Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jpPH0HSSeEH9-tBq0JqZnSiL_5E.roa
File: jpPH0HSSeEH9-tBq0JqZnSiL_5E.roa (raw, json)
Hash identifier: 6bEHTU20KGfxt1dbulBrhyuw0cp6RemlVEZaJVUDWsI=
Subject key identifier: 8E:93:C7:D0:74:92:78:41:FD:FA:D0:6A:D0:9A:99:9D:28:8B:FF:91
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01990E9A50D4183CCDF321AC9178298B54D8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jpPH0HSSeEH9-tBq0JqZnSiL_5E.roa
Signing time: Wed 03 Sep 2025 08:03:38 +0000
ROA not before: Wed 03 Sep 2025 08:03:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401163
IP address blocks: 37.202.213.0/24 maxlen: 24
37.202.221.0/24 maxlen: 24
151.240.147.0/24 maxlen: 24
151.240.154.0/24 maxlen: 24
151.241.11.0/24 maxlen: 24
151.241.15.0/24 maxlen: 24
151.241.21.0/24 maxlen: 24
151.241.26.0/24 maxlen: 24
151.241.31.0/24 maxlen: 24
151.241.74.0/24 maxlen: 24
151.242.18.0/24 maxlen: 24
151.242.68.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.244.8.0/24 maxlen: 24
151.244.12.0/24 maxlen: 24
151.244.24.0/24 maxlen: 24
151.244.30.0/24 maxlen: 24
151.244.40.0/24 maxlen: 24
151.245.50.0/24 maxlen: 24
151.245.54.0/24 maxlen: 24
151.245.68.0/24 maxlen: 24
151.245.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 13:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0e:9a:50:d4:18:3c:cd:f3:21:ac:91:78:29:8b:54:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 3 08:03:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8e93c7d074927841fdfad06ad09a999d288bff91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d1:5c:af:b4:74:0c:c5:b3:5a:93:68:18:14:
f5:c8:f7:75:31:2c:a2:0f:01:b9:b9:1d:83:4a:96:
be:cc:0e:a6:5f:48:a4:17:04:c0:07:28:fc:64:59:
3a:19:1f:a0:9d:d2:84:e9:72:a3:46:b5:73:fc:3e:
07:18:73:ad:8d:ee:43:fe:95:f8:16:4b:25:79:dc:
87:d0:3d:2e:f9:03:2e:cc:5b:b8:49:35:1f:5c:f9:
e3:88:d5:1a:f7:b5:64:8c:72:21:7f:54:9b:62:4f:
2d:be:f4:da:bc:c1:aa:e0:99:f2:c1:21:0b:4b:8d:
1c:66:ca:b5:9c:fa:60:29:5f:9b:70:e7:eb:d5:ce:
1d:bd:53:ba:7f:1a:ae:36:48:9d:21:85:70:cd:35:
5b:e7:22:66:36:9e:21:f0:4e:45:79:70:26:9e:de:
37:39:4a:6b:8a:bf:99:a3:9e:e8:a8:b8:e7:a4:1b:
9d:3a:15:88:dc:e4:ab:ac:44:f4:96:48:dd:57:dc:
c4:5f:6c:63:78:da:7a:4a:91:4e:2f:11:e9:49:97:
4f:19:f0:e8:b2:e2:4e:34:f5:7e:5d:1c:65:61:fc:
07:49:87:2e:97:10:65:23:f7:8f:cf:11:fc:5a:25:
b6:22:05:81:2f:e5:23:3e:c1:c5:f2:7e:3f:60:ac:
fd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:93:C7:D0:74:92:78:41:FD:FA:D0:6A:D0:9A:99:9D:28:8B:FF:91
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jpPH0HSSeEH9-tBq0JqZnSiL_5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.213.0/24
37.202.221.0/24
151.240.147.0/24
151.240.154.0/24
151.241.11.0/24
151.241.15.0/24
151.241.21.0/24
151.241.26.0/24
151.241.31.0/24
151.241.74.0/24
151.242.18.0/24
151.242.68.0/24
151.242.70.0/23
151.244.8.0/24
151.244.12.0/24
151.244.24.0/24
151.244.30.0/24
151.244.40.0/24
151.245.50.0/24
151.245.54.0/24
151.245.68.0/24
151.245.86.0/24
Signature Algorithm: sha256WithRSAEncryption
27:77:31:3e:85:2e:18:27:7a:62:91:3a:97:aa:0f:ec:01:61:
1c:6e:b1:51:10:7f:6a:3f:2c:84:f6:14:00:c7:42:44:1e:93:
16:ab:8f:77:44:09:4b:b6:7c:0f:bf:d8:20:60:9d:9f:be:3d:
b4:fc:27:9f:a2:85:0b:6a:1a:b9:97:04:bc:e0:e0:b3:67:28:
b5:2f:c1:53:6a:1a:4f:eb:66:98:5b:45:b3:7c:4a:f0:76:f2:
53:27:e3:f8:cb:2e:db:98:a0:dc:29:74:d0:ef:ad:51:df:b4:
24:30:ba:5b:c5:6d:dc:5b:d6:f6:07:da:14:91:65:70:58:06:
1c:8a:f9:ca:eb:8e:6e:3f:e5:6e:0b:d6:8c:fd:35:2b:97:c9:
0a:21:8e:42:96:e3:42:f6:5c:95:7f:0c:38:ba:b1:3f:ca:a1:
18:c0:e3:d1:37:7b:7d:b4:b2:ff:35:46:bc:98:68:c9:75:a5:
5f:f5:db:30:de:d8:6d:50:5d:33:95:75:dc:06:af:0d:7f:14:
67:6f:73:16:7b:50:6d:91:52:51:31:68:7b:d5:0b:f9:a5:b3:
e2:35:0a:44:f0:98:b1:d2:43:62:8a:19:4d:bd:d6:56:df:1f:
cc:96:7f:54:25:f4:3c:2e:8d:43:5f:a1:ca:cd:67:46:32:d9:
59:ee:ae:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:36:52 2025 by rpki-client