Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SmrW0w358c4hWbinm8SboifW3OM.roa
File: SmrW0w358c4hWbinm8SboifW3OM.roa (raw, json)
Hash identifier: 0JZo8lHVZ4GD8CegPLtxSGFWwz0JIAgK7PWCw8g0lxg=
Subject key identifier: 4A:6A:D6:D3:0D:F9:F1:CE:21:59:B8:A7:9B:C4:9B:A2:27:D6:DC:E3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198E4EB591F721434E448DC76B7252BDC4B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SmrW0w358c4hWbinm8SboifW3OM.roa
Signing time: Tue 26 Aug 2025 05:48:05 +0000
ROA not before: Tue 26 Aug 2025 05:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49608
IP address blocks: 151.240.145.0/24 maxlen: 24
151.240.153.0/24 maxlen: 24
151.241.22.0/24 maxlen: 24
151.245.1.0/24 maxlen: 24
151.245.16.0/24 maxlen: 24
151.245.20.0/24 maxlen: 24
151.245.25.0/24 maxlen: 24
151.245.30.0/24 maxlen: 24
151.245.40.0/24 maxlen: 24
151.245.46.0/24 maxlen: 24
151.245.52.0/24 maxlen: 24
151.247.128.0/24 maxlen: 24
151.247.136.0/24 maxlen: 24
151.247.144.0/24 maxlen: 24
151.247.152.0/24 maxlen: 24
151.247.193.0/24 maxlen: 24
151.247.206.0/24 maxlen: 24
151.247.214.0/24 maxlen: 24
151.247.222.0/24 maxlen: 24
151.247.240.0/24 maxlen: 24
151.247.247.0/24 maxlen: 24
151.247.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Aug 2025 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e4:eb:59:1f:72:14:34:e4:48:dc:76:b7:25:2b:dc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 26 05:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a6ad6d30df9f1ce2159b8a79bc49ba227d6dce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0e:a5:5d:bc:5f:f3:12:4f:a2:39:9f:1b:50:
a4:90:87:a9:56:88:d2:1d:02:12:b9:c5:42:81:87:
f8:01:51:a0:59:aa:6d:35:0d:bd:32:0b:97:4e:b0:
dc:7e:d7:96:5a:ab:15:ad:8b:db:46:ff:53:30:f8:
e8:13:3d:28:d5:4d:af:3c:bb:16:f6:34:62:e9:2b:
cb:9c:6f:9a:1c:bf:a4:fd:5d:d8:6f:a5:1b:32:4c:
5f:98:b3:9d:4f:a8:12:cf:dd:ff:70:f2:6c:4e:3b:
05:2b:52:52:6a:70:75:0d:9e:5a:30:87:14:68:fa:
d9:c9:21:d8:ba:9c:70:8f:c9:7c:68:4a:70:cf:de:
fb:4b:8a:58:2f:16:25:5a:49:e4:12:e9:17:31:6d:
43:07:ff:b8:d6:69:eb:b2:15:24:1b:45:6f:9e:7d:
b0:9d:41:e6:35:5c:d2:15:4b:6a:d7:bd:85:da:44:
54:29:8e:ed:9a:b9:e7:c9:a0:19:b3:b8:37:b5:ae:
1d:2e:4e:e7:d9:13:69:68:c5:c0:c2:f3:f0:bb:56:
66:0f:38:12:3e:d9:b6:5c:7b:37:bc:df:da:32:37:
dc:45:98:b3:13:07:1c:1e:8d:e3:0f:af:34:2c:cd:
4a:0b:b1:a8:a2:a0:c7:f1:ed:7e:6c:fa:4c:86:bf:
e8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6A:D6:D3:0D:F9:F1:CE:21:59:B8:A7:9B:C4:9B:A2:27:D6:DC:E3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SmrW0w358c4hWbinm8SboifW3OM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.145.0/24
151.240.153.0/24
151.241.22.0/24
151.245.1.0/24
151.245.16.0/24
151.245.20.0/24
151.245.25.0/24
151.245.30.0/24
151.245.40.0/24
151.245.46.0/24
151.245.52.0/24
151.247.128.0/24
151.247.136.0/24
151.247.144.0/24
151.247.152.0/24
151.247.193.0/24
151.247.206.0/24
151.247.214.0/24
151.247.222.0/24
151.247.240.0/24
151.247.247.0/24
151.247.255.0/24
Signature Algorithm: sha256WithRSAEncryption
79:27:89:d5:19:d8:b0:74:60:97:9e:5e:cf:81:41:d2:ef:46:
de:23:dd:9c:97:e2:6f:83:06:df:9b:f6:a0:df:dc:68:57:3d:
85:b5:12:a4:d9:f4:e9:83:85:26:09:8c:02:c7:13:a9:55:e1:
01:fa:5f:83:14:09:89:c5:52:5a:77:81:bf:9c:cf:8a:d7:9d:
73:d1:a1:7d:40:30:1d:6a:1f:28:6b:cf:b2:d1:c8:e0:5b:f8:
af:23:4c:6e:c7:8b:72:67:db:17:b5:d3:4d:77:44:c3:d4:21:
b1:61:e9:13:da:62:29:02:45:3b:4a:01:39:c4:a9:e7:f6:c0:
5a:f4:95:52:e7:a2:ff:8d:1a:ea:22:c6:20:96:23:0e:a0:75:
45:cd:cc:84:5c:de:44:a5:88:8a:c6:84:4f:05:25:6d:6b:c6:
d9:a5:cb:98:2d:54:a0:6c:76:4b:88:ba:1a:9d:0b:9f:23:5b:
83:b8:cb:7b:6b:01:c0:1a:03:08:b9:27:67:36:c5:c0:ea:49:
94:bc:68:ed:4f:fb:7e:10:a4:1d:cd:d5:26:bf:53:2f:f6:44:
2c:97:d2:d7:44:81:15:53:23:43:2a:00:da:8a:74:d3:f2:be:
a7:6e:bc:51:16:0b:28:46:4f:ea:e5:72:bc:90:15:25:e5:ba:
73:33:38:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 23:56:52 2025 by rpki-client