Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/P4sSCb4YfPy6Fxe_QxQfbJmZqdc.roa
File: P4sSCb4YfPy6Fxe_QxQfbJmZqdc.roa (raw, json)
Hash identifier: /G3amiYXsP0NDVvTGm+YtLiaElkYYoLbyR2pfSyNKTQ=
Subject key identifier: 3F:8B:12:09:BE:18:7C:FC:BA:17:17:BF:43:14:1F:6C:99:99:A9:D7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198A38D357706BDC540CF00607B572173C5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/P4sSCb4YfPy6Fxe_QxQfbJmZqdc.roa
Signing time: Wed 13 Aug 2025 13:09:57 +0000
ROA not before: Wed 13 Aug 2025 13:09:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 151.240.205.0/24 maxlen: 24
151.241.119.0/24 maxlen: 24
151.241.122.0/24 maxlen: 24
151.241.123.0/24 maxlen: 24
151.241.125.0/24 maxlen: 24
151.243.176.0/21 maxlen: 24
151.243.192.0/21 maxlen: 24
151.243.225.0/24 maxlen: 24
151.243.227.0/24 maxlen: 24
151.243.235.0/24 maxlen: 24
151.243.241.0/24 maxlen: 24
151.247.223.0/24 maxlen: 24
151.247.225.0/24 maxlen: 24
151.247.229.0/24 maxlen: 24
151.247.231.0/24 maxlen: 24
151.247.234.0/24 maxlen: 24
151.247.236.0/24 maxlen: 24
151.247.238.0/24 maxlen: 24
151.247.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 20 Aug 2025 23:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a3:8d:35:77:06:bd:c5:40:cf:00:60:7b:57:21:73:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 13 13:09:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f8b1209be187cfcba1717bf43141f6c9999a9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:83:95:44:87:87:e2:02:ef:31:b3:ff:02:
e0:b9:dc:8f:36:de:8e:fd:f3:61:7a:57:25:a7:ba:
26:2b:d9:bc:6d:75:6b:66:39:b0:df:8c:69:a0:0a:
6f:1f:5c:3a:44:86:1e:ec:ca:11:7f:e0:c5:0e:ae:
7d:23:79:49:9c:87:6c:65:1f:ca:27:d5:ed:1a:14:
c2:ad:79:83:93:da:dd:69:f5:f8:c3:3c:ab:6d:20:
5e:30:60:65:c9:2e:46:c5:48:d6:7f:ed:09:1c:0b:
1d:8d:bd:87:c8:b1:31:90:2a:1b:9d:7c:5d:5d:3f:
10:11:7f:84:ac:49:1f:ac:46:12:3f:93:11:6a:9b:
c2:cb:13:01:18:d5:ce:1f:36:e3:85:37:46:35:ad:
9f:5c:2a:73:c7:70:db:55:d9:93:41:69:2d:a0:b4:
1b:bc:6e:00:1a:3a:27:26:be:07:47:3e:55:5f:29:
36:16:90:41:f1:94:c8:2c:9f:e8:ba:d4:dd:52:59:
02:c9:62:c3:c1:e4:cf:ae:37:97:8f:19:97:4f:62:
b4:28:e4:d0:df:06:b9:5c:9c:13:13:f8:1e:05:39:
71:98:29:3c:54:0a:be:b6:8f:d3:4f:99:de:22:e4:
44:ec:06:d6:69:bc:cd:b7:2d:67:9b:fe:b1:66:cb:
40:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8B:12:09:BE:18:7C:FC:BA:17:17:BF:43:14:1F:6C:99:99:A9:D7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/P4sSCb4YfPy6Fxe_QxQfbJmZqdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.205.0/24
151.241.119.0/24
151.241.122.0/23
151.241.125.0/24
151.243.176.0/21
151.243.192.0/21
151.243.225.0/24
151.243.227.0/24
151.243.235.0/24
151.243.241.0/24
151.247.223.0/24
151.247.225.0/24
151.247.229.0/24
151.247.231.0/24
151.247.234.0/24
151.247.236.0/24
151.247.238.0/24
151.247.240.0/24
Signature Algorithm: sha256WithRSAEncryption
41:44:4b:9f:cc:df:ed:82:fc:64:02:15:03:a0:c3:b4:83:38:
37:e4:b9:49:28:7b:89:fe:dc:bc:d4:2d:65:ba:4e:79:c3:0a:
34:d4:96:00:2a:aa:22:c3:e9:88:39:6f:0b:53:2f:e3:fa:e5:
0d:5b:73:31:70:c8:8c:4c:1c:0c:a0:b2:6b:8c:72:ef:ee:14:
35:5f:8a:3f:d8:9c:40:d4:19:95:5d:2a:e8:fc:c0:e6:b3:fa:
c7:c6:54:64:8c:de:e7:9b:0e:d8:16:cb:ec:13:52:9c:87:28:
95:42:da:5b:b6:bf:61:c4:2c:e8:23:fa:5a:c4:c6:92:31:29:
c3:aa:ba:01:60:0e:b2:3c:34:e8:32:0c:d8:67:ea:c6:18:7c:
cd:5b:91:0f:a8:e0:5c:50:a2:79:87:93:5a:fe:9a:65:56:c0:
73:e3:a6:34:37:9a:3e:88:dd:e2:1a:3f:d3:60:a8:a8:f8:28:
f0:b3:85:a9:f7:53:cc:bf:9f:7b:09:1a:13:68:75:5b:b5:06:
5b:9b:df:46:3f:cb:d4:ff:ff:17:cc:dd:2d:3a:72:3b:aa:7e:
aa:bb:40:49:bd:64:e1:72:18:e1:8e:23:be:4c:8e:83:58:99:
45:71:5a:96:4e:ea:19:4f:07:b0:c2:1c:bd:d8:ee:a0:01:b2:
3f:a0:33:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 08:38:56 2025 by rpki-client