Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4RRr71YZLCE7oWP4xOQkeA92MxM.roa
File: 4RRr71YZLCE7oWP4xOQkeA92MxM.roa (raw, json)
Hash identifier: 3INz1VmYdw7/OLJC9Hf35bUmog2G31tIc/DNcb6E0vM=
Subject key identifier: E1:14:6B:EF:56:19:2C:21:3B:A1:63:F8:C4:E4:24:78:0F:76:33:13
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198F96AB75CFA7E672298E809B19AF35189
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4RRr71YZLCE7oWP4xOQkeA92MxM.roa
Signing time: Sat 30 Aug 2025 05:19:37 +0000
ROA not before: Sat 30 Aug 2025 05:19:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 151.241.12.0/24 maxlen: 24
151.241.128.0/22 maxlen: 24
151.242.4.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.17.0/24 maxlen: 24
151.242.27.0/24 maxlen: 24
151.242.32.0/24 maxlen: 24
151.242.40.0/24 maxlen: 24
151.242.139.0/24 maxlen: 24
151.243.44.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.244.3.0/24 maxlen: 24
151.244.128.0/24 maxlen: 24
151.244.129.0/24 maxlen: 24
151.244.130.0/24 maxlen: 24
151.245.85.0/24 maxlen: 24
151.245.120.0/21 maxlen: 24
151.247.195.0/24 maxlen: 24
151.247.196.0/24 maxlen: 24
151.247.197.0/24 maxlen: 24
151.247.198.0/24 maxlen: 24
151.247.199.0/24 maxlen: 24
151.247.200.0/24 maxlen: 24
151.247.218.0/24 maxlen: 24
151.247.219.0/24 maxlen: 24
151.247.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 13:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f9:6a:b7:5c:fa:7e:67:22:98:e8:09:b1:9a:f3:51:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 30 05:19:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1146bef56192c213ba163f8c4e424780f763313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ef:1d:6f:8d:76:ed:8f:63:f7:1f:0d:b2:70:
f2:94:c0:39:b4:e6:1b:14:16:5d:de:c6:19:f5:11:
c1:bf:8a:20:4f:38:4c:ae:28:cc:65:64:64:e7:09:
47:00:d2:99:40:07:d1:60:1a:86:3c:a2:73:f0:9f:
df:0d:82:d6:80:b3:8f:9b:70:b1:ab:a3:42:67:58:
15:37:2e:0e:bf:94:81:6e:45:f5:e3:5d:cb:6a:32:
90:47:9e:2d:c8:68:d4:ee:3c:ab:f5:a8:d5:2c:78:
f7:db:e6:28:ae:68:09:d4:ff:0b:d4:6b:00:14:4a:
99:89:98:a2:a9:d9:2f:15:60:51:4a:05:33:79:ea:
df:9d:f1:90:14:3e:aa:78:80:9c:29:e6:41:fe:3e:
e1:d0:a5:f1:18:51:d8:73:fc:10:09:2f:49:af:30:
b6:11:9f:8b:fb:f6:ca:e3:71:1b:9b:9c:fe:18:7c:
4b:2d:6e:78:bc:86:8e:0b:e8:f2:8b:ab:cc:3c:76:
3a:8e:57:cc:e2:8d:38:a6:d1:37:fc:50:f9:58:ce:
7d:42:5f:4b:a7:db:6e:71:17:4f:c7:08:5a:3c:3b:
e5:22:23:5a:17:f9:f9:73:e4:d4:f2:24:0f:49:85:
df:84:8b:e7:99:cf:36:f8:c6:ec:3a:93:cd:d7:e2:
d6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:14:6B:EF:56:19:2C:21:3B:A1:63:F8:C4:E4:24:78:0F:76:33:13
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4RRr71YZLCE7oWP4xOQkeA92MxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.12.0/24
