Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fL5CwPmz7gGxkXgsgsZry5QiEaY.roa
File: fL5CwPmz7gGxkXgsgsZry5QiEaY.roa (raw, json)
Hash identifier: V/6OPu0ZdYLJsO4TPwQlSOwNq4fMpnuCkWhy1rtVbVY=
Subject key identifier: 7C:BE:42:C0:F9:B3:EE:01:B1:91:78:2C:82:C6:6B:CB:94:22:11:A6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198F969CE1CF97B6F5946DFA0BCAD87DE97
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fL5CwPmz7gGxkXgsgsZry5QiEaY.roa
Signing time: Sat 30 Aug 2025 05:18:37 +0000
ROA not before: Sat 30 Aug 2025 05:18:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 37.202.203.0/24 maxlen: 24
37.202.222.0/24 maxlen: 24
151.240.177.0/24 maxlen: 24
151.240.255.0/24 maxlen: 24
151.242.87.0/24 maxlen: 24
151.242.148.0/24 maxlen: 24
151.242.174.0/23 maxlen: 23
151.242.192.0/23 maxlen: 23
151.242.205.0/24 maxlen: 24
151.243.3.0/24 maxlen: 24
151.243.101.0/24 maxlen: 24
151.243.253.0/24 maxlen: 24
151.244.188.0/24 maxlen: 24
151.245.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 13:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f9:69:ce:1c:f9:7b:6f:59:46:df:a0:bc:ad:87:de:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 30 05:18:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cbe42c0f9b3ee01b191782c82c66bcb942211a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:04:94:f6:5e:db:fd:b0:f2:2d:1b:ba:c4:a9:
a6:88:f6:1a:7a:9f:20:a2:56:eb:84:d1:d4:58:3a:
8c:e0:fc:f9:ed:5a:02:7a:3e:ed:45:35:74:bf:37:
4b:ef:39:eb:b3:f6:d7:a1:90:69:b9:73:98:a5:1f:
92:94:52:b3:67:8c:8d:9e:84:38:ca:f3:b1:cf:f8:
27:f5:24:49:fe:73:52:6f:27:9e:ac:fe:e7:1d:c5:
b1:8c:98:76:d6:95:f8:06:ff:31:ea:2e:11:3f:8a:
e0:63:0e:2a:53:94:bc:da:61:8e:84:5b:a6:ca:5e:
d8:cc:73:6a:96:a1:e3:62:a3:a8:56:92:32:5f:fa:
da:06:0d:c9:96:e8:eb:74:52:e1:42:83:7b:4e:a8:
78:a6:c2:cd:f6:64:b8:01:da:b3:31:f4:5c:ba:cf:
20:8e:c2:81:c2:6f:86:86:e9:eb:fd:fc:e4:ad:62:
12:cd:b5:42:9c:52:64:5d:56:61:a2:d1:d1:26:85:
70:e7:d0:cf:77:d2:d9:25:2c:57:7c:c5:36:5c:07:
b8:66:96:55:fc:d8:cd:f1:49:22:bd:a9:47:0c:b9:
d8:fb:4c:15:b3:c7:71:d8:e1:6d:41:00:35:25:6e:
db:75:35:36:9b:b3:4e:73:85:b9:38:21:e0:b7:e3:
c8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BE:42:C0:F9:B3:EE:01:B1:91:78:2C:82:C6:6B:CB:94:22:11:A6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fL5CwPmz7gGxkXgsgsZry5QiEaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.203.0/24
37.202.222.0/24
151.240.177.0/24
151.240.255.0/24
151.242.87.0/24
