Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6Ba4hOKu7yoOTrZe71Zf3EptLg0.roa
File: 6Ba4hOKu7yoOTrZe71Zf3EptLg0.roa (raw, json)
Hash identifier: ir5iKCvJwgSLex8wF1jQjMS3ib7dX6/flWWQ4VP9Y3o=
Subject key identifier: E8:16:B8:84:E2:AE:EF:2A:0E:4E:B6:5E:EF:56:5F:DC:4A:6D:2E:0D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01990E9A4E31A6D396A941EB457B71768273
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6Ba4hOKu7yoOTrZe71Zf3EptLg0.roa
Signing time: Wed 03 Sep 2025 08:03:37 +0000
ROA not before: Wed 03 Sep 2025 08:03:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9232
IP address blocks: 37.202.213.0/24 maxlen: 24
37.202.221.0/24 maxlen: 24
151.240.147.0/24 maxlen: 24
151.240.154.0/24 maxlen: 24
151.241.11.0/24 maxlen: 24
151.241.15.0/24 maxlen: 24
151.241.21.0/24 maxlen: 24
151.241.26.0/24 maxlen: 24
151.241.31.0/24 maxlen: 24
151.241.74.0/24 maxlen: 24
151.242.18.0/24 maxlen: 24
151.242.68.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.244.8.0/24 maxlen: 24
151.244.12.0/24 maxlen: 24
151.244.24.0/24 maxlen: 24
151.244.30.0/24 maxlen: 24
151.244.40.0/24 maxlen: 24
151.245.54.0/24 maxlen: 24
151.245.68.0/24 maxlen: 24
151.245.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 13:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0e:9a:4e:31:a6:d3:96:a9:41:eb:45:7b:71:76:82:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 3 08:03:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e816b884e2aeef2a0e4eb65eef565fdc4a6d2e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ad:63:ea:db:cd:cc:88:ec:d6:f5:ac:a6:c3:
a7:4d:e9:33:8d:f4:d1:86:5c:5a:65:fd:6f:80:d2:
aa:18:4e:52:ef:bd:a1:5e:fd:55:c2:a7:14:5f:5a:
39:af:17:91:e7:ce:98:8a:84:06:65:47:8a:05:07:
f7:0d:0f:ae:05:d4:a5:b1:af:94:e9:ca:06:bf:95:
27:80:cc:aa:96:ef:cb:ed:da:e3:d3:1a:35:30:69:
c4:12:3c:99:79:df:ea:fe:a0:18:05:45:d8:36:9f:
c8:29:27:71:87:54:06:9d:8f:b8:42:76:26:f0:d5:
ec:1e:9d:6b:19:78:ec:5b:69:08:65:af:86:97:be:
09:f9:73:41:5d:86:a0:4d:d8:35:3f:fe:5e:65:e2:
02:96:6f:f1:bd:3d:e9:d1:57:6d:fd:ca:b8:ee:6e:
f2:d2:84:91:ba:5b:af:4a:b1:ea:c1:46:2a:9c:db:
89:0f:42:b1:86:c0:8b:e8:2a:76:ff:3f:4a:f6:b2:
55:3d:9e:ef:9a:82:22:44:e8:96:8a:8e:f2:1f:63:
23:99:d7:14:cd:0d:9a:73:c6:59:76:49:cf:2e:46:
f7:df:ab:30:2a:12:d2:a3:47:bc:93:04:dc:2f:2a:
74:ab:80:b2:90:fa:b9:9d:ce:d7:66:10:d1:31:ba:
1a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:16:B8:84:E2:AE:EF:2A:0E:4E:B6:5E:EF:56:5F:DC:4A:6D:2E:0D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6Ba4hOKu7yoOTrZe71Zf3EptLg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.213.0/24
37.202.221.0/24
151.240.147.0/24
151.240.154.0/24
151.241.11.0/24
151.241.15.0/24
151.241.21.0/24
151.241.26.0/24
151.241.31.0/24
151.241.74.0/24
151.242.18.0/24
151.242.68.0/24
151.242.70.0/23
151.244.8.0/24
151.244.12.0/24
151.244.24.0/24
151.244.30.0/24
151.244.40.0/24
151.245.54.0/24
151.245.68.0/24
151.245.86.0/24
Signature Algorithm: sha256WithRSAEncryption
74:e9:3e:af:0a:f9:73:e2:03:a9:37:ab:cc:ea:90:cc:6f:87:
59:0a:a8:c7:e4:69:f8:59:13:fe:95:92:a1:0a:f2:70:5e:dd:
51:b1:33:31:d4:5c:48:c4:b9:e5:8b:21:f8:e0:66:73:42:ae:
e9:40:28:b9:78:eb:c1:19:44:b1:71:eb:e2:20:bb:97:78:c7:
d9:1c:12:25:3e:1a:66:78:40:b4:09:46:06:15:5e:b4:e2:ae:
f6:ad:17:66:67:e7:06:9a:37:d3:1f:ea:74:1a:8c:b0:f4:d7:
f2:00:d7:3d:32:e4:9e:c0:99:92:f0:28:06:2e:96:31:5c:5b:
df:db:47:c4:8f:51:94:5e:44:7e:4e:78:23:e9:d3:d0:89:04:
50:1e:8e:17:a6:2f:69:34:52:4b:18:8b:97:01:e8:a1:99:e0:
69:44:c8:b4:6e:8d:91:e3:b9:19:69:0b:65:1e:54:46:8f:4e:
5f:be:39:bc:6d:ab:98:d6:59:55:15:62:e1:7b:eb:ed:85:48:
60:43:0a:ef:21:5c:09:a6:ac:3f:48:98:a6:24:51:13:10:5d:
3f:69:87:c2:45:c5:df:b2:29:2e:d4:20:a2:42:d9:5e:52:e3:
a0:4b:90:78:c1:36:a8:ad:88:40:ca:cb:4c:b4:50:1c:41:e6:
79:fc:e4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 20:37:54 2025 by rpki-client