Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/i6rjq652l-6-phmDncPSk4mnCjc.roa
File: i6rjq652l-6-phmDncPSk4mnCjc.roa (raw, json)
Hash identifier: +Ub9e1HXiPR64vXUJgXdCs45IV8Hcu4Y3mGseU5X/0g=
Subject key identifier: 8B:AA:E3:AB:AE:76:97:EE:BE:A6:19:83:9D:C3:D2:93:89:A7:0A:37
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198BBC28A398D585E2910B95F4878D53530
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/i6rjq652l-6-phmDncPSk4mnCjc.roa
Signing time: Mon 18 Aug 2025 05:59:05 +0000
ROA not before: Mon 18 Aug 2025 05:59:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 37.202.203.0/24 maxlen: 24
37.202.222.0/24 maxlen: 24
151.240.79.0/24 maxlen: 24
151.240.177.0/24 maxlen: 24
151.240.255.0/24 maxlen: 24
151.241.8.0/24 maxlen: 24
151.242.87.0/24 maxlen: 24
151.242.148.0/24 maxlen: 24
151.242.174.0/23 maxlen: 23
151.242.192.0/23 maxlen: 23
151.242.205.0/24 maxlen: 24
151.243.3.0/24 maxlen: 24
151.243.101.0/24 maxlen: 24
151.243.253.0/24 maxlen: 24
151.244.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 21:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bb:c2:8a:39:8d:58:5e:29:10:b9:5f:48:78:d5:35:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 18 05:59:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8baae3abae7697eebea619839dc3d29389a70a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6a:57:18:9d:69:76:63:bb:07:3f:0f:db:17:
e7:4a:b2:7a:13:f4:77:34:c8:09:1e:09:59:ab:8e:
51:1c:86:71:14:43:b5:45:82:51:24:f5:2c:b6:04:
3d:d6:c3:91:1e:4c:d7:68:fb:03:06:ce:5d:88:e4:
04:59:6e:4a:f7:30:62:9f:89:8e:4d:33:ee:3d:3a:
cb:da:dc:58:35:0c:1c:11:8e:6e:51:04:40:76:9d:
09:ee:a8:dd:4c:7d:8d:15:de:b0:59:e0:95:49:5e:
d8:f6:06:0c:cf:6b:09:f1:ae:bf:0d:ed:67:33:3a:
21:83:35:e2:08:6d:99:31:4e:9f:84:b5:22:8c:fa:
31:96:16:22:c6:8e:4d:f1:74:e6:a3:dd:47:26:69:
4f:0c:25:d9:c0:21:23:6b:97:fa:6d:81:94:a1:15:
a0:ab:e3:6e:f9:84:57:65:73:73:b9:38:f1:2b:f4:
9f:22:60:d0:3f:e6:e7:e6:61:cf:aa:69:4c:e0:8e:
ce:3e:fd:ab:79:e4:84:37:72:c3:a7:c9:b7:c5:3d:
7f:9d:3a:63:98:f9:2f:3f:19:a4:e0:b4:8e:6c:fa:
f2:bd:c3:ee:b3:cc:a5:ac:a3:cc:f8:e1:50:cb:a8:
a0:0b:74:a9:13:71:c6:03:7f:2f:fd:21:de:24:6f:
47:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AA:E3:AB:AE:76:97:EE:BE:A6:19:83:9D:C3:D2:93:89:A7:0A:37
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/i6rjq652l-6-phmDncPSk4mnCjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.203.0/24
37.202.222.0/24
151.240.79.0/24
151.240.177.0/24
151.240.255.0/24
151.241.8.0/24
151.242.87.0/24
151.242.148.0/24
151.242.174.0/23
151.242.192.0/23
151.242.205.0/24
151.243.3.0/24
151.243.101.0/24
151.243.253.0/24
151.244.188.0/24
Signature Algorithm: sha256WithRSAEncryption
31:68:d0:91:70:87:a6:4d:d3:ea:49:df:e6:e7:98:0d:ad:ad:
5f:ad:b5:22:0d:62:d5:35:ba:51:1e:64:49:1d:bc:1a:41:60:
dd:99:bd:f6:66:47:d8:f4:e8:e5:72:1a:15:24:0b:0b:d8:38:
64:98:19:59:ba:12:fc:b7:e5:85:ae:47:be:6e:24:41:1f:25:
2d:3e:af:48:b4:c3:25:c8:79:d8:3b:9d:cf:9f:d9:ff:1c:66:
8c:61:98:19:5e:b2:c6:a9:be:b9:0e:a7:ea:31:bb:40:7d:78:
e5:1b:d5:5d:f1:d7:d9:63:39:6e:b6:ba:3e:80:f9:fd:cf:2f:
cd:02:b6:c4:af:62:81:a3:5b:10:f6:59:83:e6:b1:2c:da:02:
5c:6f:6f:48:b9:17:05:d9:80:1f:10:d9:2a:cd:9e:ba:b0:09:
e6:da:81:ee:6e:c2:ca:aa:b3:0a:d8:1d:b7:35:f9:32:dd:e3:
65:04:ac:d5:79:a0:eb:6f:a0:54:af:d9:6a:fb:f0:7a:c1:26:
98:5b:e3:c2:28:19:b5:16:18:76:dc:c4:08:4d:2a:39:6a:4d:
20:fa:5c:01:68:b7:e7:65:d0:93:83:3f:bc:ca:d5:f3:53:19:
9f:d4:19:7f:68:ec:63:d3:26:99:86:77:5f:12:f7:e7:76:87:
de:c0:32:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:01:14 2025 by rpki-client