Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lTcpSsrdsNpdfAlIfULbDQuxsus.roa
File: lTcpSsrdsNpdfAlIfULbDQuxsus.roa (raw, json)
Hash identifier: eOp4UgxXh6G4t6eeJVFlyK9FIaSNiJ9pcs75S1/Wu6M=
Subject key identifier: 95:37:29:4A:CA:DD:B0:DA:5D:7C:09:48:7D:42:DB:0D:0B:B1:B2:EB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199523D5B057856BB8FE1D6AFA2B1677AFB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lTcpSsrdsNpdfAlIfULbDQuxsus.roa
Signing time: Tue 16 Sep 2025 11:16:16 +0000
ROA not before: Tue 16 Sep 2025 11:16:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 151.240.205.0/24 maxlen: 24
151.241.119.0/24 maxlen: 24
151.241.122.0/24 maxlen: 24
151.241.123.0/24 maxlen: 24
151.241.125.0/24 maxlen: 24
151.243.176.0/21 maxlen: 24
151.243.192.0/21 maxlen: 24
151.243.227.0/24 maxlen: 24
151.243.235.0/24 maxlen: 24
151.243.241.0/24 maxlen: 24
151.246.16.0/21 maxlen: 21
151.246.32.0/21 maxlen: 21
151.247.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:3d:5b:05:78:56:bb:8f:e1:d6:af:a2:b1:67:7a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 16 11:16:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9537294acaddb0da5d7c09487d42db0d0bb1b2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e2:75:20:2a:65:96:24:02:f0:fb:78:80:27:
d0:b7:fa:51:b8:61:f1:87:74:02:aa:75:38:3c:70:
15:64:32:18:a2:1d:10:6c:01:12:ad:4e:a1:81:99:
06:f4:ec:cb:09:fb:8f:fc:3b:d1:3c:b6:93:f3:59:
4c:45:59:2e:20:83:e2:39:a5:eb:cf:5f:6c:6f:42:
01:64:b3:10:43:f8:50:55:9a:84:bd:06:7f:af:6a:
16:ce:9f:d9:cb:77:04:63:42:7a:83:6a:b9:b4:34:
bc:4d:5c:06:9d:19:1a:1f:b7:33:37:69:0d:c1:50:
7c:30:ae:e9:cd:09:16:0c:5e:f8:d3:12:1f:58:c9:
58:41:9d:0e:60:c3:b5:8d:a5:b9:90:eb:8a:c5:9b:
4c:3b:36:81:73:e8:94:17:cf:38:a6:f3:bf:b4:57:
f1:f1:16:0f:15:6e:6d:77:57:96:c4:89:cf:d0:b3:
3c:8b:f6:44:51:fb:46:58:f9:64:3b:85:67:98:c1:
e4:d8:7b:a9:65:bb:3a:a7:23:4e:14:5e:71:b0:08:
6d:6a:bf:d3:30:c2:c9:9a:51:94:33:d5:23:f5:c1:
a0:35:7e:f5:94:c1:18:77:6d:27:62:9a:aa:bf:ce:
4f:50:8a:b7:f2:5a:1b:87:b7:30:a3:25:c9:a9:c6:
d4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:37:29:4A:CA:DD:B0:DA:5D:7C:09:48:7D:42:DB:0D:0B:B1:B2:EB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lTcpSsrdsNpdfAlIfULbDQuxsus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.205.0/24
151.241.119.0/24
151.241.122.0/23
151.241.125.0/24
151.243.176.0/21
151.243.192.0/21
151.243.227.0/24
151.243.235.0/24
151.243.241.0/24
151.246.16.0/21
151.246.32.0/21
151.247.238.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:84:2c:54:da:ef:2e:c6:03:e7:c7:ac:c5:e2:07:53:3a:d9:
11:39:0f:76:f1:a7:1e:56:15:95:f5:45:cc:59:39:27:19:3c:
d8:04:d1:6b:34:91:9f:c7:45:64:6b:3f:6d:5d:ed:13:ea:91:
c7:59:6a:e1:8b:b4:32:f2:b3:70:18:b2:f3:fa:4b:3b:9c:1a:
e3:0b:e3:71:9d:d3:98:9d:51:f7:ac:d0:3d:c0:4c:7d:30:4d:
e8:7f:30:26:8b:0d:96:e0:18:a6:d6:ae:b2:23:04:e9:c6:6b:
77:b8:b1:fa:37:da:ff:9e:5a:d9:dc:d9:ea:89:a0:24:94:79:
db:48:e9:53:9d:92:08:89:39:d5:f1:74:53:c8:80:1a:69:2d:
32:6c:ab:bc:fb:ec:36:1c:46:a7:0d:3a:73:d2:4d:8e:14:ae:
bf:48:e0:1f:13:79:b8:60:45:9c:49:c1:db:e2:1c:3e:ff:69:
e4:5a:9f:9c:8e:f6:ba:ac:4d:2c:03:35:9a:6d:8a:a9:2d:75:
1c:07:34:e3:d0:ec:4a:8a:59:25:d8:db:72:66:82:c3:9f:a1:
4f:ba:3b:91:f3:31:9b:0f:80:c5:fb:e4:62:82:3d:0d:86:b8:
7c:01:c9:01:28:79:96:a7:aa:2c:62:20:a1:54:3e:4c:3f:4e:
8f:c7:6c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 08:02:13 2025 by rpki-client