Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DniW4GwSXF1rAWar_Dn0I4X5CGE.roa
File: DniW4GwSXF1rAWar_Dn0I4X5CGE.roa (raw, json)
Hash identifier: FUwV9KMxBH3M+zlAtsID37D6R4hUSVsZPG0BQKJ86No=
Subject key identifier: 0E:78:96:E0:6C:12:5C:5D:6B:01:66:AB:FC:39:F4:23:85:F9:08:61
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A2FDA8E0A92085AA0A410AB3A73F0CE10
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DniW4GwSXF1rAWar_Dn0I4X5CGE.roa
Signing time: Wed 29 Oct 2025 12:04:03 +0000
ROA not before: Wed 29 Oct 2025 12:04:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 37.202.222.0/24 maxlen: 24
151.240.79.0/24 maxlen: 24
151.240.82.0/24 maxlen: 24
151.241.219.0/24 maxlen: 24
151.242.87.0/24 maxlen: 24
151.242.148.0/24 maxlen: 24
151.242.174.0/23 maxlen: 23
151.242.192.0/23 maxlen: 23
151.243.99.0/24 maxlen: 24
151.243.101.0/24 maxlen: 24
151.244.188.0/24 maxlen: 24
151.245.4.0/24 maxlen: 24
151.245.230.0/24 maxlen: 24
151.247.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:da:8e:0a:92:08:5a:a0:a4:10:ab:3a:73:f0:ce:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 29 12:04:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e7896e06c125c5d6b0166abfc39f42385f90861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c5:cc:33:e3:3a:f5:ab:df:65:08:86:53:6c:
06:e9:47:08:41:58:89:b2:32:06:44:7a:73:f3:0a:
15:8e:a2:48:0f:90:58:04:47:0a:52:05:ac:b6:81:
4f:ba:e3:8b:6a:ba:59:18:1f:46:66:58:78:73:a2:
f0:ae:11:1d:a2:5b:eb:61:dc:a7:35:05:6b:ec:36:
f9:7d:46:9b:66:33:41:f9:4d:db:ef:d3:28:16:0d:
46:65:2c:fe:d0:66:d9:73:0b:85:f5:43:b3:5f:8c:
92:8e:6c:1d:c4:28:5e:1a:45:bd:4c:56:9a:4d:31:
78:df:03:28:05:9b:b6:30:e9:7e:68:e1:ae:48:8e:
f9:e5:58:53:c0:e1:42:26:79:09:a8:e7:33:81:c8:
67:3a:5c:c5:6a:5d:39:94:0f:bf:f8:2f:73:1e:31:
ef:a7:1b:63:99:59:f0:fd:3e:a1:52:51:68:98:45:
66:d0:f1:74:30:65:94:e1:7b:27:ec:58:3e:db:12:
90:c7:a9:fb:8a:44:65:8f:d7:65:cb:95:03:fc:48:
21:9b:42:90:62:41:78:82:fc:67:15:3e:da:7a:b3:
da:c5:b7:84:c1:65:3c:40:cb:79:ca:8e:7a:67:11:
22:52:93:26:53:bd:8f:e4:9b:73:91:7c:53:69:e6:
29:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:78:96:E0:6C:12:5C:5D:6B:01:66:AB:FC:39:F4:23:85:F9:08:61
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DniW4GwSXF1rAWar_Dn0I4X5CGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.222.0/24
151.240.79.0/24
151.240.82.0/24
151.241.219.0/24
151.242.87.0/24
151.242.148.0/24
151.242.174.0/23
