Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/L-oKELpKnCds3QPWOA5oygfGA6s.roa
File: L-oKELpKnCds3QPWOA5oygfGA6s.roa (raw, json)
Hash identifier: cxOOJ+wqfPfjTKG609aqXLXoTw5fzDKuUSHKTgMndLM=
Subject key identifier: 2F:EA:0A:10:BA:4A:9C:27:6C:DD:03:D6:38:0E:68:CA:07:C6:03:AB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198C76FBC6377B6BE83A3CBEBA72B740525
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/L-oKELpKnCds3QPWOA5oygfGA6s.roa
Signing time: Wed 20 Aug 2025 12:24:05 +0000
ROA not before: Wed 20 Aug 2025 12:24:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401163
IP address blocks: 37.202.213.0/24 maxlen: 24
37.202.221.0/24 maxlen: 24
151.240.147.0/24 maxlen: 24
151.240.154.0/24 maxlen: 24
151.241.11.0/24 maxlen: 24
151.241.15.0/24 maxlen: 24
151.241.21.0/24 maxlen: 24
151.241.26.0/24 maxlen: 24
151.241.31.0/24 maxlen: 24
151.241.74.0/24 maxlen: 24
151.242.18.0/24 maxlen: 24
151.242.68.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.244.8.0/24 maxlen: 24
151.244.12.0/24 maxlen: 24
151.244.24.0/24 maxlen: 24
151.244.30.0/24 maxlen: 24
151.244.40.0/24 maxlen: 24
151.244.65.0/24 maxlen: 24
151.244.73.0/24 maxlen: 24
151.244.86.0/24 maxlen: 24
151.244.93.0/24 maxlen: 24
151.244.110.0/24 maxlen: 24
151.244.114.0/24 maxlen: 24
151.245.0.0/24 maxlen: 24
151.245.32.0/24 maxlen: 24
151.245.54.0/24 maxlen: 24
151.245.68.0/24 maxlen: 24
151.245.72.0/24 maxlen: 24
151.245.86.0/24 maxlen: 24
151.245.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 21:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:6f:bc:63:77:b6:be:83:a3:cb:eb:a7:2b:74:05:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 20 12:24:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fea0a10ba4a9c276cdd03d6380e68ca07c603ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0a:1d:16:aa:6e:4e:9e:c4:7f:e0:fb:f4:9c:
bb:33:a3:a2:fe:27:2b:e8:5b:35:c2:ca:3f:c3:59:
1f:45:7e:e1:cc:09:c5:7f:22:8c:67:61:d0:4d:4b:
fc:93:ed:7d:2d:dc:ea:6d:96:ea:32:73:71:03:9a:
27:e2:25:01:82:22:fc:6e:aa:5f:95:07:67:d6:e1:
6e:a6:2b:56:87:9f:7e:1a:b1:cf:67:8e:bc:3a:e2:
6f:28:34:a0:48:f2:eb:96:ed:e1:c8:23:d6:a2:18:
bd:0d:2f:d6:94:83:a4:88:6c:9f:fb:41:e2:50:92:
4c:02:42:b9:f7:8a:ed:bf:2a:c3:5d:f6:4d:52:3e:
47:97:70:6c:85:a6:b9:ce:21:ae:32:7b:43:7a:aa:
6b:60:30:ad:3c:1f:73:f6:02:69:09:92:1e:d8:59:
45:db:85:e5:b9:06:60:81:1e:56:bf:4e:46:81:8b:
97:cf:5e:d4:f5:82:40:ed:87:cd:ce:6f:03:3a:d4:
72:e9:af:1b:1b:00:27:ca:fe:ac:b1:b6:1a:94:71:
ea:97:d5:0c:57:d9:0c:b9:7e:7f:19:b8:42:1e:c4:
d7:5b:56:55:c7:d2:82:93:5a:2c:ad:dd:a2:e6:d5:
12:f6:e6:8f:b4:e7:14:cb:2f:ca:61:03:09:b9:7c:
32:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EA:0A:10:BA:4A:9C:27:6C:DD:03:D6:38:0E:68:CA:07:C6:03:AB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/L-oKELpKnCds3QPWOA5oygfGA6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.213.0/24
37.202.221.0/24
151.240.147.0/24
151.240.154.0/24
151.241.11.0/24
151.241.15.0/24
151.241.21.0/24
151.241.26.0/24
151.241.31.0/24
151.241.74.0/24
151.242.18.0/24
151.242.68.0/24
151.242.70.0/23
151.244.8.0/24
151.244.12.0/24
151.244.24.0/24
151.244.30.0/24
151.244.40.0/24
151.244.65.0/24
151.244.73.0/24
151.244.86.0/24
151.244.93.0/24
151.244.110.0/24
151.244.114.0/24
151.245.0.0/24
151.245.32.0/24
151.245.54.0/24
151.245.68.0/24
151.245.72.0/24
151.245.86.0/24
151.245.92.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:ec:35:fd:46:aa:43:1c:87:0d:90:0c:41:24:57:6d:4b:94:
78:c5:6e:6c:31:89:a2:b7:ee:7d:61:af:0b:b8:03:72:07:cb:
3d:7d:8b:0f:34:bc:ea:36:7d:a0:8c:fc:95:c9:75:c3:fc:38:
e8:08:62:75:35:1d:24:a0:85:ec:2e:58:9d:5f:81:3f:ff:25:
0c:a0:0d:36:6a:7b:12:10:8a:68:91:27:8a:3e:f2:ef:cd:af:
55:44:e1:04:d5:14:12:69:e1:8a:5c:7c:03:a3:d2:5a:eb:91:
3a:c4:58:11:a4:44:2a:56:1e:92:2f:3b:c7:f4:08:df:67:11:
6e:34:ac:49:37:6d:85:24:1b:b9:59:be:3e:6c:a1:b5:0a:63:
fa:9e:c7:0a:97:1d:57:9e:b4:82:e1:e3:6f:78:21:41:8b:5b:
93:81:d2:f0:45:2c:9f:f0:3b:5c:8d:aa:77:56:98:ce:fb:42:
18:cb:46:ac:c5:65:a8:b5:f1:42:6c:59:d0:24:c0:eb:71:e2:
a6:58:e9:dc:d1:0b:c3:6b:63:bf:04:7b:da:68:53:5b:ab:e2:
c7:be:b5:7e:bd:af:16:c5:c9:9a:11:61:81:85:e5:b3:e4:e6:
a9:c9:6e:be:b5:3c:f1:a8:d5:67:9b:e3:5b:34:54:e2:96:30:
39:af:c9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 05:02:23 2025 by rpki-client