Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CezbrkbCzYiWMAIIiERiZKOHjDs.roa
File: CezbrkbCzYiWMAIIiERiZKOHjDs.roa (raw, json)
Hash identifier: Fl2G1dq2haftJdBAB1bEKQBTSwiWIvOwjGZ26lZvoS0=
Subject key identifier: 09:EC:DB:AE:46:C2:CD:88:96:30:02:08:88:44:62:64:A3:87:8C:3B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A00055134D67CD6E85CF4B87F9C94827F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CezbrkbCzYiWMAIIiERiZKOHjDs.roa
Signing time: Mon 20 Oct 2025 05:08:59 +0000
ROA not before: Mon 20 Oct 2025 05:08:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 37.202.202.0/24 maxlen: 24
151.240.1.0/24 maxlen: 24
151.240.9.0/24 maxlen: 24
151.240.17.0/24 maxlen: 24
151.240.24.0/24 maxlen: 24
151.241.1.0/24 maxlen: 24
151.241.8.0/24 maxlen: 24
151.241.68.0/24 maxlen: 24
151.241.69.0/24 maxlen: 24
151.242.5.0/24 maxlen: 24
151.242.67.0/24 maxlen: 24
151.242.91.0/24 maxlen: 24
151.242.103.0/24 maxlen: 24
151.242.117.0/24 maxlen: 24
151.243.6.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.243.160.0/22 maxlen: 22
151.244.78.0/24 maxlen: 24
151.244.192.0/24 maxlen: 24
151.244.203.0/24 maxlen: 24
151.245.54.0/24 maxlen: 24
151.245.238.0/24 maxlen: 24
151.246.177.0/24 maxlen: 24
151.246.190.0/24 maxlen: 24
151.247.168.0/24 maxlen: 24
151.247.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:05:51:34:d6:7c:d6:e8:5c:f4:b8:7f:9c:94:82:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 20 05:08:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09ecdbae46c2cd889630020888446264a3878c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5f:80:04:07:d2:b0:e9:3d:a2:6c:3a:dd:bf:
1d:9c:45:75:cc:5b:53:f4:17:1a:3d:d9:c1:b5:1c:
42:e1:9b:e6:6f:11:ba:63:c6:04:da:3d:b5:41:11:
d7:90:71:61:d0:27:39:e2:b2:08:f0:39:a5:26:f7:
64:5a:8e:31:c8:7a:81:9d:6f:ac:15:27:c1:0a:74:
d3:d1:00:d1:1b:b9:55:f9:9f:ae:be:38:3b:1f:bf:
24:55:fb:f6:91:ab:a6:80:5e:82:9a:bf:fb:ed:2c:
7c:a2:76:72:7f:94:74:50:b2:60:94:0a:9a:8f:98:
b3:05:58:90:da:33:78:4f:a3:1e:bd:65:f5:a6:9b:
24:79:25:b6:c5:9f:12:13:60:64:eb:ed:f3:fa:8a:
d7:35:bd:a1:cd:0c:75:8b:ca:36:7a:f6:b5:e0:22:
a7:f7:33:5f:4b:5a:a4:0d:ab:38:64:d4:ab:3b:74:
4f:df:97:37:81:21:17:f0:4b:db:5c:10:d2:a4:12:
67:6c:65:76:fc:e8:08:0e:08:7f:6c:c2:0b:25:d3:
bb:46:52:5c:02:12:43:0f:9c:ab:a4:6c:36:c0:86:
9a:c7:11:e8:04:f4:71:2a:72:5b:b3:ef:3a:a0:44:
81:56:68:6f:8d:fa:46:78:7f:ed:f6:1e:49:2f:e8:
ed:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EC:DB:AE:46:C2:CD:88:96:30:02:08:88:44:62:64:A3:87:8C:3B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CezbrkbCzYiWMAIIiERiZKOHjDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.202.0/24
151.240.1.0/24
151.240.9.0/24
151.240.17.0/24
