Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xuD2a9QUZrz6tvOE9nmhea6qi4M.roa
File: xuD2a9QUZrz6tvOE9nmhea6qi4M.roa (raw, json)
Hash identifier: avbiWwGAyUvNtDEBjflgf5erUBJ7kuM223bvEuyLbjc=
Subject key identifier: C6:E0:F6:6B:D4:14:66:BC:FA:B6:F3:84:F6:79:A1:79:AE:AA:8B:83
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197E858486DBC6B4338638D5F83799F4EB0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xuD2a9QUZrz6tvOE9nmhea6qi4M.roa
Signing time: Tue 08 Jul 2025 04:43:09 +0000
ROA not before: Tue 08 Jul 2025 04:43:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9232
IP address blocks: 37.202.213.0/24 maxlen: 24
37.202.221.0/24 maxlen: 24
151.242.18.0/24 maxlen: 24
151.242.68.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.244.8.0/24 maxlen: 24
151.244.12.0/24 maxlen: 24
151.244.24.0/24 maxlen: 24
151.244.30.0/24 maxlen: 24
151.244.40.0/24 maxlen: 24
151.244.65.0/24 maxlen: 24
151.244.73.0/24 maxlen: 24
151.244.86.0/24 maxlen: 24
151.244.93.0/24 maxlen: 24
151.244.97.0/24 maxlen: 24
151.244.101.0/24 maxlen: 24
151.244.105.0/24 maxlen: 24
151.244.110.0/24 maxlen: 24
151.244.114.0/24 maxlen: 24
151.244.118.0/24 maxlen: 24
151.244.124.0/24 maxlen: 24
151.245.0.0/24 maxlen: 24
151.245.32.0/24 maxlen: 24
151.245.72.0/24 maxlen: 24
151.245.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e8:58:48:6d:bc:6b:43:38:63:8d:5f:83:79:9f:4e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 8 04:43:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6e0f66bd41466bcfab6f384f679a179aeaa8b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:dd:30:cd:8c:a2:b6:a6:86:0c:95:e9:dc:12:
89:e6:b0:8b:51:25:5d:20:a7:35:e9:2d:1d:53:6b:
e4:f7:9c:9d:46:3f:35:8f:17:ce:d5:cc:3a:ea:d4:
6c:c0:64:01:5b:b3:9f:df:4f:27:ed:83:0a:a9:32:
b1:9e:df:cc:bf:e8:31:cb:6b:5c:07:c3:f4:b2:d7:
0c:a3:82:6a:f7:16:2f:99:af:e8:15:9d:0f:f9:26:
20:2d:ca:ad:42:24:67:aa:75:41:c2:f2:d6:41:32:
50:7a:f3:39:88:86:e5:78:7a:11:73:8c:ac:a1:84:
7a:81:49:c9:5e:af:a3:f6:9d:10:fe:26:21:c7:60:
fa:f7:19:9e:90:f5:09:2e:e0:28:8f:64:ee:88:e5:
3b:d2:4f:aa:bc:52:91:56:b6:c5:ae:58:e0:a9:c1:
3e:bc:f5:f4:ed:e6:06:b4:29:f9:58:a9:4e:99:4d:
bc:f8:16:b3:e6:83:4a:57:ea:f9:2d:25:b2:63:31:
cd:ca:7a:5e:f7:8e:86:f5:9b:1b:b7:9f:54:73:93:
fc:86:d5:db:dc:05:66:e8:ec:65:b2:df:76:9c:8a:
58:61:92:da:34:b0:00:5b:6e:fe:4c:3c:67:e3:a7:
04:d4:25:28:81:a5:f5:c7:82:5d:4f:90:f9:10:96:
a0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E0:F6:6B:D4:14:66:BC:FA:B6:F3:84:F6:79:A1:79:AE:AA:8B:83
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xuD2a9QUZrz6tvOE9nmhea6qi4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.213.0/24
37.202.221.0/24
151.242.18.0/24
151.242.68.0/24