151.241.128.0/22
151.242.4.0/24
151.242.14.0/24
151.242.17.0/24
151.242.27.0/24
151.242.32.0/24
151.242.40.0/24
151.242.139.0/24
151.243.44.0/24
151.243.115.0/24
151.244.3.0/24
151.244.128.0-151.244.130.255
151.245.85.0/24
151.245.120.0/21
151.247.195.0-151.247.200.255
151.247.218.0-151.247.220.255
Signature Algorithm: sha256WithRSAEncryption
0e:d0:4c:e8:8f:70:8f:ee:5b:e6:eb:88:6b:1a:54:19:ed:85:
e8:29:f7:4d:ae:ce:ae:ff:fc:38:e3:68:2d:7b:51:74:5f:31:
03:c7:7b:43:1f:14:e1:6a:7d:36:c4:6d:41:50:51:fd:93:32:
38:13:ea:11:90:04:25:80:4a:3b:6d:85:1b:57:ec:d3:97:7e:
91:e3:9a:cd:c9:fa:74:c1:e4:9c:da:68:cb:08:e4:a1:a9:60:
f0:6b:19:59:d1:75:f7:fa:71:f5:5f:98:f1:4c:7e:47:d5:2b:
a7:86:0b:e0:97:ae:2a:50:d8:10:78:06:8e:7b:44:f8:35:a5:
95:38:ea:6c:a3:2f:19:6b:85:a9:e5:4d:bf:86:c5:5b:31:fe:
fe:1d:5e:8f:e3:60:32:9a:4a:95:7b:04:d6:98:b3:bc:6a:ee:
07:9f:f1:c4:c6:24:f0:2a:dc:1a:34:f1:1f:05:93:60:91:5e:
7a:bc:34:33:23:67:30:84:54:7a:fc:b3:ef:9f:5b:9a:5c:80:
ff:4d:c2:06:6f:4e:c9:3d:25:cb:0b:5d:27:0f:e2:6e:d2:0d:
67:19:f6:c6:b2:d4:19:ea:0d:c5:4f:ea:b4:af:01:a3:60:4a:
11:28:50:bf:d2:87:8b:56:71:bf:6c:f9:42:90:cf:82:83:48:
e6:e4:55:0a
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZj5ardc+n5nIpjoCbGa81GJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwODMwMDUxOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTE0NmJlZjU2MTkyYzIxM2JhMTYzZjhjNGU0MjQ3ODBmNzYzMzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe8db4127Y9j9x8NsnDylMA5tOYb
FBZd3sYZ9RHBv4ogTzhMrijMZWRk5wlHANKZQAfRYBqGPKJz8J/fDYLWgLOPm3Cx
q6NCZ1gVNy4Ov5SBbkX1413LajKQR54tyGjU7jyr9ajVLHj32+YormgJ1P8L1GsA
FEqZiZiiqdkvFWBRSgUzeerfnfGQFD6qeICcKeZB/j7h0KXxGFHYc/wQCS9JrzC2
EZ+L+/bK43Ebm5z+GHxLLW54vIaOC+jyi6vMPHY6jlfM4o04ptE3/FD5WM59Ql9L
p9tucRdPxwhaPDvlIiNaF/n5c+TU8iQPSYXfhIvnmc82+MbsOpPN1+LW5wIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFOEUa+9WGSwhO6Fj+MTkJHgPdjMTMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvNFJScjcxWVpMQ0U3b1dQNHhPUWtlQTkyTXhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEAJfx
DAMEApfxgAMEAJfyBAMEAJfyDgMEAJfyEQMEAJfyGwMEAJfyIAMEAJfyKAMEAJfy
iwMEAJfzLAMEAJfzcwMEAJf0AzAMAwQHl/SAAwQAl/SCAwQAl/VVAwQDl/V4MAwD
BACX98MDBACX98gwDAMEAZf32gMEAJf33DANBgkqhkiG9w0BAQsFAAOCAQEADtBM
6I9wj+5b5uuIaxpUGe2F6Cn3Ta7Orv/8OONoLXtRdF8xA8d7Qx8U4Wp9NsRtQVBR
/ZMyOBPqEZAEJYBKO22FG1fs05d+keOazcn6dMHknNpoywjkoalg8GsZWdF19/px
9V+Y8Ux+R9Urp4YL4JeuKlDYEHgGjntE+DWllTjqbKMvGWuFqeVNv4bFWzH+/h1e
j+NgMppKlXsE1pizvGruB5/xxMYk8CrcGjTxHwWTYJFeerw0MyNnMIRUevyz759b
mlyA/03CBm9OyT0lywtdJw/ibtINZxn2xrLUGeoNxU/qtK8Bo2BKEShQv9KHi1Zx
v2z5QpDPgoNI5uRVCg==
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:44:20 2025 by rpki-client