Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KT7ktZTHMUonB6Y0WDcjIj2Io00.roa
File: KT7ktZTHMUonB6Y0WDcjIj2Io00.roa (raw, json)
Hash identifier: s0EU+M0oIPcgJ+X1zm4kxW4spZUX0FDPqXOO/i45LyU=
Subject key identifier: 29:3E:E4:B5:94:C7:31:4A:27:07:A6:34:58:37:23:22:3D:88:A3:4D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199D2D80E6B268B60E77CD28D6DDC564B0A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KT7ktZTHMUonB6Y0WDcjIj2Io00.roa
Signing time: Sat 11 Oct 2025 10:36:38 +0000
ROA not before: Sat 11 Oct 2025 10:36:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 984
IP address blocks: 151.240.146.0/24 maxlen: 24
151.241.153.0/24 maxlen: 24
151.242.54.0/24 maxlen: 24
151.243.107.0/24 maxlen: 24
151.243.108.0/24 maxlen: 24
151.244.16.0/21 maxlen: 24
151.244.34.0/24 maxlen: 24
151.244.168.0/23 maxlen: 24
151.244.216.0/23 maxlen: 24
151.244.218.0/24 maxlen: 24
151.245.183.0/24 maxlen: 24
151.246.48.0/21 maxlen: 24
151.246.56.0/21 maxlen: 24
151.246.80.0/21 maxlen: 24
151.246.88.0/21 maxlen: 24
151.246.96.0/21 maxlen: 24
151.246.112.0/21 maxlen: 24
151.247.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d2:d8:0e:6b:26:8b:60:e7:7c:d2:8d:6d:dc:56:4b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 11 10:36:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=293ee4b594c7314a2707a634583723223d88a34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:04:1d:a3:72:6e:10:41:46:df:3b:6d:92:b0:
8c:8c:3b:3a:3e:0d:31:a5:6d:e7:13:dc:8e:dd:37:
00:c8:a0:8d:dd:72:cb:83:45:4a:f2:98:fb:a8:01:
58:f8:ce:8e:28:bc:88:b7:96:14:1c:af:a5:7f:f2:
ef:43:06:d6:99:c0:40:5a:8b:6e:b4:62:14:1e:94:
d1:97:8c:7b:ef:1a:67:c9:c6:16:cb:f9:ec:40:16:
8d:4c:96:cb:bc:f2:3f:4d:89:9b:f0:0c:fa:55:be:
52:45:0c:d7:05:a2:2d:15:fc:49:f3:24:5c:a7:d0:
76:75:0f:00:04:f1:1e:75:a3:b9:9c:3d:e4:28:e6:
72:32:9a:b0:ec:50:90:48:6d:19:2e:0a:66:3a:64:
9f:f9:dc:01:39:64:be:f5:88:5a:7a:2d:ec:ae:10:
66:a2:8e:4b:ae:77:b4:86:0b:ad:83:03:fe:20:c4:
7d:fa:2b:83:86:ae:dd:26:e6:0c:c8:52:88:5f:8e:
cf:3e:67:83:0a:fb:dd:85:b3:31:f2:df:85:0d:b1:
d2:f4:12:c2:4f:83:3e:03:7c:17:db:cb:b7:e3:05:
8b:bf:69:7a:af:75:a8:9b:bb:57:c9:32:b1:e4:60:
af:a6:9a:f3:0e:78:f4:82:66:0a:bb:6c:2f:28:ef:
9a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3E:E4:B5:94:C7:31:4A:27:07:A6:34:58:37:23:22:3D:88:A3:4D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KT7ktZTHMUonB6Y0WDcjIj2Io00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.146.0/24
151.241.153.0/24
151.242.54.0/24
151.243.107.0-151.243.108.255
151.244.16.0/21
151.244.34.0/24
151.244.168.0/23
151.244.216.0-151.244.218.255
151.245.183.0/24
151.246.48.0/20
151.246.80.0-151.246.103.255
151.246.112.0/21
151.247.171.0/24
Signature Algorithm: sha256WithRSAEncryption
10:c2:6a:fd:98:f2:ec:49:65:b8:c8:ae:3b:31:43:5a:91:ad:
1a:24:8a:35:85:61:d6:2e:8d:de:61:77:d6:83:b9:24:f1:95:
48:01:c3:59:01:52:e9:eb:1b:86:67:f0:cc:de:8c:f2:d4:0c:
95:98:67:db:81:01:dd:91:35:b9:c0:8b:59:ef:08:bb:fc:38:
55:bd:19:06:b1:0b:07:b6:56:9c:35:28:7d:f3:3d:de:66:86:
12:6e:63:76:14:4e:9d:ff:a0:a1:12:61:e6:67:49:6b:af:7e:
c9:a0:66:6f:4b:a8:c1:be:dd:7c:bd:e4:a8:ff:97:32:c3:ce:
21:74:77:75:4d:68:e1:a3:5d:cc:c2:1d:03:3b:85:bc:6c:53:
eb:4e:7e:9b:87:54:d8:32:45:b5:5a:7e:f5:ec:91:0d:09:bb:
1a:91:11:33:3e:4c:80:11:5f:23:65:da:48:a7:68:59:3f:29:
49:45:fa:d1:b8:52:26:5b:5a:60:da:1e:fd:19:72:4d:14:25:
40:d8:5e:0e:ab:85:1b:a8:c5:d3:fb:4e:5e:8a:a9:cf:61:01:
82:0e:f6:eb:78:dd:e6:97:0d:e4:5d:bc:8c:00:df:3c:77:17:
36:48:83:b1:65:ab:f5:ea:66:3d:1c:c7:92:8d:4d:f0:d3:7d:
2e:bc:cc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:05:30 2025 by rpki-client