Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IO0nnXZnaM5V5f85TaBa5fBOYwU.roa
File: IO0nnXZnaM5V5f85TaBa5fBOYwU.roa (raw, json)
Hash identifier: BzWJCDJV17kxpQoMmrR00U4F4hzQ15sMRAep/Um/sqk=
Subject key identifier: 20:ED:27:9D:76:67:68:CE:55:E5:FF:39:4D:A0:5A:E5:F0:4E:63:05
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A0AA73F930C2F9DFD2DEFB13008CF2ADF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IO0nnXZnaM5V5f85TaBa5fBOYwU.roa
Signing time: Wed 22 Oct 2025 06:42:04 +0000
ROA not before: Wed 22 Oct 2025 06:42:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214432
IP address blocks: 151.240.73.0/24 maxlen: 24
151.240.78.0/24 maxlen: 24
151.241.177.0/24 maxlen: 24
151.244.38.0/24 maxlen: 24
151.244.52.0/24 maxlen: 24
151.244.62.0/24 maxlen: 24
151.244.75.0/24 maxlen: 24
151.244.87.0/24 maxlen: 24
151.245.189.0/24 maxlen: 24
151.245.191.0/24 maxlen: 24
151.245.192.0/24 maxlen: 24
151.245.241.0/24 maxlen: 24
151.245.247.0/24 maxlen: 24
151.246.248.0/24 maxlen: 24
151.247.175.0/24 maxlen: 24
151.247.181.0/24 maxlen: 24
151.247.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:a7:3f:93:0c:2f:9d:fd:2d:ef:b1:30:08:cf:2a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 22 06:42:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20ed279d766768ce55e5ff394da05ae5f04e6305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:1a:7b:aa:e7:e2:89:75:86:ef:d3:2c:3c:
b9:b0:4a:30:32:0e:48:b9:78:72:07:61:dd:9c:95:
96:fc:52:ba:34:ac:75:d1:07:20:e0:7c:67:d1:ce:
22:9b:b0:87:97:93:d4:0b:2c:9c:3d:11:d2:84:d0:
fd:38:65:3a:5d:33:c6:99:15:bb:39:70:09:ad:d9:
c9:2d:fd:da:50:30:c8:50:4d:29:e3:c2:fc:ba:71:
28:94:b6:7d:4c:fc:e9:17:51:e1:b6:68:7d:e0:d4:
3e:fa:59:4e:76:34:76:92:18:cd:84:df:c6:ba:d5:
5d:b1:71:a9:83:68:ef:38:6b:3a:15:2e:e2:40:33:
1b:90:72:5c:aa:49:aa:c9:52:8a:9d:8d:82:9b:5f:
c6:71:03:2b:48:c5:5f:38:e0:7e:dc:49:31:c2:c2:
50:d2:9c:77:b3:a3:8c:a9:4c:65:4a:05:f2:80:0e:
75:87:7c:47:4e:60:c8:dd:5f:bc:14:04:12:69:17:
48:91:8b:df:45:31:09:d8:6c:ea:45:3b:f3:67:67:
9f:35:8c:7e:33:87:b5:2c:26:f7:b2:df:6e:63:cc:
88:cd:cf:61:9d:ad:7c:3a:fc:0f:31:00:93:7b:f1:
44:49:27:ca:1c:95:0e:43:40:a2:4c:33:fe:ed:35:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:ED:27:9D:76:67:68:CE:55:E5:FF:39:4D:A0:5A:E5:F0:4E:63:05
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IO0nnXZnaM5V5f85TaBa5fBOYwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.73.0/24
151.240.78.0/24
151.241.177.0/24
151.244.38.0/24
151.244.52.0/24
151.244.62.0/24
151.244.75.0/24
151.244.87.0/24
151.245.189.0/24
151.245.191.0-151.245.192.255
151.245.241.0/24
151.245.247.0/24
151.246.248.0/24
151.247.175.0/24
151.247.181.0-151.247.182.255
Signature Algorithm: sha256WithRSAEncryption
5e:af:26:7f:af:c5:d2:54:4e:cb:8b:db:04:47:b3:f1:58:52:
d4:d6:4f:a6:99:d0:a2:08:15:0e:0d:27:b0:a2:c5:36:9c:a1:
b6:9b:5c:0d:69:1f:d3:83:05:2f:15:00:7b:aa:2c:37:38:93:
50:1e:f6:dd:2c:a7:57:09:af:c9:f4:ad:83:7a:5b:5c:83:21:
15:10:d4:48:5f:00:76:92:a9:0a:2a:6c:e0:49:7e:b9:3f:f4:
c4:ca:00:04:c8:0f:a6:9d:5e:dc:7f:b4:dc:9e:18:2d:73:71:
f6:e5:11:36:be:8c:c7:8f:a2:83:ca:15:fa:9d:38:83:08:b6:
1b:e6:b7:a2:f3:6f:ab:ef:66:9a:6c:53:2a:50:ab:c0:b2:cb:
81:9e:1f:c8:0e:6d:63:c0:24:cc:a8:c9:83:9d:2f:80:8e:aa:
7f:82:da:cd:5c:a8:28:d9:fc:da:c1:0d:d9:8a:42:0b:f1:82:
a1:49:d5:39:d9:e3:36:07:13:d6:84:7f:58:33:ad:09:05:ed:
08:dd:d5:bc:7f:a5:a2:49:96:0b:69:d2:cb:c5:c2:42:81:40:
ba:65:44:b4:ed:21:8d:6b:d2:c0:5b:3e:26:d6:c9:d9:c6:73:
6c:3d:7d:9f:ef:dc:5c:69:ad:90:68:1e:98:51:d0:34:0f:78:
4a:05:60:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 08:52:38 2025 by rpki-client