Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ewK7lh54ic3-hkkBmjLvt1s5qW0.roa
File: ewK7lh54ic3-hkkBmjLvt1s5qW0.roa (raw, json)
Hash identifier: vrWJeD3AFpRJ4aEIV55o78kkT2a5OAGEZboRjqLxfXk=
Subject key identifier: 7B:02:BB:96:1E:78:89:CD:FE:86:49:01:9A:32:EF:B7:5B:39:A9:6D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198F96AB89153267C832BCED79EB5333C8D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ewK7lh54ic3-hkkBmjLvt1s5qW0.roa
Signing time: Sat 30 Aug 2025 05:19:37 +0000
ROA not before: Sat 30 Aug 2025 05:19:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214654
IP address blocks: 151.241.12.0/24 maxlen: 24
151.245.85.0/24 maxlen: 24
151.247.195.0/24 maxlen: 24
151.247.196.0/24 maxlen: 24
151.247.197.0/24 maxlen: 24
151.247.198.0/24 maxlen: 24
151.247.199.0/24 maxlen: 24
151.247.200.0/24 maxlen: 24
151.247.218.0/24 maxlen: 24
151.247.219.0/24 maxlen: 24
151.247.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 13:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f9:6a:b8:91:53:26:7c:83:2b:ce:d7:9e:b5:33:3c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 30 05:19:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b02bb961e7889cdfe8649019a32efb75b39a96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:91:92:a5:40:1e:19:f3:48:9a:43:3b:e7:9b:
5d:a5:f4:10:d6:4e:6c:2c:bb:a8:32:f7:0e:d4:22:
fc:c2:1c:80:b9:79:ea:1d:b7:a3:18:01:f2:41:80:
18:84:81:bd:0f:43:aa:ca:78:00:60:f9:fe:69:8d:
a8:70:8e:b0:3f:64:20:29:60:2a:7a:03:5c:18:17:
69:95:fb:5f:99:ec:15:16:78:e0:35:10:27:17:4a:
82:23:92:fa:f1:29:9b:51:29:89:3f:c2:52:40:99:
89:fa:a8:d2:f5:58:f5:d1:27:e5:c1:d3:fa:03:86:
5a:46:73:54:ce:55:6e:b3:1d:9f:3c:82:8d:92:d8:
15:ac:ac:6a:f2:6e:11:95:8a:62:f2:56:07:a3:e9:
ba:6c:db:50:bd:bd:9d:6c:1d:c1:d9:fd:55:9f:56:
64:32:64:7d:78:52:6d:0a:33:17:a6:ae:cb:da:fa:
6a:17:0e:62:09:34:71:56:c0:4c:47:8b:8d:f3:82:
49:c7:ab:87:a0:c8:1c:b1:ea:24:cc:98:a9:de:1d:
b6:32:40:8b:5d:b3:e5:08:ac:74:69:92:a7:b5:d1:
ff:52:21:8c:3e:9a:47:c2:e1:5a:9b:d8:41:35:df:
d4:f6:dc:36:a5:f2:1b:50:f8:90:e2:c6:05:1e:0e:
dc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:02:BB:96:1E:78:89:CD:FE:86:49:01:9A:32:EF:B7:5B:39:A9:6D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ewK7lh54ic3-hkkBmjLvt1s5qW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.12.0/24
151.245.85.0/24
151.247.195.0-151.247.200.255
151.247.218.0-151.247.220.255
Signature Algorithm: sha256WithRSAEncryption
a2:28:62:46:00:4e:03:19:df:e5:e9:41:90:31:c9:fb:71:f3:
ca:55:8a:05:1e:b9:26:7d:40:62:c6:47:c9:ef:bf:89:49:11:
e0:4a:0a:6c:71:4e:39:66:4f:58:01:0f:dc:d7:f7:2b:83:27:
71:5d:9d:c9:5d:0c:c4:63:75:83:45:6c:58:1e:f4:cf:30:37:
56:e8:b0:f0:c0:2e:e0:40:36:1a:d0:16:ae:64:1c:48:93:0e:
24:7f:42:b7:5b:e2:b0:8a:18:54:1f:d0:22:de:6c:46:fb:ae:
ae:ad:63:cb:88:74:70:63:80:d6:ec:0c:db:72:8c:b5:33:1b:
dc:9a:2c:1c:b7:f6:26:4d:27:99:9c:ea:16:26:0b:df:71:34:
7c:66:1a:fb:d3:ba:d0:ca:9c:16:b7:6a:b9:b4:d3:65:10:b1:
8d:71:15:38:3c:a9:19:cc:27:49:d6:0c:63:b3:c7:97:1c:9c:
81:42:95:44:9b:38:94:2f:7b:4f:6c:97:e8:1e:98:16:cb:a4:
ec:77:50:2c:eb:7c:35:b0:94:d7:ef:4c:49:05:51:ec:c1:8c:
91:ff:81:b2:c6:19:36:df:9c:87:ae:b3:98:b4:81:24:85:5c:
6f:b6:98:06:56:b4:35:99:2b:dc:ce:61:b7:c9:9c:e3:54:18:
08:58:60:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:18 2025 by rpki-client