Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JrIf_AUwGbfUwsUQcGsXaMJpLqU.roa
File: JrIf_AUwGbfUwsUQcGsXaMJpLqU.roa (raw, json)
Hash identifier: 8eOexpjhvElcDAUB/M1h8Bn3vyLCrS+6JE3p8AHjqnE=
Subject key identifier: 26:B2:1F:FC:05:30:19:B7:D4:C2:C5:10:70:6B:17:68:C2:69:2E:A5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A1B6A5191AA69BD431C76C2F801FDC429
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JrIf_AUwGbfUwsUQcGsXaMJpLqU.roa
Signing time: Sat 25 Oct 2025 12:49:03 +0000
ROA not before: Sat 25 Oct 2025 12:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49608
IP address blocks: 151.241.22.0/24 maxlen: 24
151.244.254.0/24 maxlen: 24
151.245.20.0/24 maxlen: 24
151.245.25.0/24 maxlen: 24
151.245.30.0/24 maxlen: 24
151.245.40.0/24 maxlen: 24
151.245.46.0/24 maxlen: 24
151.245.52.0/24 maxlen: 24
151.247.128.0/24 maxlen: 24
151.247.136.0/24 maxlen: 24
151.247.144.0/24 maxlen: 24
151.247.206.0/24 maxlen: 24
151.247.214.0/24 maxlen: 24
151.247.222.0/24 maxlen: 24
151.247.240.0/24 maxlen: 24
151.247.247.0/24 maxlen: 24
151.247.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:6a:51:91:aa:69:bd:43:1c:76:c2:f8:01:fd:c4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 25 12:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26b21ffc053019b7d4c2c510706b1768c2692ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:74:9c:32:43:f4:92:3c:bd:2b:e2:31:80:96:
51:1c:73:51:93:fc:b8:9a:4d:be:61:44:80:4b:6e:
f0:a9:db:81:b8:a0:7d:84:09:50:41:90:30:62:5f:
85:4d:24:5b:6d:2f:16:76:ea:78:65:65:3a:73:79:
5b:1f:cc:60:c1:b3:31:f2:8c:4b:30:f7:29:e9:b4:
bf:a4:92:22:d8:97:02:98:b0:2a:13:2c:69:f3:76:
43:1e:04:1e:58:45:cb:56:5e:0a:4b:5a:53:6e:f4:
b4:7e:c1:ea:1e:d0:21:d7:7a:a9:b3:88:61:8f:91:
59:0f:e8:25:70:3f:78:91:75:23:ca:02:c7:3c:b2:
1a:d6:2c:6e:83:ad:4d:83:52:6d:8c:f8:c9:64:d8:
9f:5d:34:c1:67:43:78:f8:da:16:d4:15:79:a7:dd:
76:63:c4:39:80:d1:e0:0c:61:9c:a9:a0:3e:0c:8f:
7a:d9:ad:30:24:be:a0:87:04:88:e8:7f:27:2b:2a:
14:80:2b:bf:b2:5c:c2:e6:0e:06:36:9b:6d:43:85:
c0:7e:e2:52:e1:71:4a:86:c9:97:3d:69:58:98:9d:
14:3b:e4:79:f9:53:bf:c3:27:d9:ec:83:b5:4b:88:
5d:a9:ff:b0:7e:b0:9b:ed:57:71:75:ac:85:b3:61:
8e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B2:1F:FC:05:30:19:B7:D4:C2:C5:10:70:6B:17:68:C2:69:2E:A5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JrIf_AUwGbfUwsUQcGsXaMJpLqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.22.0/24
151.244.254.0/24
151.245.20.0/24
151.245.25.0/24
151.245.30.0/24
151.245.40.0/24
151.245.46.0/24
151.245.52.0/24
151.247.128.0/24
151.247.136.0/24
151.247.144.0/24
151.247.206.0/24
151.247.214.0/24
151.247.222.0/24
151.247.240.0/24
151.247.247.0/24
151.247.255.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:70:bf:c3:d1:9f:38:72:27:06:ed:28:fa:e4:95:2a:68:ec:
63:01:90:2e:bd:5c:81:9a:7c:31:16:49:60:84:e7:ae:75:c1:
10:b0:80:7c:db:83:77:b1:84:d1:2b:d6:b6:8b:ac:9b:c4:e8:
36:2e:11:13:26:d9:5c:83:1c:c8:29:bf:a1:71:d4:a4:b4:5e:
7a:0c:e3:ef:77:62:d0:83:e4:0b:93:d6:0e:f2:34:6c:1f:3d:
aa:9b:4f:ae:d0:a4:14:88:13:bd:a5:49:6c:c9:a7:60:47:db:
09:79:ef:2f:46:a4:b5:5d:20:0a:48:f4:e6:54:ca:80:2e:d0:
8b:3b:b7:48:79:b1:2a:3b:dc:15:e5:1e:9f:ff:4d:ed:f0:83:
9c:7b:ca:ae:52:60:36:46:32:70:5a:7b:68:12:79:a0:34:4a:
e7:20:c7:72:b3:6e:4a:0d:f5:88:3d:60:cb:ee:29:c4:fe:f6:
f4:f1:13:5f:67:21:92:70:76:2c:f4:ae:b0:5f:71:a0:06:83:
47:2d:e7:c6:eb:bb:52:b2:e5:aa:90:51:76:77:5e:b3:4f:fb:
fa:9a:3a:83:3e:52:8f:00:01:2a:74:09:de:2e:d6:a5:9c:47:
ed:6e:a2:82:57:66:d9:3a:85:9a:64:e8:5a:69:4b:d8:66:e5:
0c:e9:70:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:44:52 2025 by rpki-client