Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/F3fogJh1Vhmwh_-Y4YhxZTUyb_8.roa
File: F3fogJh1Vhmwh_-Y4YhxZTUyb_8.roa (raw, json)
Hash identifier: IMCP+7gbUjnMisWGmhx2VtNBtqE/lgmwBj8ccfwM/vQ=
Subject key identifier: 17:77:E8:80:98:75:56:19:B0:87:FF:98:E1:88:71:65:35:32:6F:FF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199523D5D93AF117BF0FCA30511FF1F37D7
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/F3fogJh1Vhmwh_-Y4YhxZTUyb_8.roa
Signing time: Tue 16 Sep 2025 11:16:17 +0000
ROA not before: Tue 16 Sep 2025 11:16:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 151.241.65.0/24 maxlen: 24
151.241.178.0/24 maxlen: 24
151.243.21.0/24 maxlen: 24
151.243.52.0/23 maxlen: 24
151.243.164.0/22 maxlen: 24
151.243.244.0/24 maxlen: 24
151.244.2.0/24 maxlen: 24
151.244.136.0/22 maxlen: 24
151.244.160.0/22 maxlen: 24
151.244.171.0/24 maxlen: 24
151.244.172.0/22 maxlen: 24
151.244.176.0/22 maxlen: 24
151.245.8.0/21 maxlen: 24
151.245.168.0/21 maxlen: 21
151.247.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:3d:5d:93:af:11:7b:f0:fc:a3:05:11:ff:1f:37:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 16 11:16:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1777e88098755619b087ff98e188716535326fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d4:c1:4a:35:3a:0c:8e:97:4c:3c:93:c0:a4:
65:6b:71:bb:d3:4e:a1:aa:d4:3e:3f:0c:2c:58:fd:
4e:67:8e:9d:8e:66:22:bd:b3:03:d3:22:9c:44:f9:
d4:78:f2:2e:2d:be:30:d0:47:5a:85:6b:54:02:7e:
ad:56:af:f1:37:7b:a3:1e:ef:6b:34:ae:bf:67:60:
c0:bd:27:dd:6c:a9:fb:77:b4:2e:be:3e:f9:5a:58:
f5:62:bf:1f:20:d0:83:e7:f4:ad:b0:7d:d1:57:6c:
2a:3d:90:9b:d8:c5:f3:37:25:8a:fc:ad:bb:cc:67:
aa:ec:a4:a9:ac:a2:02:e2:c0:90:ba:83:21:23:fa:
86:bf:c4:23:eb:65:0b:a5:1f:98:61:1f:a7:71:f9:
e8:ca:09:af:26:1a:ac:79:e4:79:6c:95:23:de:27:
af:3e:fa:87:c5:5c:86:02:27:b9:f0:88:15:05:ed:
36:8f:a1:a8:22:d9:ad:e0:ae:ab:f8:e1:30:26:b5:
5b:17:49:ad:96:b0:71:04:d0:88:71:64:f6:04:ff:
e4:f7:1e:4f:64:9e:63:0d:16:0c:70:fe:07:ae:79:
ef:58:e1:c2:71:ef:2f:f9:20:f7:eb:10:95:73:07:
b0:7e:71:09:93:ee:f0:11:03:73:5e:5e:8b:48:7f:
de:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:77:E8:80:98:75:56:19:B0:87:FF:98:E1:88:71:65:35:32:6F:FF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/F3fogJh1Vhmwh_-Y4YhxZTUyb_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.65.0/24
151.241.178.0/24
151.243.21.0/24
151.243.52.0/23
151.243.164.0/22
151.243.244.0/24
151.244.2.0/24
151.244.136.0/22
151.244.160.0/22
151.244.171.0-151.244.179.255
151.245.8.0/21
151.245.168.0/21
151.247.132.0/24
Signature Algorithm: sha256WithRSAEncryption
00:18:39:5a:4e:dd:fc:a2:7f:36:01:83:c9:a0:cd:b3:ec:ad:
f9:94:eb:5d:6e:dc:23:53:87:c7:58:d7:b9:a4:f6:82:88:65:
b0:8e:49:f7:ba:95:63:fc:d0:3f:b2:91:1f:7e:f0:f3:a0:46:
90:26:b0:1d:4c:87:4d:6e:a2:a7:0d:4b:b4:c7:2b:2f:d5:1d:
40:e9:6e:3f:51:1a:f0:12:d2:04:5b:b9:c1:e3:a1:26:5b:16:
a7:ed:92:2f:1b:23:c1:72:32:df:5e:2b:49:98:db:06:28:43:
75:7e:21:43:53:f0:4d:e9:5d:6c:66:bc:a6:d9:ce:7c:36:c6:
16:e7:aa:a8:9d:2e:02:c3:a7:28:81:7d:c2:7f:93:a1:88:d6:
41:0d:1d:bd:56:6f:5d:3d:29:0c:5f:22:06:a8:af:23:8a:e6:
83:3e:4f:47:67:aa:e8:9f:51:e7:a6:6c:35:73:fa:ee:80:83:
3f:dd:7d:52:95:ef:74:3b:11:9a:7a:98:16:72:42:27:90:1c:
52:da:ae:ab:9f:78:74:6f:74:e7:e2:7f:97:4e:ea:20:65:6b:
b6:f5:8b:00:52:55:8f:a0:c4:f9:62:80:3c:a6:af:d1:df:dc:
c3:e0:56:13:e4:dd:49:82:8c:86:e9:17:c6:61:59:e3:64:2e:
45:8a:09:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:11:45 2025 by rpki-client