151.242.148.0/24
151.242.174.0/23
151.242.192.0/23
151.242.205.0/24
151.243.3.0/24
151.243.101.0/24
151.243.253.0/24
151.244.188.0/24
151.245.4.0/24
Signature Algorithm: sha256WithRSAEncryption
63:7a:1c:51:eb:40:b1:35:65:fb:4b:8c:d1:95:1c:40:a5:9b:
a2:9e:08:05:e8:53:e5:54:75:c1:76:95:b8:e1:15:50:82:a6:
e1:a1:39:ee:ff:12:c6:3c:17:97:dc:3b:e5:3d:3b:f3:45:07:
80:b3:b1:c1:d2:47:56:65:8e:7b:a4:e7:52:67:f0:f2:f5:10:
1f:00:c8:74:45:ea:ba:27:04:a4:d4:41:2e:e4:23:09:4e:5b:
de:ba:36:46:19:75:be:58:28:c1:6a:95:44:b3:35:86:dc:f2:
70:7d:31:f2:63:3e:3c:f7:a7:c1:dd:2e:a9:68:0e:63:60:f0:
f0:7c:38:5e:3c:71:ba:07:49:f0:ec:10:cd:fa:49:de:bb:a0:
03:25:2b:d4:33:38:b8:97:b5:17:82:f1:a9:b5:e8:bd:20:7c:
c1:e5:ff:0b:72:6d:62:da:8d:90:75:33:6c:84:fd:b1:86:02:
79:b7:42:25:31:38:19:9b:db:97:ac:77:09:d9:30:1b:f8:96:
4e:e1:ff:55:ee:07:5f:fa:0f:50:c8:40:3f:1e:11:18:82:12:
f6:fa:9c:48:82:30:2f:8d:fa:66:78:bf:f0:00:be:a6:ca:d9:
cb:a7:a0:ec:97:f5:b1:3d:49:f7:0f:db:4a:c9:ab:58:55:0d:
e9:c8:4f:3e
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAZj5ac4c+XtvWUbfoLyth96XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwODMwMDUxODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2JlNDJjMGY5YjNlZTAxYjE5MTc4MmM4MmM2NmJjYjk0MjIxMWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQSU9l7b/bDyLRu6xKmmiPYaep8g
olbrhNHUWDqM4Pz57VoCej7tRTV0vzdL7znrs/bXoZBpuXOYpR+SlFKzZ4yNnoQ4
yvOxz/gn9SRJ/nNSbyeerP7nHcWxjJh21pX4Bv8x6i4RP4rgYw4qU5S82mGOhFum
yl7YzHNqlqHjYqOoVpIyX/raBg3JlujrdFLhQoN7Tqh4psLN9mS4AdqzMfRcus8g
jsKBwm+Ghunr/fzkrWISzbVCnFJkXVZhotHRJoVw59DPd9LZJSxXfMU2XAe4ZpZV
/NjN8UkivalHDLnY+0wVs8dx2OFtQQA1JW7bdTU2m7NOc4W5OCHgt+PIfQIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFHy+QsD5s+4BsZF4LILGa8uUIhGmMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvZkw1Q3dQbXo3Z0d4a1hnc2dzWnJ5NVFpRWFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAJcrLAwQA
JcreAwQAl/CxAwQAl/D/AwQAl/JXAwQAl/KUAwQBl/KuAwQBl/LAAwQAl/LNAwQA
l/MDAwQAl/NlAwQAl/P9AwQAl/S8AwQAl/UEMA0GCSqGSIb3DQEBCwUAA4IBAQBj
ehxR60CxNWX7S4zRlRxApZuinggF6FPlVHXBdpW44RVQgqbhoTnu/xLGPBeX3Dvl
PTvzRQeAs7HB0kdWZY57pOdSZ/Dy9RAfAMh0Req6JwSk1EEu5CMJTlveujZGGXW+
WCjBapVEszWG3PJwfTHyYz4896fB3S6paA5jYPDwfDhePHG6B0nw7BDN+kneu6AD
JSvUMzi4l7UXgvGptei9IHzB5f8Lcm1i2o2QdTNshP2xhgJ5t0IlMTgZm9uXrHcJ
2TAb+JZO4f9V7gdf+g9QyEA/HhEYghL2+pxIgjAvjfpmeL/wAL6mytnLp6Dsl/Wx
PUn3D9tKyatYVQ3pyE8+
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:44:21 2025 by rpki-client