Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/L7zbELFhCp4cL2SM4onF1CpuGjw.roa
File: L7zbELFhCp4cL2SM4onF1CpuGjw.roa (raw, json)
Hash identifier: Z6vEsSm/DmLFE/MTPOp/uJaz1Ua0Dg6vkRhBIxl2Xlo=
Subject key identifier: 2F:BC:DB:10:B1:61:0A:9E:1C:2F:64:8C:E2:89:C5:D4:2A:6E:1A:3C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F419BF08A9DF7219BF740A99F5D0EC51E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/L7zbELFhCp4cL2SM4onF1CpuGjw.roa
Signing time: Wed 08 Jul 2026 12:02:46 +0000
ROA not before: Wed 08 Jul 2026 12:02:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 151.240.169.0/24 maxlen: 24
151.242.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:9b:f0:8a:9d:f7:21:9b:f7:40:a9:9f:5d:0e:c5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 8 12:02:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fbcdb10b1610a9e1c2f648ce289c5d42a6e1a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a4:b4:99:67:be:ce:18:75:2c:8e:0f:ed:7a:
03:bf:7d:7c:9b:b5:5f:a5:0f:54:e8:3f:d9:3d:de:
ac:5c:f3:8d:bd:9f:3d:b4:ab:91:c5:03:a7:97:79:
fe:95:7b:8a:9d:82:e9:bd:99:9d:77:b8:81:84:57:
28:91:eb:a9:86:b1:e7:56:38:47:d7:bf:f6:8d:ac:
b3:e7:b1:ff:ad:2d:dc:cb:00:26:d8:fe:6e:dc:68:
6d:6d:5f:e8:c2:08:72:69:45:d7:83:a9:08:7f:06:
5d:ed:73:a9:96:6a:01:e3:0a:2b:91:45:49:94:21:
00:f7:3f:f7:5e:bf:98:a9:12:37:43:e3:c2:be:42:
dd:94:4b:41:f9:65:42:44:68:f5:ef:fc:5f:41:f0:
12:9c:36:58:07:e2:33:7d:37:86:0b:4a:42:f5:b6:
38:56:5a:39:15:e2:60:98:a8:3e:f8:01:25:6e:08:
0c:27:fe:ac:d2:0c:00:73:b8:0f:12:d3:7f:c9:c5:
4b:1e:4b:9b:4f:32:f3:39:38:79:c2:12:54:10:e3:
8e:30:5a:b7:18:84:7c:74:4f:b6:dd:71:c8:c6:7c:
48:93:17:bb:67:3a:fc:0a:d9:12:5b:6e:6d:26:30:
db:b6:cb:05:52:90:76:75:e1:0b:c0:fc:25:b2:8e:
68:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BC:DB:10:B1:61:0A:9E:1C:2F:64:8C:E2:89:C5:D4:2A:6E:1A:3C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/L7zbELFhCp4cL2SM4onF1CpuGjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.169.0/24
151.242.61.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:0d:fc:42:8d:ba:4f:fb:96:96:2f:f9:90:9b:d9:4c:76:8b:
8c:a3:96:9b:b1:81:8a:f1:af:a7:51:2d:8b:aa:e9:55:1a:57:
73:7d:a1:0b:80:9d:4b:be:cb:20:b0:43:41:58:e2:ea:18:e9:
c8:3d:27:a3:2f:98:f2:06:a0:e0:45:ca:df:8a:ce:0a:0b:71:
0a:ee:26:c0:68:6a:b3:13:ba:59:19:ad:d0:d6:1e:ae:cc:35:
ae:b0:7e:c9:59:39:9d:af:32:0f:94:24:e6:67:73:c2:2e:4c:
d7:f8:02:7e:c7:36:31:aa:a6:d5:8d:7c:7f:9e:9c:a2:6a:19:
1c:63:9e:25:b8:eb:a5:1b:9d:0f:30:4c:b7:f7:62:64:79:0a:
c6:da:eb:22:27:95:75:be:f5:29:93:e1:f4:15:ea:89:cb:fb:
fa:be:03:15:52:e4:8d:da:6f:e9:43:c6:80:83:de:51:b8:82:
4b:91:03:e9:ac:c4:4a:e4:e6:77:84:58:1e:79:57:31:54:c8:
06:7d:df:c0:9f:10:59:56:5f:92:37:71:a9:a6:0e:33:1e:fa:
00:bd:b8:92:5b:80:c9:c4:42:0d:52:e8:4f:75:f3:98:18:bd:
7b:1e:08:2b:2d:10:6c:f1:cc:dd:2d:b3:3b:1f:9f:2f:25:b2:
14:80:2b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:33:24 2026 by rpki-client