Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/usKlRlGGtuQb0s4RG9KX2zc1QpY.roa
File: usKlRlGGtuQb0s4RG9KX2zc1QpY.roa (raw, json)
Hash identifier: Z0QrdLUSz3AdpZw/FC/WDpwopRoEaoWz95Ku/HJ5To8=
Subject key identifier: BA:C2:A5:46:51:86:B6:E4:1B:D2:CE:11:1B:D2:97:DB:37:35:42:96
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198F9618F6D5A14565212F89C18752EFC47
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/usKlRlGGtuQb0s4RG9KX2zc1QpY.roa
Signing time: Sat 30 Aug 2025 05:09:37 +0000
ROA not before: Sat 30 Aug 2025 05:09:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 151.240.128.0/21 maxlen: 24
151.240.136.0/21 maxlen: 24
151.240.171.0/24 maxlen: 24
151.241.132.0/22 maxlen: 22
151.242.56.0/24 maxlen: 24
151.243.8.0/23 maxlen: 23
151.243.204.0/23 maxlen: 23
151.244.56.0/24 maxlen: 24
151.245.2.0/24 maxlen: 24
151.245.22.0/24 maxlen: 24
151.245.56.0/22 maxlen: 22
151.245.185.0/24 maxlen: 24
151.245.187.0/24 maxlen: 24
151.245.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 13:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f9:61:8f:6d:5a:14:56:52:12:f8:9c:18:75:2e:fc:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 30 05:09:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bac2a5465186b6e41bd2ce111bd297db37354296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7d:ef:d1:c9:8b:a2:f9:63:43:9b:20:0b:da:
3d:bc:be:c5:54:00:1a:01:1a:8f:41:70:8d:89:ab:
11:97:88:7f:61:9c:29:21:a0:48:c7:e1:7e:48:36:
72:47:da:a1:dc:bd:00:60:5c:7a:92:f7:92:1e:3c:
7f:16:af:fb:18:2c:64:50:a9:ee:73:98:30:b7:2c:
04:49:bf:90:f9:2e:bf:42:8f:3f:fe:b5:d1:3e:eb:
56:65:62:0b:39:d0:71:78:e2:dd:0b:2e:f6:53:aa:
68:07:a8:34:10:4f:b6:06:2c:4d:f8:7a:2e:7d:43:
9b:98:96:4c:8a:19:06:1d:99:72:20:5d:6d:02:0f:
61:c0:2d:ab:db:14:b3:a2:b7:a7:82:35:3a:19:91:
6d:2f:d8:88:62:6d:d5:97:e1:fd:85:fe:ba:f1:77:
6c:a6:e5:98:0c:f8:70:19:43:7d:f1:65:30:64:94:
34:98:a3:94:5b:8a:18:e8:68:9c:d8:b7:e0:1b:c8:
4c:a1:ad:b5:93:28:1b:ef:45:37:0a:04:0a:14:39:
58:29:ed:27:54:ee:f5:5f:1a:a8:80:78:8b:1e:38:
e1:56:f4:e4:62:f6:b1:77:47:f7:fe:db:af:35:09:
d3:3e:bb:bf:72:41:f3:01:95:8b:e7:81:72:91:6b:
42:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C2:A5:46:51:86:B6:E4:1B:D2:CE:11:1B:D2:97:DB:37:35:42:96
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/usKlRlGGtuQb0s4RG9KX2zc1QpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.128.0/20
151.240.171.0/24
151.241.132.0/22
151.242.56.0/24
151.243.8.0/23
151.243.204.0/23
151.244.56.0/24
151.245.2.0/24
151.245.22.0/24
151.245.56.0/22
151.245.185.0/24
151.245.187.0-151.245.188.255
Signature Algorithm: sha256WithRSAEncryption
96:c8:27:05:a6:fb:32:16:9b:ca:de:cb:a0:64:48:5d:8c:0d:
12:bb:b3:00:bd:40:05:76:3f:6c:da:70:37:96:fe:b8:60:9a:
33:70:06:c0:45:30:8b:4e:ad:e1:5f:c9:74:fb:f9:a1:fe:cd:
5a:62:a2:87:14:59:7b:40:c5:38:81:fe:98:10:04:76:87:0b:
bc:ff:c4:27:b9:d6:ec:f1:7c:f3:ef:93:ac:52:ca:69:35:f4:
b9:e0:ce:93:a8:30:9c:42:88:6c:ea:fd:53:67:7f:9e:45:38:
b3:39:e7:a0:b0:ab:ac:d5:a6:9a:c8:23:aa:33:58:64:2d:20:
2c:ea:5d:9b:49:9a:b0:6d:23:19:35:1c:8e:e6:19:6d:29:0c:
8b:b8:de:41:75:b5:82:28:f4:a6:cd:c2:52:b0:19:f5:1d:cd:
da:90:a2:e5:64:e8:41:f6:9f:8f:90:77:a4:85:ea:60:f9:4c:
28:8d:64:64:50:67:43:e9:0b:56:43:96:8e:d1:56:a8:60:bb:
bf:46:bf:97:5c:26:5f:f3:53:5f:14:08:68:fc:1a:63:aa:0f:
ac:6d:c5:bd:3a:9f:ce:15:19:49:6a:d7:9b:c4:f6:0f:28:e8:
c3:b5:11:b2:c3:d5:68:db:2d:8c:6f:ba:ad:b7:8f:23:d0:87:
ae:a5:02:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 3 18:42:28 2025 by rpki-client