c:35:d2:5e:c5:2f:47:2d:82:ec:bd:0c:2d:dd:
50:d2:a5:a9:0c:5b:2b:d2:ef:21:46:47:ee:26:ec:
e1:41:f4:e7:ca:65:46:f4:21:ab:78:cc:f0:88:b4:
2c:f5:2f:ac:ae:13:29:f6:d2:25:7c:4d:d4:63:b1:
ba:2f:07:78:e3:02:02:bc:db:4d:a3:24:a4:2a:53:
91:e1:84:90:f4:26:48:a8:69:99:42:10:b0:fc:47:
f7:98:36:a0:6e:8f:67:eb:58:5b:aa:b0:54:22:37:
c7:05:e8:7d:7c:3c:8f:80:79:8e:49:9b:21:f0:09:
40:9d:b4:f7:23:23:b9:00:42:08:95:f3:01:5e:9d:
d1:87:50:f3:15:cb:7b:aa:8b:17:cc:7c:c0:42:98:
f2:bf:be:4f:fb:b6:22:d3:41:32:3b:10:24:c8:f2:
62:be:f5:34:2e:d7:18:bc:29:02:e7:02:3a:64:63:
49:e1:fd:60:dc:b4:f4:ab:a7:ae:40:fa:3e:c4:8c:
50:ae:94:cc:b5:a3:3a:db:f6:16:45:4c:bb:78:56:
8e:81:0d:da:8b:59:fb:ee:37:76:ac:22:c2:a6:07:
86:24:9d:67:c3:56:e9:a4:75:89:8f:54:0f:c7:7c:
c5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:74:8B:A6:E4:A6:40:08:D3:F4:9A:70:D3:60:91:E5:AE:0F:8F:0E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m3SLpuSmQAjT9Jpw02CR5a4Pjw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.202.0/24
151.240.1.0/24
151.240.9.0/24
151.240.14.0/24
151.240.17.0/24
151.242.39.0/24
151.242.67.0/24
151.242.117.0/24
151.242.159.0/24
151.243.6.0/24
151.243.120.0/24
151.243.160.0/22
151.244.78.0/24
151.245.112.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:92:78:43:2a:6f:8b:3e:12:2d:9e:00:55:28:8c:b5:b3:6f:
06:da:60:1b:73:48:21:94:69:17:4d:80:83:22:9e:b5:ef:cf:
84:b7:c3:ed:b9:48:a8:3a:df:15:ce:4e:45:f3:b9:74:5d:09:
61:8b:be:e4:7c:03:70:28:b1:c9:d8:6e:98:a2:08:9f:16:b8:
c7:61:45:b0:9e:2f:9d:0e:ba:36:1e:a4:b6:6a:aa:bf:cb:b3:
0b:ed:02:94:e2:8f:0a:8a:f7:4f:d7:47:a4:d0:56:9c:27:37:
df:dc:ad:48:fd:d5:dd:72:c2:9f:36:80:20:b4:fa:91:22:88:
5b:50:6e:d5:8b:67:89:62:e5:20:4c:f5:97:da:f4:d6:27:cf:
39:83:9c:38:e6:36:74:67:c8:81:1e:b1:41:af:8a:6c:94:c6:
c8:ef:c0:25:fc:2c:b7:37:a2:46:1b:68:be:83:a1:2e:50:68:
4e:1b:c2:32:39:cd:fc:40:5f:91:14:f4:38:0c:fd:4a:65:1d:
8f:f9:2b:13:b4:c6:10:af:ab:c9:91:44:8e:d0:16:a4:09:eb:
f9:ee:9d:4f:92:cc:e5:c0:54:95:d2:91:51:ad:47:fa:fb:bb:
94:47:d7:db:b3:16:cc:75:1c:ff:15:4f:46:22:41:90:29:f0:
ba:90:ca:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:31:39 2025 by rpki-client