Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jJsSZt6Xn1ogtttRRWmHzIvPBks.roa
File: jJsSZt6Xn1ogtttRRWmHzIvPBks.roa (raw, json)
Hash identifier: YHNd3pSLFM9qxZHAcO+tiwk0RdRrr0ELbSlgFmJ/kno=
Subject key identifier: 8C:9B:12:66:DE:97:9F:5A:20:B6:DB:51:45:69:87:CC:8B:CF:06:4B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199397CFD43C6CCAB99F9679848EA18A224
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jJsSZt6Xn1ogtttRRWmHzIvPBks.roa
Signing time: Thu 11 Sep 2025 15:55:16 +0000
ROA not before: Thu 11 Sep 2025 15:55:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 151.243.162.0/24 maxlen: 24
151.243.168.0/24 maxlen: 24
151.243.254.0/24 maxlen: 24
151.244.34.0/24 maxlen: 24
151.245.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:7c:fd:43:c6:cc:ab:99:f9:67:98:48:ea:18:a2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 11 15:55:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c9b1266de979f5a20b6db51456987cc8bcf064b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3e:fa:19:81:f6:ff:bd:70:d3:3a:e1:3e:f8:
3d:09:d3:57:e9:7e:d6:e2:0e:df:ed:9f:73:d1:fa:
1c:30:67:f7:f6:7f:c1:27:36:4c:af:47:20:93:b6:
e0:fc:72:4f:7c:63:cf:81:b0:72:04:d5:e1:ba:b5:
3a:5c:a4:13:0a:19:a2:7e:75:58:ca:fe:5a:8b:8e:
7b:5a:09:ce:3e:ef:e3:1b:7c:80:4e:16:a8:e6:02:
12:b8:15:93:53:53:f0:9e:e7:32:45:3b:47:e0:34:
09:e8:f9:7a:ab:86:60:56:5e:e5:5b:4a:ed:37:d8:
c5:0d:a0:c7:e6:b2:6a:a1:f6:38:ae:74:eb:d5:ec:
29:d5:98:72:8e:67:8b:85:89:28:1e:be:2a:88:10:
2e:6b:81:95:6b:75:2b:e5:5b:25:11:94:41:95:a6:
4e:23:52:2f:1b:8f:4b:7c:52:84:d5:ab:be:42:67:
5d:f9:be:fc:b9:52:93:c7:2f:3e:85:f3:f2:78:44:
e4:4c:20:c8:30:61:fa:f3:78:6c:03:3b:da:22:b9:
7c:f7:bd:71:88:ec:0d:80:07:17:57:68:9f:1e:9e:
1e:89:b4:04:f4:0f:6f:24:56:ba:d6:03:19:61:b4:
c3:0c:55:11:30:ab:20:e9:1d:2b:f0:c2:89:da:88:
2d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9B:12:66:DE:97:9F:5A:20:B6:DB:51:45:69:87:CC:8B:CF:06:4B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jJsSZt6Xn1ogtttRRWmHzIvPBks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.162.0/24
151.243.168.0/24
151.243.254.0/24
151.244.34.0/24
151.245.32.0/24
Signature Algorithm: sha256WithRSAEncryption
87:83:0e:4e:a2:e2:f9:cf:85:0a:0b:71:a4:1c:5a:2f:dc:30:
ff:2d:b8:bf:76:f4:4c:b0:e8:4e:91:c6:a8:ee:ff:40:9d:9e:
12:31:a3:3b:23:cb:86:60:54:9d:09:31:32:98:e4:b3:31:8a:
78:8f:e0:2e:b6:7f:62:2d:b3:a6:e6:d1:aa:6e:67:4c:e1:fe:
dc:fb:9d:c1:81:b5:a6:d5:2d:21:0d:9e:f3:c3:33:45:21:c1:
14:ea:08:3c:52:98:f6:41:52:35:35:23:a2:15:6d:ad:51:64:
65:0e:3f:ec:77:6b:54:af:6a:db:a5:4c:7d:b1:48:21:09:20:
8e:e9:36:66:8a:19:62:bb:81:ff:5d:f2:ca:3e:d1:2a:2d:1c:
c8:7e:03:65:fb:6f:32:62:a3:06:48:b8:f8:77:88:22:1f:57:
ce:64:a7:dd:ed:88:e9:3c:21:73:96:9f:8a:db:37:40:a8:66:
1c:24:09:e4:08:01:dd:b7:c0:00:75:56:44:47:d6:04:0b:8e:
3a:ca:16:ec:a7:5d:76:7e:02:3b:19:6d:9e:b5:23:39:76:e8:
ba:fb:f2:42:d7:d1:fc:b3:48:1a:c9:71:ce:27:66:46:91:5d:
e0:f7:f6:4c:d8:1e:3f:27:36:fc:bd:e2:00:13:89:62:59:66:
54:42:87:42
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZk5fP1DxsyrmflnmEjqGKIkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwOTExMTU1NTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzliMTI2NmRlOTc5ZjVhMjBiNmRiNTE0NTY5ODdjYzhiY2YwNjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT76GYH2/71w0zrhPvg9CdNX6X7W
4g7f7Z9z0focMGf39n/BJzZMr0cgk7bg/HJPfGPPgbByBNXhurU6XKQTChmifnVY
yv5ai457WgnOPu/jG3yAThao5gISuBWTU1PwnucyRTtH4DQJ6Pl6q4ZgVl7lW0rt
N9jFDaDH5rJqofY4rnTr1ewp1ZhyjmeLhYkoHr4qiBAua4GVa3Ur5VslEZRBlaZO
I1IvG49LfFKE1au+Qmdd+b78uVKTxy8+hfPyeETkTCDIMGH683hsAzvaIrl8971x
iOwNgAcXV2ifHp4eibQE9A9vJFa61gMZYbTDDFURMKsg6R0r8MKJ2ogtewIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFIybEmbel59aILbbUUVph8yLzwZLMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvakpzU1p0NlhuMW9ndHR0UlJXbUh6SXZQQmtzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAl/OiAwQA
l/OoAwQAl/P+AwQAl/QiAwQAl/UgMA0GCSqGSIb3DQEBCwUAA4IBAQCHgw5OouL5
z4UKC3GkHFov3DD/Lbi/dvRMsOhOkcao7v9AnZ4SMaM7I8uGYFSdCTEymOSzMYp4
j+Autn9iLbOm5tGqbmdM4f7c+53BgbWm1S0hDZ7zwzNFIcEU6gg8Upj2QVI1NSOi
FW2tUWRlDj/sd2tUr2rbpUx9sUghCSCO6TZmihliu4H/XfLKPtEqLRzIfgNl+28y
YqMGSLj4d4giH1fOZKfd7YjpPCFzlp+K2zdAqGYcJAnkCAHdt8AAdVZER9YEC446
yhbsp112fgI7GW2etSM5dui6+/JC19H8s0gayXHOJ2ZGkV3g9/ZM2B4/Jzb8veIA
E4liWWZUQodC
-----END CERTIFICATE-----
Generated at Wed Oct 8 22:54:04 2025 by rpki-client