Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FbGSctF5ue9js4Ghw60uOcpfHiA.roa
File: FbGSctF5ue9js4Ghw60uOcpfHiA.roa (raw, json)
Hash identifier: jZp/04mGB7GIt3HTd8ABntty/sRKkJY+ixqF35CDMWI=
Subject key identifier: 15:B1:92:72:D1:79:B9:EF:63:B3:81:A1:C3:AD:2E:39:CA:5F:1E:20
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01994D44C7D194E1971C56A50A4374B58F56
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FbGSctF5ue9js4Ghw60uOcpfHiA.roa
Signing time: Mon 15 Sep 2025 12:06:17 +0000
ROA not before: Mon 15 Sep 2025 12:06:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135391
IP address blocks: 151.240.122.0/24 maxlen: 24
151.241.109.0/24 maxlen: 24
151.242.29.0/24 maxlen: 24
151.242.66.0/24 maxlen: 24
151.242.88.0/24 maxlen: 24
151.243.3.0/24 maxlen: 24
151.245.34.0/24 maxlen: 24
151.245.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4d:44:c7:d1:94:e1:97:1c:56:a5:0a:43:74:b5:8f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 15 12:06:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15b19272d179b9ef63b381a1c3ad2e39ca5f1e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4f:d8:c8:96:9d:c6:af:5f:53:d5:ad:98:fa:
8a:cb:85:93:d3:56:65:74:1d:58:fc:86:b3:76:60:
f2:89:ed:cc:1e:db:3b:2e:dc:29:a4:5b:ec:67:95:
70:63:55:5f:31:57:2d:27:19:c0:af:58:03:87:a3:
c4:2e:02:15:7a:b6:e1:cf:b5:62:91:a6:22:d4:9c:
35:11:5a:ac:45:b7:5b:0a:71:fd:fe:53:bb:c4:71:
37:5f:43:b5:05:5a:03:65:ec:10:6b:a8:2f:57:bf:
4c:8b:a1:58:2e:a0:c4:dc:a8:f1:aa:17:63:a7:b1:
1e:e4:d2:8e:29:bf:5b:8d:ce:61:ce:aa:56:fa:0a:
b2:15:9e:6f:d4:76:32:ec:7f:77:8e:85:92:bd:8b:
cc:d8:0f:6b:81:4a:67:da:13:fe:a8:20:cc:82:9c:
9b:1f:0f:ec:f0:55:7b:31:f5:cd:9c:b6:5a:71:a6:
4d:0b:02:9d:38:56:9f:86:18:98:e6:a7:a7:0c:ad:
31:76:54:92:d9:78:df:a4:c4:65:0a:81:03:c5:8b:
58:8d:47:f9:58:24:a5:cb:4e:cb:64:b2:a3:5c:9a:
19:f0:68:fe:db:02:72:72:62:e5:a8:e7:08:14:4f:
28:b9:a0:56:db:0c:86:f3:bc:ca:f2:49:b1:ee:1e:
fd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B1:92:72:D1:79:B9:EF:63:B3:81:A1:C3:AD:2E:39:CA:5F:1E:20
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FbGSctF5ue9js4Ghw60uOcpfHiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.122.0/24
151.241.109.0/24
151.242.29.0/24
151.242.66.0/24
151.242.88.0/24
151.243.3.0/24
151.245.34.0/24
151.245.92.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:64:fd:93:e2:93:4e:ba:d6:ed:1e:07:f1:53:66:79:75:47:
c1:3c:f3:d2:f1:9f:ec:e1:50:bf:3f:79:8e:30:30:05:99:97:
7d:82:51:51:22:c3:b6:1f:4b:7d:47:0a:3d:2a:9a:bc:0f:75:
64:9c:0f:3b:c3:7c:45:89:bd:ab:77:e8:cf:e9:f7:6b:68:b8:
c6:13:2c:8d:55:b2:aa:e0:85:cb:e2:b8:73:b9:70:50:b4:05:
e0:78:1f:a3:e3:f5:1b:dc:0a:48:2c:9f:14:c4:e6:ba:20:cf:
2e:0c:32:76:89:20:bd:ac:6a:0b:bf:97:b2:00:cf:ce:0a:1a:
ca:8c:a5:aa:4a:2e:d0:54:cb:c3:4a:85:94:d6:8e:37:17:f4:
61:3e:dd:ce:51:ed:3d:e3:33:08:81:5a:e1:da:c7:0a:be:cd:
64:97:8b:7d:ce:38:69:5a:d0:76:c1:bc:74:9d:31:d4:55:8d:
27:15:59:20:f5:cb:cb:3a:85:6d:98:2e:fa:d8:d0:1b:f7:d3:
4c:f8:3c:64:1e:42:98:65:1a:f5:7e:ec:2d:46:ac:aa:9f:e9:
0a:3f:a3:c1:cb:36:e1:17:3e:53:0f:15:89:dd:ca:28:13:15:
b7:ad:ee:6e:6f:7b:3d:3c:c3:75:2d:89:fc:a7:4d:f1:9e:f7:
21:82:2a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:56:55 2025 by rpki-client