Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DusvbHiMqOlKhPMNsoWxgX5dfFg.roa
File: DusvbHiMqOlKhPMNsoWxgX5dfFg.roa (raw, json)
Hash identifier: 1K31qSi2WQWTvruZ0G8WpaXL2LVN6Y3sz22y2eCtLD8=
Subject key identifier: 0E:EB:2F:6C:78:8C:A8:E9:4A:84:F3:0D:B2:85:B1:81:7E:5D:7C:58
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A61E60EEC8CCFD8A38BB7C16AE90A89A5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DusvbHiMqOlKhPMNsoWxgX5dfFg.roa
Signing time: Sat 08 Nov 2025 05:17:38 +0000
ROA not before: Sat 08 Nov 2025 05:17:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54252
IP address blocks: 151.240.2.0/24 maxlen: 24
151.240.169.0/24 maxlen: 24
151.241.33.0/24 maxlen: 24
151.241.43.0/24 maxlen: 24
151.241.48.0/24 maxlen: 24
151.241.51.0/24 maxlen: 24
151.241.164.0/24 maxlen: 24
151.242.26.0/24 maxlen: 24
151.243.26.0/24 maxlen: 24
151.244.42.0/24 maxlen: 24
151.245.69.0/24 maxlen: 24
151.245.162.0/24 maxlen: 24
151.245.166.0/24 maxlen: 24
151.245.177.0/24 maxlen: 24
151.247.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Nov 2025 15:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:61:e6:0e:ec:8c:cf:d8:a3:8b:b7:c1:6a:e9:0a:89:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 8 05:17:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0eeb2f6c788ca8e94a84f30db285b1817e5d7c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f9:a5:48:74:6a:2d:d1:1e:ca:16:14:a9:c6:
3b:58:15:42:ef:48:ae:7e:a8:05:cb:34:a3:07:9c:
83:b1:a7:fb:67:27:fe:49:51:72:a2:d7:6c:cc:c3:
e4:1e:e1:1e:48:38:b9:87:d7:a9:a0:1a:f5:4b:49:
cd:0f:b6:c6:9f:83:9e:68:b6:22:39:ae:7a:f5:e3:
d4:af:15:03:9e:ad:30:70:7e:f2:6e:eb:8f:7e:10:
41:32:d5:ea:16:19:e1:d6:97:54:97:3b:70:21:bf:
34:8b:02:bd:6a:23:05:ef:ae:bb:91:29:b5:3a:64:
9f:67:74:52:0e:d9:fb:32:b9:2b:5c:47:28:f8:ec:
a8:12:bf:a1:86:1c:ca:76:b0:ac:63:4f:48:ed:c0:
1e:c7:fc:ef:dd:64:32:eb:b6:e4:68:10:7c:c1:ad:
7f:1b:89:f8:53:47:99:72:2d:0b:e8:0d:3d:53:2e:
f8:69:e9:e5:ac:d9:8e:80:69:75:36:d1:47:99:c9:
2e:66:b5:a5:69:1d:b7:b8:50:1e:e2:37:0f:6a:1c:
06:ba:0b:ee:aa:87:39:6a:24:2e:35:82:fb:31:e8:
f0:5a:41:00:68:1b:81:7f:b4:ce:da:d3:d2:f2:28:
d8:e7:f0:b5:ef:dd:cc:2f:da:17:d4:89:7a:8e:d5:
51:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EB:2F:6C:78:8C:A8:E9:4A:84:F3:0D:B2:85:B1:81:7E:5D:7C:58
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DusvbHiMqOlKhPMNsoWxgX5dfFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.2.0/24
151.240.169.0/24
151.241.33.0/24
151.241.43.0/24
151.241.48.0/24
151.241.51.0/24
151.241.164.0/24
151.242.26.0/24
151.243.26.0/24
151.244.42.0/24
151.245.69.0/24
151.245.162.0/24
151.245.166.0/24
151.245.177.0/24
151.247.246.0/24
Signature Algorithm: sha256WithRSAEncryption
31:08:9c:94:b8:0e:0f:fb:dc:2b:8c:24:6f:d9:33:a5:d5:1c:
b7:9a:94:de:5f:d6:85:a5:9f:96:58:56:db:cd:d8:5d:11:cd:
57:2c:44:dc:99:01:32:29:61:47:f4:98:81:01:b9:fa:13:14:
32:87:db:19:44:f7:c7:c3:51:98:f4:38:40:7c:9c:66:1f:f2:
70:40:e7:53:fb:7d:52:56:d9:11:cf:07:52:2e:08:a4:4f:76:
ca:2c:a6:07:03:9b:4e:65:6f:7e:be:8d:97:ff:5f:86:a3:1a:
6f:d6:15:35:0f:4d:31:09:06:4c:66:70:4b:60:2d:53:ea:86:
26:d8:45:a7:fe:38:93:1b:22:2d:0f:24:7e:e1:21:0e:3a:66:
ec:99:cb:3d:22:2b:ac:19:ba:89:ff:50:3b:44:e4:19:d0:e2:
1c:dd:42:b7:77:91:dd:09:36:b1:25:15:b3:68:90:0e:7a:0b:
5d:4c:94:3b:5a:27:f1:00:79:81:95:0d:87:2e:7a:1c:91:43:
c7:10:cc:54:40:82:51:2c:04:3b:d2:d6:56:54:df:66:54:12:
fa:06:23:3e:d2:1d:2d:35:1f:df:c5:f8:70:be:08:3d:ad:a5:
45:71:1c:a8:2c:02:6b:18:4a:cb:f7:5a:39:a3:8a:0b:1b:a3:
b8:bd:87:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 13 23:43:54 2025 by rpki-client