Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ISTVslaEcIGDRjqiCtFJW_e_xuE.roa
File: ISTVslaEcIGDRjqiCtFJW_e_xuE.roa (raw, json)
Hash identifier: dVZBZMdNlK33ajj7yTIiwcIh3coaaY+bB68FILH0Nnc=
Subject key identifier: 21:24:D5:B2:56:84:70:81:83:46:3A:A2:0A:D1:49:5B:F7:BF:C6:E1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A04853E9617A0078A5E6CB7A0B0CC952CC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ISTVslaEcIGDRjqiCtFJW_e_xuE.roa
Signing time: Fri 28 Aug 2026 12:24:13 +0000
ROA not before: Fri 28 Aug 2026 12:24:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 262287
IP address blocks: 151.242.126.0/24 maxlen: 24
151.245.244.0/24 maxlen: 24
151.245.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:53:e9:61:7a:00:78:a5:e6:cb:7a:0b:0c:c9:52:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 28 12:24:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2124d5b25684708183463aa20ad1495bf7bfc6e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:9f:9e:5f:d1:81:2e:d0:30:98:db:cb:02:
55:0f:d2:a1:3e:74:cd:f1:d8:2a:5a:9b:c2:fd:55:
f2:1d:04:6e:6f:e8:37:21:49:28:df:3a:ff:87:3e:
72:c4:62:12:5a:f7:e0:22:ef:21:4e:9c:6c:56:96:
9d:e0:98:37:3c:55:5d:02:8b:86:08:89:bd:fe:3a:
a2:e4:8e:04:1e:dc:11:c1:a5:f5:f6:94:f4:78:89:
eb:cd:fd:86:78:76:e2:4a:73:5c:2f:e0:5e:d0:a0:
16:55:0b:52:09:30:ab:5b:ed:e2:72:46:e6:17:c9:
79:1f:73:5a:98:17:7f:96:40:cf:eb:36:e9:3c:d3:
2f:4a:37:23:90:f5:9d:8d:28:d7:c5:62:25:77:fb:
c5:93:4f:fc:4e:37:64:cf:1e:d1:a0:f0:86:ed:63:
54:d1:7a:94:c6:b2:af:fe:cc:48:44:f1:5f:a4:fc:
b8:fa:f9:2c:38:97:c4:66:d5:9e:1a:26:74:ea:a7:
6f:d6:27:83:e3:6b:35:51:d5:3e:dc:0b:93:5d:13:
3f:eb:bb:5b:84:62:d4:81:71:dd:32:75:16:2c:4b:
af:de:89:50:61:ae:af:59:7a:11:15:7e:c4:be:53:
43:fc:b4:5c:f6:77:1c:1d:e3:3e:03:a4:4a:aa:5e:
ec:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:24:D5:B2:56:84:70:81:83:46:3A:A2:0A:D1:49:5B:F7:BF:C6:E1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ISTVslaEcIGDRjqiCtFJW_e_xuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.126.0/24
151.245.244.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:a2:cd:0a:aa:09:4d:1a:02:0a:15:d8:33:24:a5:6e:b2:a6:
75:a5:6a:da:3b:41:5f:00:d5:0a:43:25:11:7a:91:7c:dd:2c:
6b:f5:5a:7f:75:fd:38:75:40:ed:58:98:28:b4:a8:1b:04:91:
4a:fb:e7:1b:c5:3f:d8:50:7a:95:bd:3a:be:e6:e6:7c:36:47:
36:6e:6d:b7:21:f6:1b:2f:fc:aa:76:8e:3e:a3:a7:6a:f2:34:
17:40:9c:42:28:11:42:23:93:f1:75:e8:e6:dd:f3:ab:f6:3a:
65:e6:67:ff:23:9f:6e:d0:1a:ec:49:77:41:20:01:ee:6c:49:
4c:34:0a:b7:11:db:89:aa:4f:b7:53:88:51:28:f7:13:bc:ce:
84:9c:fd:87:67:27:a7:5a:3b:14:b3:3e:84:b7:b9:0e:62:f6:
c6:4a:0d:c1:49:c4:f0:ea:19:85:36:24:a1:fb:d5:5b:69:cc:
0a:2f:62:50:9b:8b:ac:e5:3c:28:b5:fa:99:7d:3f:5f:fc:47:
a8:d5:77:a7:60:4b:57:fc:d5:a6:97:86:82:67:41:f8:7a:78:
10:a5:e7:0b:7a:7a:a5:9d:f1:be:90:62:8e:2d:17:93:88:e6:
f3:27:df:a3:6c:e1:53:93:c3:6c:6d:09:ea:b6:fa:df:ee:e0:
fc:e1:a1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 21:55:38 2026 by rpki-client