151.242.70.0/23
151.244.8.0/24
151.244.12.0/24
151.244.24.0/24
151.244.30.0/24
151.244.40.0/24
151.244.65.0/24
151.244.73.0/24
151.244.86.0/24
151.244.93.0/24
151.244.97.0/24
151.244.101.0/24
151.244.105.0/24
151.244.110.0/24
151.244.114.0/24
151.244.118.0/24
151.244.124.0/24
151.245.0.0/24
151.245.32.0/24
151.245.72.0/24
151.245.92.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:bb:ac:8d:24:1a:7a:19:73:37:07:e0:b6:7b:e8:37:3d:ae:
a6:40:08:55:c0:72:0c:aa:dc:65:c9:aa:36:fd:1e:92:10:9c:
aa:73:31:34:0a:f6:25:9a:b8:f5:6d:d7:d8:81:ae:d1:2d:49:
83:08:1c:ec:73:31:fe:4a:c4:ec:79:d9:3e:af:42:eb:d9:ba:
66:c0:8f:1f:1d:ef:11:2b:f9:dc:32:5f:af:37:00:5a:ec:6a:
44:31:33:0a:d1:a8:03:bc:2d:09:41:e0:a5:6c:89:63:82:3e:
64:0e:b9:73:cc:c5:d2:ab:c4:6c:66:dc:7e:c3:10:83:4c:0c:
69:00:21:25:a1:cf:f7:eb:46:4c:f0:26:91:3d:37:9a:aa:cb:
28:1d:5c:e5:d4:88:ab:fd:ca:a7:30:8d:37:1b:26:0f:91:9c:
af:17:a2:2c:04:2d:7c:17:de:74:e0:19:e9:0d:3e:df:d6:b1:
bc:8a:e8:87:d9:d7:18:c7:dc:ae:69:d8:82:2c:4f:70:bf:3d:
9d:c2:9d:8c:3a:44:96:05:83:66:b0:96:d8:72:ed:40:9c:57:
63:3a:56:28:70:15:99:41:6d:20:af:6c:f6:71:b1:fa:2a:5a:
7d:94:f9:bc:d0:5b:2b:35:91:51:ba:b3:d0:1b:18:60:25:b7:
ad:17:3d:05
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgISAZfoWEhtvGtDOGONX4N5n06wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNzA4MDQ0MzA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmUwZjY2YmQ0MTQ2NmJjZmFiNmYzODRmNjc5YTE3OWFlYWE4YjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi90wzYyitqaGDJXp3BKJ5rCLUSVd
IKc16S0dU2vk95ydRj81jxfO1cw66tRswGQBW7Of308n7YMKqTKxnt/Mv+gxy2tc
B8P0stcMo4Jq9xYvma/oFZ0P+SYgLcqtQiRnqnVBwvLWQTJQevM5iIbleHoRc4ys
oYR6gUnJXq+j9p0Q/iYhx2D69xmekPUJLuAoj2TuiOU70k+qvFKRVrbFrljgqcE+
vPX07eYGtCn5WKlOmU28+Baz5oNKV+r5LSWyYzHNynpe946G9Zsbt59Uc5P8htXb
3AVm6Oxlst92nIpYYZLaNLAAW27+TDxn46cE1CUogaX1x4JdT5D5EJagbwIDAQAB
o4ICnjCCApowHQYDVR0OBBYEFMbg9mvUFGa8+rbzhPZ5oXmuqouDMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEveHVEMmE5UVVacno2dHZPRTlubWhlYTZxaTRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBAAl
ytUDBAAlyt0DBACX8hIDBACX8kQDBAGX8kYDBACX9AgDBACX9AwDBACX9BgDBACX
9B4DBACX9CgDBACX9EEDBACX9EkDBACX9FYDBACX9F0DBACX9GEDBACX9GUDBACX
9GkDBACX9G4DBACX9HIDBACX9HYDBACX9HwDBACX9QADBACX9SADBACX9UgDBACX
9VwwDQYJKoZIhvcNAQELBQADggEBAJu7rI0kGnoZczcH4LZ76Dc9rqZACFXAcgyq
3GXJqjb9HpIQnKpzMTQK9iWauPVt19iBrtEtSYMIHOxzMf5KxOx52T6vQuvZumbA
jx8d7xEr+dwyX683AFrsakQxMwrRqAO8LQlB4KVsiWOCPmQOuXPMxdKrxGxm3H7D
EINMDGkAISWhz/frRkzwJpE9N5qqyygdXOXUiKv9yqcwjTcbJg+RnK8XoiwELXwX
3nTgGekNPt/WsbyK6IfZ1xjH3K5p2IIsT3C/PZ3CnYw6RJYFg2awlthy7UCcV2M6
VihwFZlBbSCvbPZxsfoqWn2U+bzQWys1kVG6s9AbGGAlt60XPQU=
-----END CERTIFICATE-----
Generated at Sun Jul 20 19:03:25 2025 by rpki-client