Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rqhGhhaFRtvp_4LyHGvEGzXCKLk.roa
File: rqhGhhaFRtvp_4LyHGvEGzXCKLk.roa (raw, json)
Hash identifier: KK1IrtnMuNtpVC3zSA2LBMUDwsZf+rbCC/pY61TFz0c=
Subject key identifier: AE:A8:46:86:16:85:46:DB:E9:FF:82:F2:1C:6B:C4:1B:35:C2:28:B9
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019905E7BE8DA61D0E6586912BF6895C98D8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rqhGhhaFRtvp_4LyHGvEGzXCKLk.roa
Signing time: Mon 01 Sep 2025 15:31:37 +0000
ROA not before: Mon 01 Sep 2025 15:31:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 37.202.220.0/24 maxlen: 24
151.240.8.0/24 maxlen: 24
151.240.28.0/24 maxlen: 24
151.240.60.0/23 maxlen: 24
151.240.72.0/24 maxlen: 24
151.240.74.0/24 maxlen: 24
151.240.80.0/23 maxlen: 24
151.240.110.0/24 maxlen: 24
151.240.118.0/23 maxlen: 24
151.240.148.0/23 maxlen: 24
151.240.226.0/23 maxlen: 24
151.240.243.0/24 maxlen: 24
151.240.244.0/24 maxlen: 24
151.240.245.0/24 maxlen: 24
151.240.246.0/24 maxlen: 24
151.240.247.0/24 maxlen: 24
151.240.249.0/24 maxlen: 24
151.240.250.0/24 maxlen: 24
151.240.251.0/24 maxlen: 24
151.240.252.0/24 maxlen: 24
151.240.253.0/24 maxlen: 24
151.241.78.0/24 maxlen: 24
151.241.79.0/24 maxlen: 24
151.241.89.0/24 maxlen: 24
151.241.90.0/24 maxlen: 24
151.241.127.0/24 maxlen: 24
151.242.76.0/23 maxlen: 24
151.242.134.0/24 maxlen: 24
151.242.135.0/24 maxlen: 24
151.242.156.0/23 maxlen: 24
151.242.202.0/23 maxlen: 24
151.242.236.0/22 maxlen: 24
151.243.148.0/23 maxlen: 24
151.243.170.0/24 maxlen: 24
151.243.172.0/24 maxlen: 24
151.244.48.0/24 maxlen: 24
151.244.66.0/23 maxlen: 24
151.244.102.0/24 maxlen: 24
151.244.226.0/23 maxlen: 24
151.245.64.0/22 maxlen: 24
151.246.160.0/23 maxlen: 24
151.246.252.0/23 maxlen: 24
151.247.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 13:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:05:e7:be:8d:a6:1d:0e:65:86:91:2b:f6:89:5c:98:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 1 15:31:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aea84686168546dbe9ff82f21c6bc41b35c228b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:57:26:a2:35:f0:88:31:af:6e:30:67:67:90:
3a:ba:9b:11:b8:e5:24:a2:00:5b:00:6f:9e:cd:a0:
98:2c:fe:2d:9b:d8:a4:07:d4:93:e5:5d:05:af:65:
28:b0:c5:6e:a4:c9:de:53:12:f3:23:aa:06:d5:95:
00:80:42:7c:ec:58:94:e6:26:03:6f:5c:bd:f1:e8:
91:e3:2e:e2:63:21:e1:00:77:dc:b0:8e:45:1c:41:
ea:68:03:fa:a4:b8:8b:88:0f:d7:e5:49:2f:cf:7d:
95:46:73:17:0c:a0:b2:90:d4:29:e7:3e:e2:11:44:
e0:33:37:de:2f:2f:09:d2:13:a5:6c:02:9e:91:90:
f5:c9:79:19:cb:57:59:c8:47:73:c0:b7:b3:56:a1:
42:70:3d:e1:37:2e:4a:ac:47:eb:8d:95:94:09:7b:
5c:2a:63:16:79:c8:0c:71:a2:5c:12:7c:e4:0c:b6:
b8:00:3c:5f:53:2c:b8:15:88:73:09:a1:e7:c9:db:
da:a6:82:23:55:8f:1a:47:e8:ef:c8:f6:c6:ac:e2:
f8:2c:52:7a:53:54:0f:4b:92:43:e2:64:b0:de:12:
89:62:ff:5f:69:e9:26:63:00:92:f2:79:e6:8d:76:
28:8f:72:4c:0d:f3:75:7b:ee:d6:38:39:2f:ff:67:
51:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A8:46:86:16:85:46:DB:E9:FF:82:F2:1C:6B:C4:1B:35:C2:28:B9
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rqhGhhaFRtvp_4LyHGvEGzXCKLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.220.0/24
151.240.8.0/24
151.240.28.0/24
151.240.60.0/23
151.240.72.0/24
151.240.74.0/24
151.240.80.0/23
151.240.110.0/24
151.240.118.0/23
151.240.148.0/23
151.240.226.0/23
151.240.243.0-151.240.247.255
151.240.249.0-151.240.253.255
151.241.78.0/23
151.241.89.0-151.241.90.255
151.241.127.0/24
151.242.76.0/23
151.242.134.0/23
151.242.156.0/23
151.242.202.0/23
151.242.236.0/22
151.243.148.0/23
151.243.170.0/24
151.243.172.0/24
151.244.48.0/24
151.244.66.0/23
151.244.102.0/24
151.244.226.0/23
151.245.64.0/22
151.246.160.0/23
151.246.252.0/23
151.247.130.0/23
Signature Algorithm: sha256WithRSAEncryption
97:88:fa:a0:98:fe:0c:2a:9a:f6:06:df:e7:1a:66:14:5c:c9:
64:18:32:a7:52:d3:64:dd:1b:66:b0:bf:80:c6:f9:67:8f:f1:
af:06:f8:f1:f4:89:6a:99:e7:4b:42:2f:56:1d:c0:e4:6a:28:
d7:5a:bf:a2:59:7a:7a:eb:08:9b:d6:a3:a7:b5:25:88:4d:7c:
8d:44:46:f7:bd:3e:6a:f3:ef:c3:ae:03:cb:a6:47:ed:49:6a:
c2:6a:87:fb:84:fb:32:6e:b8:ee:92:f1:b3:c5:e6:ff:3d:79:
2a:a4:5c:89:42:2b:05:5c:4f:ec:81:0b:4f:9c:ae:a5:82:ed:
65:74:8f:0b:cd:d5:96:35:38:f5:8c:2f:98:8e:fb:00:5b:35:
d9:c9:61:f8:c2:ea:34:21:73:5b:2b:a5:5f:25:9f:c6:0b:69:
f4:cb:0f:95:fe:16:37:b1:a4:7d:41:8a:42:50:0e:c3:16:36:
44:8c:97:92:26:08:46:a6:11:aa:bc:d8:a4:a1:f9:90:c2:22:
c1:e9:8a:ba:40:cd:b6:95:f0:d1:fd:bf:e0:ee:a0:3b:98:08:
fa:e1:35:9d:33:74:e1:6b:79:fc:c4:e8:8e:ea:e8:7c:17:3c:
f7:2c:26:5a:3b:e7:2b:55:38:b8:21:08:2b:85:f8:f5:a6:f1:
f0:97:4f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:37:21 2025 by rpki-client