Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CiOonKYUj1MPY-dXGium3p6yqFI.roa
File: CiOonKYUj1MPY-dXGium3p6yqFI.roa (raw, json)
Hash identifier: gcxGRbMbTzw8T6O5O4H3WzS58DizrD0LFlUgLqvCqHU=
Subject key identifier: 0A:23:A8:9C:A6:14:8F:53:0F:63:E7:57:1A:2B:A6:DE:9E:B2:A8:52
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A3AE120F6CA4BE7BDEC8C7D7C8B2DAF3F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CiOonKYUj1MPY-dXGium3p6yqFI.roa
Signing time: Fri 31 Oct 2025 15:27:03 +0000
ROA not before: Fri 31 Oct 2025 15:27:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205886
IP address blocks: 37.202.201.0/24 maxlen: 24
151.240.152.0/24 maxlen: 24
151.241.11.0/24 maxlen: 24
151.241.25.0/24 maxlen: 24
151.241.29.0/24 maxlen: 24
151.241.94.0/24 maxlen: 24
151.241.104.0/24 maxlen: 24
151.241.144.0/24 maxlen: 24
151.241.149.0/24 maxlen: 24
151.241.152.0/24 maxlen: 24
151.242.79.0/24 maxlen: 24
151.242.128.0/24 maxlen: 24
151.243.27.0/24 maxlen: 24
151.243.29.0/24 maxlen: 24
151.243.189.0/24 maxlen: 24
151.243.190.0/24 maxlen: 24
151.244.12.0/24 maxlen: 24
151.244.32.0/24 maxlen: 24
151.245.0.0/17 maxlen: 24
151.245.29.0/24 maxlen: 24
151.245.182.0/24 maxlen: 24
151.245.220.0/24 maxlen: 24
151.247.138.0/24 maxlen: 24
151.247.145.0/24 maxlen: 24
151.247.149.0/24 maxlen: 24
151.247.238.0/24 maxlen: 24
151.247.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:e1:20:f6:ca:4b:e7:bd:ec:8c:7d:7c:8b:2d:af:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 31 15:27:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a23a89ca6148f530f63e7571a2ba6de9eb2a852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5b:3c:8d:52:fe:21:48:5d:dc:e5:a5:c3:c9:
3e:43:8a:f9:a8:e5:f9:8c:b2:46:ae:f0:68:34:03:
05:f6:92:a3:b3:47:56:94:5d:4a:02:80:5d:4e:47:
2f:49:d9:60:02:ff:a4:da:f9:23:a1:04:f5:cc:a5:
d5:fe:30:ea:8e:52:a1:1a:5e:77:38:5c:95:4e:bf:
f7:b0:be:63:85:32:b7:0e:e9:10:d0:c4:fb:5c:3d:
60:78:ab:23:76:b3:07:d2:c8:2c:b1:bc:d0:67:29:
20:23:81:b3:8f:a8:e0:31:95:6d:cc:6d:a8:fa:e5:
01:b4:ed:41:25:89:ae:f0:1f:d7:e0:31:f1:09:78:
be:c9:a9:76:30:ff:cc:06:ed:cd:c4:5b:f8:5e:40:
d0:f9:03:73:37:2a:06:a0:f5:47:68:94:38:68:08:
cb:70:93:d4:a9:d5:c4:77:c6:49:e8:19:45:c5:bd:
db:2a:ae:06:3b:49:2a:3f:a9:30:eb:83:90:8d:a2:
f1:62:d3:ab:38:c1:08:db:5c:a1:2d:88:b6:aa:41:
95:e7:20:41:b4:55:1e:6f:c4:43:0e:ab:4d:1a:ae:
55:28:e0:d9:8d:a0:df:eb:a1:64:00:c9:a8:03:dc:
d1:8e:69:cc:7b:f4:dc:21:39:e9:d1:e1:04:da:1b:
d8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:23:A8:9C:A6:14:8F:53:0F:63:E7:57:1A:2B:A6:DE:9E:B2:A8:52
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CiOonKYUj1MPY-dXGium3p6yqFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.201.0/24
151.240.152.0/24
151.241.11.0/24
151.241.25.0/24
151.241.29.0/24
151.241.94.0/24
151.241.104.0/24
151.241.144.0/24
151.241.149.0/24
151.241.152.0/24
151.242.79.0/24
151.242.128.0/24
151.243.27.0/24
151.243.29.0/24
151.243.189.0-151.243.190.255
151.244.12.0/24
151.244.32.0/24
151.245.0.0/17
151.245.182.0/24
151.245.220.0/24
151.247.138.0/24
151.247.145.0/24
151.247.149.0/24
151.247.238.0/24
151.247.242.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:35:4c:81:d6:22:c0:95:c2:08:af:60:58:79:a7:a9:10:04:
8c:fb:83:fb:44:1f:3a:c1:5b:b2:a4:77:77:68:e6:90:f3:2f:
75:7c:92:db:2f:25:f4:fc:5a:1b:06:e0:ff:ad:dc:30:29:e5:
a1:90:94:63:6b:7a:20:1e:7c:04:7d:7f:ea:33:91:91:0b:81:
56:81:64:f8:48:f8:e4:17:c9:21:ad:86:d9:a6:de:00:8e:c9:
f8:c5:7f:0a:d2:cb:5d:74:b2:91:da:d0:14:de:19:9f:36:06:
cd:b2:a6:52:c2:c8:9e:2b:43:44:7b:08:ec:8e:84:45:cf:11:
21:fb:a2:84:e9:8a:d9:64:18:12:a7:60:f9:e3:7e:e4:06:0c:
53:f5:b0:e1:62:97:0d:50:ab:1d:1e:20:74:52:20:69:4e:90:
d7:ba:fe:7c:0b:0c:51:a7:39:e7:11:03:f9:ab:cb:28:69:c1:
82:5d:5a:63:bc:6e:e0:ab:f2:ae:bc:65:44:c4:1a:fd:b0:ca:
a1:75:4e:ba:87:64:5f:f7:73:cc:63:87:c5:6a:82:31:29:b5:
26:b1:81:f5:54:5d:88:3e:b5:25:50:0a:6d:e8:53:77:41:4a:
cb:97:4f:cc:3f:f9:86:de:c4:15:8d:d9:d8:9b:a2:ae:5d:7d:
9c:0b:65:d1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Nov 1 08:32:55 2025 by rpki-client