Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FFehEcBxroRCWeOwHQUlhc-DZ4c.roa
File: FFehEcBxroRCWeOwHQUlhc-DZ4c.roa (raw, json)
Hash identifier: 3AGNmf16y2DWPIj+f/leu9dbscv4mlFKU2Odf8BpgxE=
Subject key identifier: 14:57:A1:11:C0:71:AE:84:42:59:E3:B0:1D:05:25:85:CF:83:67:87
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198F960A53397454F7829B67421B94E34F3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FFehEcBxroRCWeOwHQUlhc-DZ4c.roa
Signing time: Sat 30 Aug 2025 05:08:37 +0000
ROA not before: Sat 30 Aug 2025 05:08:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400909
IP address blocks: 37.202.192.0/24 maxlen: 24
37.202.214.0/23 maxlen: 23
151.242.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 13:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f9:60:a5:33:97:45:4f:78:29:b6:74:21:b9:4e:34:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 30 05:08:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1457a111c071ae844259e3b01d052585cf836787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:26:73:e3:b5:70:18:fc:19:51:c7:41:ef:62:
2c:6f:9e:77:d8:6c:78:05:7d:df:31:71:d2:9f:2f:
dc:cf:e1:cf:70:a7:bf:56:a8:c5:c8:0b:91:e7:72:
3a:df:80:0c:71:fd:8e:f9:0d:43:9f:a7:74:13:e8:
a0:2f:5e:a8:03:7f:98:ee:fb:01:e4:64:54:82:e7:
c3:bf:65:39:88:91:5a:de:b9:75:a1:47:83:86:96:
42:c2:00:fe:49:1c:a1:71:c4:ba:1a:91:5e:15:a5:
b6:fd:bb:bd:4f:6b:c9:a7:53:b3:2a:37:15:bb:a2:
95:0e:0f:e3:55:45:d9:bb:9b:0d:4d:64:10:c9:99:
44:0d:8f:6b:9f:de:45:17:4c:52:fd:65:41:c1:47:
11:16:c3:3d:3b:e1:be:fc:16:ce:5f:c7:f4:e5:13:
a7:47:d1:2f:f2:2d:dc:3f:de:06:2c:6b:54:06:1f:
f0:1c:3b:96:7b:23:bf:d1:47:43:4f:cd:28:13:fd:
7e:93:6f:d9:38:c9:8f:7b:b4:37:de:7e:b0:21:d4:
44:54:ac:6a:29:ce:88:95:56:f1:3a:24:80:6b:23:
06:51:06:a3:17:fa:90:f3:22:68:18:a7:08:8c:93:
1e:82:8f:ed:fe:f7:d9:5f:a0:de:3c:e9:17:40:e3:
e7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:57:A1:11:C0:71:AE:84:42:59:E3:B0:1D:05:25:85:CF:83:67:87
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FFehEcBxroRCWeOwHQUlhc-DZ4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.192.0/24
37.202.214.0/23
151.242.6.0/24
Signature Algorithm: sha256WithRSAEncryption
38:21:84:54:7c:cf:91:1c:7e:74:35:86:e5:2a:ef:3f:e3:28:
5f:99:4f:dd:9e:ee:b1:e3:a8:ca:5b:e5:68:28:f8:eb:bf:0a:
ea:b7:07:5d:87:ff:96:77:4c:dd:d4:d9:3c:81:f1:cc:22:a4:
88:d5:82:4c:11:d6:05:2e:1e:57:6b:08:14:57:92:12:00:65:
db:89:3f:0f:8e:89:8f:32:08:92:0a:5d:f2:32:95:62:fe:ea:
f0:10:e8:2d:34:a9:c1:23:6d:a0:28:75:a9:86:0a:3f:f6:65:
03:22:7f:6e:19:57:84:9b:c5:6d:ec:17:f9:fb:39:3e:cb:a2:
05:b8:e6:85:83:8d:7f:90:bc:1d:e7:0f:05:a6:21:ab:5f:69:
64:ee:c4:5b:6f:7e:f4:1d:d8:88:35:9e:56:ae:9b:0f:67:0c:
3a:87:31:12:26:31:b1:0d:a0:28:b4:c9:8d:01:bd:63:99:5a:
3f:51:63:37:f8:d4:3d:e8:89:92:16:a3:f4:ac:8b:5c:a2:93:
41:19:58:1f:11:86:bd:af:d2:64:94:bf:09:3c:6d:03:2b:03:
20:5a:52:17:53:b0:0f:b5:45:df:08:58:8f:0a:3f:22:e0:74:
d0:25:63:82:ab:fd:dd:ae:35:b4:f9:77:1a:e1:fe:a5:fc:0e:
69:32:5e:de
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZj5YKUzl0VPeCm2dCG5TjTzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwODMwMDUwODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDU3YTExMWMwNzFhZTg0NDI1OWUzYjAxZDA1MjU4NWNmODM2Nzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yZz47VwGPwZUcdB72Isb5532Gx4
BX3fMXHSny/cz+HPcKe/VqjFyAuR53I634AMcf2O+Q1Dn6d0E+igL16oA3+Y7vsB
5GRUgufDv2U5iJFa3rl1oUeDhpZCwgD+SRyhccS6GpFeFaW2/bu9T2vJp1OzKjcV
u6KVDg/jVUXZu5sNTWQQyZlEDY9rn95FF0xS/WVBwUcRFsM9O+G+/BbOX8f05ROn
R9Ev8i3cP94GLGtUBh/wHDuWeyO/0UdDT80oE/1+k2/ZOMmPe7Q33n6wIdREVKxq
Kc6IlVbxOiSAayMGUQajF/qQ8yJoGKcIjJMego/t/vfZX6DePOkXQOPnMQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBRXoRHAca6EQlnjsB0FJYXPg2eHMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvRkZlaEVjQnhyb1JDV2VPd0hRVWxoYy1EWjRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJcrAAwQB
JcrWAwQAl/IGMA0GCSqGSIb3DQEBCwUAA4IBAQA4IYRUfM+RHH50NYblKu8/4yhf
mU/dnu6x46jKW+VoKPjrvwrqtwddh/+Wd0zd1Nk8gfHMIqSI1YJMEdYFLh5XawgU
V5ISAGXbiT8PjomPMgiSCl3yMpVi/urwEOgtNKnBI22gKHWphgo/9mUDIn9uGVeE
m8Vt7Bf5+zk+y6IFuOaFg41/kLwd5w8FpiGrX2lk7sRbb370HdiINZ5WrpsPZww6
hzESJjGxDaAotMmNAb1jmVo/UWM3+NQ96ImSFqP0rItcopNBGVgfEYa9r9JklL8J
PG0DKwMgWlIXU7APtUXfCFiPCj8i4HTQJWOCq/3drjW0+Xca4f6l/A5pMl7e
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:42:26 2025 by rpki-client