Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DrQ3AcVhwsMpmXntq8rWN8eNOvY.roa
File: DrQ3AcVhwsMpmXntq8rWN8eNOvY.roa (raw, json)
Hash identifier: hPFEAr6psFdvFGpGkzrJ+Edle5J7y51J770HXSXeb0U=
Subject key identifier: 0E:B4:37:01:C5:61:C2:C3:29:99:79:ED:AB:CA:D6:37:C7:8D:3A:F6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199BD031FCAD873E0ACF6BB1912B01D8CD2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DrQ3AcVhwsMpmXntq8rWN8eNOvY.roa
Signing time: Tue 07 Oct 2025 04:52:02 +0000
ROA not before: Tue 07 Oct 2025 04:52:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4766
IP address blocks: 151.245.190.0/24 maxlen: 24
151.245.196.0/24 maxlen: 24
151.245.240.0/24 maxlen: 24
151.245.254.0/23 maxlen: 24
151.246.162.0/23 maxlen: 24
151.246.170.0/23 maxlen: 24
151.246.182.0/23 maxlen: 24
151.246.192.0/23 maxlen: 24
151.246.202.0/23 maxlen: 24
151.246.214.0/23 maxlen: 24
151.246.224.0/23 maxlen: 24
151.246.254.0/24 maxlen: 24
151.247.140.0/23 maxlen: 24
151.247.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:bd:03:1f:ca:d8:73:e0:ac:f6:bb:19:12:b0:1d:8c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 7 04:52:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0eb43701c561c2c3299979edabcad637c78d3af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4a:95:d3:d7:90:7e:07:02:b7:c1:05:ef:95:
df:65:f8:40:c6:14:6b:9a:27:9a:f4:5b:34:52:df:
0b:bf:17:cf:4a:40:7b:01:6d:5f:f5:43:b7:cf:49:
91:c3:74:e9:c5:34:d2:c1:66:ef:25:80:9d:a6:21:
ca:ab:01:9a:61:18:98:57:2a:41:66:da:3f:d5:6f:
91:66:bf:c3:ce:86:ec:d5:f7:9f:c3:91:e1:4d:71:
90:61:52:3d:3b:9e:3d:b0:3c:ef:30:08:41:82:60:
4e:2d:2e:ac:fa:68:c0:f1:e0:ef:be:fb:8d:cd:03:
16:89:3c:a0:a8:de:c9:4c:06:6b:6e:63:76:0b:5f:
57:0f:b9:df:7d:db:53:18:db:73:8a:7b:b9:85:4f:
f1:db:ef:01:8b:4f:f7:1d:a3:54:91:dc:4f:f0:a3:
12:e9:25:40:5d:aa:f9:44:18:5d:37:19:64:6f:50:
c4:88:03:a2:a2:2a:bc:cf:c0:71:4c:43:98:16:03:
0c:dc:81:f4:8d:a8:06:c5:4a:0f:8c:59:4f:c0:55:
fb:08:c4:3c:14:4c:ea:22:e6:6d:59:07:b1:c0:15:
a1:f0:bd:be:94:13:ea:b9:80:48:b5:15:78:3e:34:
0c:36:a6:fa:c7:f3:8e:a4:8e:12:1f:5d:ab:2f:7d:
6f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B4:37:01:C5:61:C2:C3:29:99:79:ED:AB:CA:D6:37:C7:8D:3A:F6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DrQ3AcVhwsMpmXntq8rWN8eNOvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.190.0/24
151.245.196.0/24
151.245.240.0/24
151.245.254.0/23
151.246.162.0/23
151.246.170.0/23
151.246.182.0/23
151.246.192.0/23
151.246.202.0/23
151.246.214.0/23
151.246.224.0/23
151.246.254.0/24
151.247.140.0/23
151.247.154.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:28:e4:f3:4a:75:4d:35:64:e2:54:a6:72:98:40:fb:fd:6e:
a9:45:8c:58:8f:c6:19:11:3f:85:7c:72:25:66:86:9c:ee:69:
d9:26:83:01:ae:c7:90:df:84:16:f0:2f:9c:15:79:2e:f3:d5:
fa:8f:28:17:a5:3d:a7:90:af:df:b9:a1:20:a0:98:90:73:87:
cf:39:8d:b5:37:d4:68:51:1f:49:43:bf:71:06:4d:5d:1e:24:
94:22:80:ae:b3:c8:2b:8e:5b:86:2e:5f:cd:3e:23:d3:f6:01:
5b:7e:6b:b8:05:ae:a6:62:89:e0:c2:51:04:92:9d:22:38:d1:
f2:f3:c0:b1:9e:b9:82:b1:2b:30:ea:f3:9e:c1:87:1f:76:41:
a8:65:94:70:3f:37:74:2f:3f:ab:3e:35:b4:7b:f6:a3:8a:85:
fd:5c:b4:6f:04:f5:9b:0d:a0:8a:5d:5a:c0:b4:5c:08:f5:c1:
9a:59:89:6e:e6:ca:34:4f:93:6b:38:fe:bd:9f:e5:1d:91:3a:
88:7e:2e:ec:61:52:c6:75:e6:ee:18:65:3a:a9:c8:39:e2:13:
08:f7:ce:81:ae:17:2d:98:f6:51:cb:ea:36:e1:9c:11:5a:7b:
24:8d:c7:3e:2b:ef:18:2d:27:eb:ac:b1:c2:51:a5:fb:cb:2e:
a6:91:55:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:05:29 2025 by rpki-client