Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/udDf_Qnk1LGfE4T1IL03Lxo3glo.roa
File: udDf_Qnk1LGfE4T1IL03Lxo3glo.roa (raw, json)
Hash identifier: dFWLSwSvCySX45V3JxxuQy2V2ZtfXUgWbVMEy8mPcjw=
Subject key identifier: B9:D0:DF:FD:09:E4:D4:B1:9F:13:84:F5:20:BD:37:2F:1A:37:82:5A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A2AA3E4429770912B3007830FF1C22D9D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/udDf_Qnk1LGfE4T1IL03Lxo3glo.roa
Signing time: Tue 28 Oct 2025 11:46:15 +0000
ROA not before: Tue 28 Oct 2025 11:46:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 151.240.97.0/24 maxlen: 24
151.241.146.0/24 maxlen: 24
151.241.155.0/24 maxlen: 24
151.241.215.0/24 maxlen: 24
151.241.216.0/24 maxlen: 24
151.241.217.0/24 maxlen: 24
151.241.221.0/24 maxlen: 24
151.241.226.0/24 maxlen: 24
151.241.227.0/24 maxlen: 24
151.241.228.0/24 maxlen: 24
151.241.229.0/24 maxlen: 24
151.241.234.0/24 maxlen: 24
151.243.169.0/24 maxlen: 24
151.243.171.0/24 maxlen: 24
151.245.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:a3:e4:42:97:70:91:2b:30:07:83:0f:f1:c2:2d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 28 11:46:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9d0dffd09e4d4b19f1384f520bd372f1a37825a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:32:5f:e7:eb:59:be:cb:af:74:58:a1:e4:05:
b7:51:12:97:e0:fb:a2:9a:67:46:9d:e2:b0:2c:b2:
31:eb:b8:ec:9f:f4:be:8b:90:8c:0c:22:f3:6c:ac:
bf:40:86:82:5a:76:2b:39:cf:fd:a0:44:77:bc:e7:
08:33:77:c7:e7:f7:e7:c9:53:ee:ff:6a:ad:d4:e0:
23:92:d7:3d:b0:2e:09:1d:e7:df:ad:cf:43:25:06:
2e:39:8a:ba:e5:e4:b1:8b:9a:06:47:73:73:95:b2:
9c:02:01:d1:01:ad:c8:73:db:89:47:88:16:95:01:
6f:43:25:27:95:0f:a4:25:2f:b5:b5:99:fa:a4:58:
4f:bb:25:34:79:77:11:bc:22:be:21:48:ec:1b:af:
6a:f5:bc:bb:33:03:dc:b1:d3:96:e7:25:13:e8:03:
2e:26:d2:ec:67:33:90:6f:af:39:8d:96:3e:6f:27:
0a:bb:c8:1f:75:d4:cd:96:e1:92:40:a3:98:e5:7b:
fe:c3:89:82:3b:59:61:bb:21:98:5f:9b:58:eb:d3:
10:62:d1:31:ef:b9:8d:8a:ea:7b:54:15:50:10:c2:
b0:16:83:86:cd:0b:40:e6:2c:46:8f:d0:f1:f1:1d:
67:f0:d2:f9:ee:bd:b7:00:04:23:0c:72:68:06:89:
90:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D0:DF:FD:09:E4:D4:B1:9F:13:84:F5:20:BD:37:2F:1A:37:82:5A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/udDf_Qnk1LGfE4T1IL03Lxo3glo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.97.0/24
151.241.146.0/24
151.241.155.0/24
151.241.215.0-151.241.217.255
151.241.221.0/24
151.241.226.0-151.241.229.255
151.241.234.0/24
151.243.169.0/24
151.243.171.0/24
151.245.218.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:49:4f:e9:44:65:d7:3f:b6:70:28:97:9a:10:1e:88:61:5b:
bc:0e:03:f6:9f:61:5f:82:72:22:c4:5d:0c:75:46:fb:9d:81:
b3:a8:05:90:4e:8e:f0:36:cb:5f:88:b0:61:60:c2:dc:bd:9d:
8c:30:7d:b7:81:c0:92:0d:03:99:47:52:c2:cd:da:9a:00:85:
22:bb:6a:56:f6:4c:8c:46:1c:2d:22:cd:de:21:8f:9b:fe:98:
72:2a:dd:43:e6:1e:f9:27:72:4f:fe:75:41:14:61:46:c7:83:
04:fa:3b:95:bd:b4:da:6e:d7:24:dd:f6:05:9a:c6:7e:d4:68:
18:69:6f:76:52:f7:7f:ad:4a:8a:1a:1e:37:63:cc:1c:3e:a0:
02:94:5a:b0:6e:2e:ac:73:87:2e:7a:7b:bc:e6:54:6f:3d:96:
2e:48:51:40:e0:26:5d:3f:95:cd:6c:b3:96:12:00:6b:85:a1:
d7:db:dd:62:df:d8:c3:fd:ba:23:38:f1:ce:9e:f4:f8:b5:9a:
41:5a:47:ad:26:2c:71:3e:8f:25:25:00:b4:97:0c:e9:a7:ff:
89:83:68:3f:49:f5:ec:16:58:1b:90:45:ca:a1:49:9b:26:10:
d6:90:d2:22:3e:61:cd:41:79:97:0b:94:a3:4d:90:7c:3a:92:
b5:9f:61:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 15:47:55 2025 by rpki-client