Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fLsNTo2W77NvaA58uGSDO77QfJI.roa
File: fLsNTo2W77NvaA58uGSDO77QfJI.roa (raw, json)
Hash identifier: ZlmjcPsu+NgHrWerrER4ptybAea2Zk82WJHkh69yhr0=
Subject key identifier: 7C:BB:0D:4E:8D:96:EF:B3:6F:68:0E:7C:B8:64:83:3B:BE:D0:7C:92
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197115691D645C613CC98EDABD2E12ACC69
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fLsNTo2W77NvaA58uGSDO77QfJI.roa
Signing time: Tue 27 May 2025 10:42:55 +0000
ROA not before: Tue 27 May 2025 10:42:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 37.202.203.0/24 maxlen: 24
151.240.1.0/24 maxlen: 24
151.240.9.0/24 maxlen: 24
151.240.10.0/24 maxlen: 24
151.240.77.0/24 maxlen: 24
151.241.18.0/24 maxlen: 24
151.242.202.0/23 maxlen: 23
151.243.206.0/23 maxlen: 23
151.243.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:11:56:91:d6:45:c6:13:cc:98:ed:ab:d2:e1:2a:cc:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 27 10:42:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cbb0d4e8d96efb36f680e7cb864833bbed07c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:57:9b:3b:8b:62:a8:40:9a:07:44:2b:7c:
1e:73:8b:72:3d:c5:33:f1:56:ad:78:55:22:88:3d:
61:dd:57:31:94:1d:53:2f:f4:ce:f3:24:1c:d0:2a:
bf:e0:79:c6:0c:2e:7a:fe:13:db:74:a7:ab:05:54:
2e:7c:1b:44:cd:b9:84:23:1f:69:3e:60:71:d9:24:
b4:80:f3:af:2d:31:9d:df:d3:f9:2f:f6:c8:e9:7d:
4d:c7:7b:c2:46:84:68:b1:df:4f:9c:90:be:02:04:
99:04:8c:2b:14:9c:ad:a3:a4:d6:b4:a9:02:98:ea:
5a:fa:dd:bd:dd:b5:5d:dc:ef:0e:c4:af:6b:05:63:
d2:6d:e2:7d:d5:55:6b:b7:63:59:3c:5d:a9:65:e3:
de:3b:80:cc:04:47:69:aa:e1:32:24:c3:7e:d6:ca:
02:39:32:42:b6:e6:54:6b:9f:4e:d4:45:a2:db:aa:
69:2d:28:04:62:9e:df:86:22:3b:60:fe:01:be:35:
7d:b3:c2:28:a0:15:02:01:bb:a4:65:57:1b:16:ea:
33:38:fc:48:4b:51:1a:9a:50:35:fb:29:bf:5e:4f:
c4:b9:f1:a6:9c:be:eb:3a:89:9c:72:f4:c0:b7:ec:
29:23:d1:97:9e:de:48:de:3f:33:01:49:87:ca:7b:
d0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BB:0D:4E:8D:96:EF:B3:6F:68:0E:7C:B8:64:83:3B:BE:D0:7C:92
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fLsNTo2W77NvaA58uGSDO77QfJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.203.0/24
151.240.1.0/24
151.240.9.0-151.240.10.255
151.240.77.0/24
151.241.18.0/24
151.242.202.0/23
151.243.206.0/23
151.243.217.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e5:d9:56:b0:a4:e5:0e:ca:44:77:d6:1a:22:3b:33:73:48:
46:f4:46:64:72:4f:4f:86:16:cd:cb:76:7c:c6:fc:38:b2:3b:
f5:52:08:20:34:c7:e9:76:78:f4:bd:d0:94:e7:ed:62:73:b1:
c6:dc:0a:99:ee:18:86:e4:af:3b:b9:47:71:2b:b9:ef:c9:75:
a0:32:45:c7:84:bf:25:4e:b5:22:46:ac:15:88:81:f7:17:ca:
d2:ee:88:af:ae:03:1d:19:a8:38:15:5d:16:97:14:58:4b:e2:
5e:ba:85:29:e1:09:06:3d:9e:1c:76:cb:0f:a3:f8:51:3b:22:
e0:34:75:9b:45:31:e6:be:b7:15:79:13:73:6d:0d:9a:ab:0a:
e0:4e:59:76:6a:e5:b0:0a:2b:84:e1:ae:07:19:47:a8:37:80:
ec:54:25:fc:5b:99:4b:17:cb:40:ab:55:5a:66:51:85:45:da:
db:90:de:b8:8c:ba:50:f2:ff:49:1e:9f:f9:c7:5f:b4:3a:bd:
df:45:74:f5:4b:cf:32:b6:f3:b0:6c:b3:1d:c7:38:e4:26:d5:
57:58:3f:46:98:bf:fb:f1:00:e7:79:5b:82:b7:f2:2e:c0:a9:
fb:34:03:a8:3f:d0:b9:39:3b:ba:48:f6:36:dd:3b:09:d7:13:
1f:a5:17:93
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZcRVpHWRcYTzJjtq9LhKsxpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNTI3MTA0MjU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2JiMGQ0ZThkOTZlZmIzNmY2ODBlN2NiODY0ODMzYmJlZDA3YzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzFXmzuLYqhAmgdEK3wec4tyPcUz
8VateFUiiD1h3VcxlB1TL/TO8yQc0Cq/4HnGDC56/hPbdKerBVQufBtEzbmEIx9p
PmBx2SS0gPOvLTGd39P5L/bI6X1Nx3vCRoRosd9PnJC+AgSZBIwrFJyto6TWtKkC
mOpa+t293bVd3O8OxK9rBWPSbeJ91VVrt2NZPF2pZePeO4DMBEdpquEyJMN+1soC
OTJCtuZUa59O1EWi26ppLSgEYp7fhiI7YP4BvjV9s8IooBUCAbukZVcbFuozOPxI
S1EamlA1+ym/Xk/EufGmnL7rOomccvTAt+wpI9GXnt5I3j8zAUmHynvQJwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFHy7DU6Nlu+zb2gOfLhkgzu+0HySMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvZkxzTlRvMlc3N052YUE1OHVHU0RPNzdRZkpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAJcrLAwQA
l/ABMAwDBACX8AkDBACX8AoDBACX8E0DBACX8RIDBAGX8soDBAGX884DBACX89kw
DQYJKoZIhvcNAQELBQADggEBAIDl2VawpOUOykR31hoiOzNzSEb0RmRyT0+GFs3L
dnzG/DiyO/VSCCA0x+l2ePS90JTn7WJzscbcCpnuGIbkrzu5R3Erue/JdaAyRceE
vyVOtSJGrBWIgfcXytLuiK+uAx0ZqDgVXRaXFFhL4l66hSnhCQY9nhx2yw+j+FE7
IuA0dZtFMea+txV5E3NtDZqrCuBOWXZq5bAKK4ThrgcZR6g3gOxUJfxbmUsXy0Cr
VVpmUYVF2tuQ3riMulDy/0ken/nHX7Q6vd9FdPVLzzK287Bssx3HOOQm1VdYP0aY
v/vxAOd5W4K38i7Aqfs0A6g/0Lk5O7pI9jbdOwnXEx+lF5M=
-----END CERTIFICATE-----
Generated at Fri Jun 6 17:16:48 2025 by rpki-client