Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/suL-Hslff2StKsUe8nKCbI5X7Wo.roa
File: suL-Hslff2StKsUe8nKCbI5X7Wo.roa (raw, json)
Hash identifier: 1GXNx2JBNxMWlcsvI0u4W5rsDixha76vPvKoyyBTX4A=
Subject key identifier: B2:E2:FE:1E:C9:5F:7F:64:AD:2A:C5:1E:F2:72:82:6C:8E:57:ED:6A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198F96AB9E2D2711EB8B4120A8256406B25
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/suL-Hslff2StKsUe8nKCbI5X7Wo.roa
Signing time: Sat 30 Aug 2025 05:19:37 +0000
ROA not before: Sat 30 Aug 2025 05:19:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 151.241.12.0/24 maxlen: 24
151.241.128.0/22 maxlen: 24
151.242.4.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.17.0/24 maxlen: 24
151.242.27.0/24 maxlen: 24
151.242.32.0/24 maxlen: 24
151.242.40.0/24 maxlen: 24
151.242.139.0/24 maxlen: 24
151.243.44.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.244.3.0/24 maxlen: 24
151.244.128.0/24 maxlen: 24
151.244.129.0/24 maxlen: 24
151.244.130.0/24 maxlen: 24
151.245.85.0/24 maxlen: 24
151.245.120.0/21 maxlen: 24
151.247.195.0/24 maxlen: 24
151.247.196.0/24 maxlen: 24
151.247.197.0/24 maxlen: 24
151.247.198.0/24 maxlen: 24
151.247.199.0/24 maxlen: 24
151.247.200.0/24 maxlen: 24
151.247.218.0/24 maxlen: 24
151.247.219.0/24 maxlen: 24
151.247.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 13:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f9:6a:b9:e2:d2:71:1e:b8:b4:12:0a:82:56:40:6b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 30 05:19:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2e2fe1ec95f7f64ad2ac51ef272826c8e57ed6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c7:f0:f2:ce:86:fc:6b:6b:95:23:8a:27:8c:
d1:48:96:ec:a1:37:ac:c3:95:13:88:04:3d:91:bf:
c6:b3:64:27:ec:88:63:1c:ab:c2:06:02:b9:cc:88:
de:5c:37:0c:ee:5b:13:22:f5:b0:de:9e:0c:76:11:
a9:0c:e7:4f:99:47:d5:ae:17:b6:c4:21:48:5c:db:
ac:bc:4d:e9:bd:d6:0d:86:1b:30:69:f7:9f:66:c4:
b8:e8:23:8b:ae:45:68:41:7c:08:87:21:4e:46:82:
37:d8:cc:d7:5d:72:cc:24:6a:9d:ee:73:da:fc:9c:
ee:32:ab:e4:ad:53:8e:3a:6f:15:49:fd:42:02:5c:
5a:6b:e5:3d:ae:ad:ba:9b:9b:e7:b9:1c:be:22:3a:
9f:ae:09:ae:0d:7f:04:4a:97:18:38:da:a3:f4:82:
0b:dd:97:6f:0f:86:77:c3:e1:43:c5:b6:2a:39:d2:
0b:f0:b3:7e:63:af:5a:f2:da:70:c7:e8:cf:1e:17:
46:7c:24:eb:40:bb:3d:f3:a4:79:e8:0e:36:4b:c1:
57:b1:32:82:a9:96:30:fb:7d:2d:a6:2a:73:8d:33:
53:0a:b6:e6:49:18:da:32:7b:89:a3:21:b4:90:4f:
9e:43:c0:68:3e:ff:7b:23:88:c8:58:3f:7a:a6:76:
11:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E2:FE:1E:C9:5F:7F:64:AD:2A:C5:1E:F2:72:82:6C:8E:57:ED:6A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/suL-Hslff2StKsUe8nKCbI5X7Wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.12.0/24