151.242.192.0/23
151.243.99.0/24
151.243.101.0/24
151.244.188.0/24
151.245.4.0/24
151.245.230.0/24
151.247.245.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:21:0e:7f:34:eb:52:26:10:46:85:3c:ea:76:2a:d4:5c:e6:
de:90:6d:de:5b:54:38:df:db:30:c6:19:55:67:28:b3:a5:7f:
3b:ad:7b:52:21:9a:28:32:05:fa:3d:17:97:e1:a2:6e:aa:48:
0d:f8:95:c3:fd:10:9a:6d:88:2e:e4:34:07:c3:a9:24:b1:c9:
b7:60:2e:84:de:cd:93:f2:6d:f7:cb:2f:81:1b:d4:fa:90:5f:
31:4c:00:96:ed:f2:39:f2:5b:95:8a:2d:9f:0a:9e:c8:7e:7d:
a4:b2:eb:11:ca:16:52:f8:1f:2c:2f:94:26:ec:30:49:4c:21:
ae:cd:97:a2:c4:f6:94:90:98:ed:0c:f6:53:33:f4:4a:45:ee:
ae:fb:1f:1e:52:ed:5b:5d:ae:b1:b7:80:76:f4:c1:db:8e:a0:
b0:56:51:94:00:14:a4:c0:5d:54:51:5f:66:a6:aa:78:73:c7:
62:26:32:45:d0:21:31:11:57:ef:9e:11:53:73:c8:1d:5b:7e:
17:4a:a4:c3:f7:b3:4a:93:e7:64:a2:11:50:03:aa:f6:39:59:
bc:99:f9:2e:62:1e:09:e2:b1:73:d7:d0:c6:29:a1:c4:47:73:
26:49:fb:b0:15:11:2c:02:08:73:11:df:62:7b:d0:c3:ac:78:
9c:ee:d9:ad
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAZov2o4KkghaoKQQqzpz8M4QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUxMDI5MTIwNDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTc4OTZlMDZjMTI1YzVkNmIwMTY2YWJmYzM5ZjQyMzg1ZjkwODYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMXMM+M69avfZQiGU2wG6UcIQViJ
sjIGRHpz8woVjqJID5BYBEcKUgWstoFPuuOLarpZGB9GZlh4c6LwrhEdolvrYdyn
NQVr7Db5fUabZjNB+U3b79MoFg1GZSz+0GbZcwuF9UOzX4ySjmwdxCheGkW9TFaa
TTF43wMoBZu2MOl+aOGuSI755VhTwOFCJnkJqOczgchnOlzFal05lA+/+C9zHjHv
pxtjmVnw/T6hUlFomEVm0PF0MGWU4Xsn7Fg+2xKQx6n7ikRlj9dly5UD/Eghm0KQ
YkF4gvxnFT7aerPaxbeEwWU8QMt5yo56ZxEiUpMmU72P5JtzkXxTaeYpWwIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFA54luBsElxdawFmq/w59COF+QhhMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvRG5pVzRHd1NYRjFyQVdhcl9EbjBJNFg1Q0dFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAJcreAwQA
l/BPAwQAl/BSAwQAl/HbAwQAl/JXAwQAl/KUAwQBl/KuAwQBl/LAAwQAl/NjAwQA
l/NlAwQAl/S8AwQAl/UEAwQAl/XmAwQAl/f1MA0GCSqGSIb3DQEBCwUAA4IBAQCr
IQ5/NOtSJhBGhTzqdirUXObekG3eW1Q439swxhlVZyizpX87rXtSIZooMgX6PReX
4aJuqkgN+JXD/RCabYgu5DQHw6kkscm3YC6E3s2T8m33yy+BG9T6kF8xTACW7fI5
8luVii2fCp7Ifn2ksusRyhZS+B8sL5Qm7DBJTCGuzZeixPaUkJjtDPZTM/RKRe6u
+x8eUu1bXa6xt4B29MHbjqCwVlGUABSkwF1UUV9mpqp4c8diJjJF0CExEVfvnhFT
c8gdW34XSqTD97NKk+dkohFQA6r2OVm8mfkuYh4J4rFz19DGKaHER3MmSfuwFREs
AghzEd9ie9DDrHic7tmt
-----END CERTIFICATE-----
Generated at Mon Nov 3 09:34:50 2025 by rpki-client