151.240.24.0/24
151.241.1.0/24
151.241.8.0/24
151.241.68.0/23
151.242.5.0/24
151.242.67.0/24
151.242.91.0/24
151.242.103.0/24
151.242.117.0/24
151.243.6.0/24
151.243.120.0/24
151.243.160.0/22
151.244.78.0/24
151.244.192.0/24
151.244.203.0/24
151.245.54.0/24
151.245.238.0/24
151.246.177.0/24
151.246.190.0/24
151.247.168.0/24
151.247.217.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:6f:58:76:77:ba:8a:38:73:28:a1:d6:04:13:a7:71:32:1c:
a4:a4:d9:86:73:bb:65:a8:ea:19:2f:fd:ad:50:ca:6a:87:42:
71:8b:c4:e7:1d:40:6b:0e:1f:14:0c:22:26:66:c4:3e:1d:10:
d3:64:30:dc:db:d3:fe:db:b3:3c:99:d4:b5:9f:79:c0:1d:24:
af:a4:07:c8:1d:b5:89:11:42:df:d7:89:2e:a4:93:ac:92:19:
2d:11:e4:32:c8:51:58:99:07:d6:0e:49:1c:ca:c1:c2:3c:7c:
b4:80:f4:19:70:d4:30:c9:b3:ee:98:13:c4:b6:3a:4e:11:6a:
14:85:f8:ad:97:a9:dd:6b:24:84:fd:4a:0c:8a:9f:db:99:3d:
ce:0b:d1:e3:67:be:d1:7f:72:aa:d8:e2:b7:0f:dc:c8:b7:c3:
09:09:70:b3:10:f9:31:30:4e:8d:d3:6c:43:cc:14:ba:5c:07:
48:e1:3c:12:b1:85:b3:50:25:07:7f:3a:92:d8:b6:d1:8e:f9:
11:df:35:2b:a5:4d:71:4f:bd:61:ef:c4:a9:be:55:44:64:10:
6f:ca:bf:95:b9:92:c6:33:a6:03:f7:53:b6:5e:dc:31:4e:ab:
4a:c0:ea:3d:0e:77:96:13:5e:ec:78:8a:cb:c7:81:e1:da:86:
7a:10:45:a9
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgISAZoABVE01nzW6Fz0uH+clIJ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUxMDIwMDUwODU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWVjZGJhZTQ2YzJjZDg4OTYzMDAyMDg4ODQ0NjI2NGEzODc4YzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF+ABAfSsOk9omw63b8dnEV1zFtT
9BcaPdnBtRxC4ZvmbxG6Y8YE2j21QRHXkHFh0Cc54rII8DmlJvdkWo4xyHqBnW+s
FSfBCnTT0QDRG7lV+Z+uvjg7H78kVfv2kaumgF6Cmr/77Sx8onZyf5R0ULJglAqa
j5izBViQ2jN4T6MevWX1ppskeSW2xZ8SE2Bk6+3z+orXNb2hzQx1i8o2eva14CKn
9zNfS1qkDas4ZNSrO3RP35c3gSEX8EvbXBDSpBJnbGV2/OgIDgh/bMILJdO7RlJc
AhJDD5yrpGw2wIaaxxHoBPRxKnJbs+86oESBVmhvjfpGeH/t9h5JL+jtTwIDAQAB
o4ICnjCCApowHQYDVR0OBBYEFAns265Gws2IljACCIhEYmSjh4w7MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvQ2V6YnJrYkN6WWlXTUFJSWlFUmlaS09IakRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBAAl
ysoDBACX8AEDBACX8AkDBACX8BEDBACX8BgDBACX8QEDBACX8QgDBAGX8UQDBACX
8gUDBACX8kMDBACX8lsDBACX8mcDBACX8nUDBACX8wYDBACX83gDBAKX86ADBACX
9E4DBACX9MADBACX9MsDBACX9TYDBACX9e4DBACX9rEDBACX9r4DBACX96gDBACX
99kwDQYJKoZIhvcNAQELBQADggEBAD5vWHZ3uoo4cyih1gQTp3EyHKSk2YZzu2Wo
6hkv/a1QymqHQnGLxOcdQGsOHxQMIiZmxD4dENNkMNzb0/7bszyZ1LWfecAdJK+k
B8gdtYkRQt/XiS6kk6ySGS0R5DLIUViZB9YOSRzKwcI8fLSA9Blw1DDJs+6YE8S2
Ok4RahSF+K2Xqd1rJIT9SgyKn9uZPc4L0eNnvtF/cqrY4rcP3Mi3wwkJcLMQ+TEw
To3TbEPMFLpcB0jhPBKxhbNQJQd/OpLYttGO+RHfNSulTXFPvWHvxKm+VURkEG/K
v5W5ksYzpgP3U7Ze3DFOq0rA6j0Od5YTXux4isvHgeHahnoQRak=
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:32:27 2025 by rpki-client