151.241.128.0/22
151.242.4.0/24
151.242.14.0/24
151.242.17.0/24
151.242.27.0/24
151.242.32.0/24
151.242.40.0/24
151.242.139.0/24
151.243.44.0/24
151.243.115.0/24
151.244.3.0/24
151.244.128.0-151.244.130.255
151.245.85.0/24
151.245.120.0/21
151.247.195.0-151.247.200.255
151.247.218.0-151.247.220.255
Signature Algorithm: sha256WithRSAEncryption
59:14:fb:a2:5c:4c:8a:5b:78:a2:46:0c:7e:71:a1:22:9a:0f:
4c:ed:ef:22:9d:6c:70:8c:ea:12:16:70:4e:fd:e0:22:3e:63:
5c:83:17:e3:74:69:85:b1:ab:8e:34:76:92:3b:5a:98:bc:05:
35:f9:db:a0:1e:b3:71:e5:df:04:aa:6b:66:4c:92:b1:87:c5:
97:f6:97:76:4d:e3:2e:bf:78:56:b9:37:0d:fb:0e:55:62:df:
fc:ac:1b:d7:9a:d2:22:9d:af:1f:c5:35:26:af:3b:5e:b1:46:
1d:31:fd:8e:aa:20:a2:83:03:94:05:75:d7:a4:6d:a7:16:ce:
51:56:ab:c3:f2:15:69:a2:a8:2f:8c:33:81:77:fe:b3:39:5b:
3f:11:9a:1a:ea:00:cf:76:a7:b6:f6:50:c9:53:2c:35:1a:83:
88:50:e0:90:85:07:5d:a4:e3:47:b8:1a:71:c8:30:7e:73:c3:
e8:01:b8:8f:43:ea:c2:26:a7:6f:d3:d3:a7:8d:6f:62:b3:d7:
46:43:f7:1e:2e:8b:c5:27:5f:f7:43:ed:be:38:8d:85:07:a9:
53:39:0c:88:5e:61:c5:f6:02:68:32:34:6e:af:e6:b0:84:7f:
b5:90:07:5d:5e:41:60:e6:dc:a5:19:66:0f:30:75:c3:07:73:
48:45:b8:82
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZj5arni0nEeuLQSCoJWQGslMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwODMwMDUxOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmUyZmUxZWM5NWY3ZjY0YWQyYWM1MWVmMjcyODI2YzhlNTdlZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8fw8s6G/GtrlSOKJ4zRSJbsoTes
w5UTiAQ9kb/Gs2Qn7IhjHKvCBgK5zIjeXDcM7lsTIvWw3p4MdhGpDOdPmUfVrhe2
xCFIXNusvE3pvdYNhhswafefZsS46COLrkVoQXwIhyFORoI32MzXXXLMJGqd7nPa
/JzuMqvkrVOOOm8VSf1CAlxaa+U9rq26m5vnuRy+IjqfrgmuDX8ESpcYONqj9IIL
3ZdvD4Z3w+FDxbYqOdIL8LN+Y69a8tpwx+jPHhdGfCTrQLs986R56A42S8FXsTKC
qZYw+30tpipzjTNTCrbmSRjaMnuJoyG0kE+eQ8BoPv97I4jIWD96pnYRFQIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFLLi/h7JX39krSrFHvJygmyOV+1qMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvc3VMLUhzbGZmMlN0S3NVZThuS0NiSTVYN1dvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEAJfx
DAMEApfxgAMEAJfyBAMEAJfyDgMEAJfyEQMEAJfyGwMEAJfyIAMEAJfyKAMEAJfy
iwMEAJfzLAMEAJfzcwMEAJf0AzAMAwQHl/SAAwQAl/SCAwQAl/VVAwQDl/V4MAwD
BACX98MDBACX98gwDAMEAZf32gMEAJf33DANBgkqhkiG9w0BAQsFAAOCAQEAWRT7
olxMilt4okYMfnGhIpoPTO3vIp1scIzqEhZwTv3gIj5jXIMX43RphbGrjjR2kjta
mLwFNfnboB6zceXfBKprZkySsYfFl/aXdk3jLr94Vrk3DfsOVWLf/Kwb15rSIp2v
H8U1Jq87XrFGHTH9jqogooMDlAV116RtpxbOUVarw/IVaaKoL4wzgXf+szlbPxGa
GuoAz3antvZQyVMsNRqDiFDgkIUHXaTjR7gaccgwfnPD6AG4j0Pqwianb9PTp41v
YrPXRkP3Hi6LxSdf90PtvjiNhQepUzkMiF5hxfYCaDI0bq/msIR/tZAHXV5BYObc
pRlmDzB1wwdzSEW4gg==
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:40:27 2025 by rpki-client