Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sy_ZEVUlVWSelmT1aTi6PeJfq-s.roa
File: sy_ZEVUlVWSelmT1aTi6PeJfq-s.roa (raw, json)
Hash identifier: +850LHmJ/abQPYPAcqfHVuJ36pWxy9UZ54WxU3VLAdA=
Subject key identifier: B3:2F:D9:11:55:25:55:64:9E:96:64:F5:69:38:BA:3D:E2:5F:AB:EB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198E685B57FC1187EDE47F47A1D78928740
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sy_ZEVUlVWSelmT1aTi6PeJfq-s.roa
Signing time: Tue 26 Aug 2025 13:16:19 +0000
ROA not before: Tue 26 Aug 2025 13:16:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47690
IP address blocks: 151.246.128.0/22 maxlen: 22
151.246.136.0/22 maxlen: 22
151.246.144.0/22 maxlen: 22
151.246.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 13:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e6:85:b5:7f:c1:18:7e:de:47:f4:7a:1d:78:92:87:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 26 13:16:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b32fd911552555649e9664f56938ba3de25fabeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ab:9d:ff:54:4d:57:bd:aa:d2:9f:82:fa:c8:
5a:36:05:3f:30:22:68:12:87:9d:18:b3:8c:5b:64:
18:91:20:6f:de:5c:e1:69:39:7f:d3:d1:84:b4:7d:
13:b7:a3:86:ed:22:af:c0:b2:33:48:cc:6b:6d:f5:
94:ca:5f:fb:13:7f:77:54:4f:fd:0e:e6:60:b6:ae:
cf:60:3a:6a:d3:d5:21:de:53:a6:47:cd:ea:4c:e0:
a1:57:12:99:74:27:e8:7a:5e:b7:d1:3f:60:1c:7e:
d5:df:ac:9d:52:8e:b9:2d:9e:2b:e6:09:f4:a1:8a:
9b:e9:ef:34:72:28:fd:fa:61:dc:a0:bd:b4:15:65:
d6:57:9d:be:48:ce:2a:6e:29:88:85:91:df:5b:51:
9d:04:65:16:16:f8:5a:b5:9e:2c:62:cb:f6:0c:99:
18:41:1b:76:c2:4f:ca:ac:5d:1d:bb:10:d8:a2:98:
71:66:26:91:b8:70:9a:c2:78:84:f9:58:18:b3:1b:
3c:5c:3c:f4:10:1c:ee:27:65:9b:4f:25:b9:ec:e8:
bd:17:90:30:d2:05:ee:e8:c6:07:d0:7b:50:16:63:
bc:04:ec:44:a2:83:e6:7b:95:16:a3:8e:12:4b:8a:
34:b4:4a:e5:dd:27:bb:3d:3f:f9:89:e8:c4:08:bf:
6d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2F:D9:11:55:25:55:64:9E:96:64:F5:69:38:BA:3D:E2:5F:AB:EB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sy_ZEVUlVWSelmT1aTi6PeJfq-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.128.0/22
151.246.136.0/22
151.246.144.0/22
151.246.152.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:9b:cb:fe:ec:32:d4:b9:aa:e7:c0:32:9a:00:24:8a:cb:b8:
0d:9e:ad:e8:07:15:61:0b:69:00:34:8d:3b:d6:9c:a7:d3:a2:
b4:da:cb:5a:fa:e7:0d:43:6a:b6:3f:ca:54:c0:a1:a2:e9:66:
b7:e2:ca:73:96:c3:b5:e6:13:6e:0a:a4:a0:bd:4d:30:e0:e6:
f4:1d:a8:cf:45:67:4c:6b:5b:ff:54:98:06:ac:0f:b9:74:68:
0b:dd:9e:4b:1a:1b:12:69:7d:30:0e:e1:43:c6:c0:a4:1f:e0:
9d:bc:15:2e:54:e0:03:6b:ca:79:d1:b9:be:d4:58:11:eb:7b:
3b:e8:00:f1:0e:d4:a3:c3:a4:08:6e:3a:ba:b0:42:20:a7:87:
f7:8f:c9:d2:d6:85:a9:e6:64:7e:5d:bd:2b:ed:12:fc:f8:1e:
46:ac:93:3a:7f:0b:a1:a4:80:a3:6f:15:f8:42:f4:17:8b:c8:
43:22:5c:7f:6b:2c:97:f5:95:61:6c:f1:6c:ef:f5:c4:66:4a:
65:18:a8:7d:bf:2a:8b:9f:b4:38:a4:96:a6:cb:dc:41:72:00:
e9:42:41:ad:14:35:3e:55:c5:72:0a:fd:5b:6f:33:3e:01:fb:
c2:44:37:aa:b1:e8:e4:88:b2:e3:cc:8f:c6:f9:39:2c:ae:18:
7e:bd:ca:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:34:36 2025 by rpki-client