Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eL-ZH0H5LmCTIwtlkIImxWJE4jU.roa
File: eL-ZH0H5LmCTIwtlkIImxWJE4jU.roa (raw, json)
Hash identifier: Ny10UWkoulpQ2A95tJ4/W7fl+JYy//tIsR5Q+FY9Udg=
Subject key identifier: 78:BF:99:1F:41:F9:2E:60:93:23:0B:65:90:82:26:C5:62:44:E2:35
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FEC138F2EFAEDF801E3EAA16D6F14C097
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eL-ZH0H5LmCTIwtlkIImxWJE4jU.roa
Signing time: Mon 10 Aug 2026 14:28:52 +0000
ROA not before: Mon 10 Aug 2026 14:28:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211407
IP address blocks: 151.242.116.0/24 maxlen: 24
151.244.119.0/24 maxlen: 24
151.244.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 07:42:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ec:13:8f:2e:fa:ed:f8:01:e3:ea:a1:6d:6f:14:c0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 10 14:28:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78bf991f41f92e6093230b65908226c56244e235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a3:88:2c:b7:bc:01:41:78:4d:fe:ba:ae:f8:
c4:c0:47:b2:22:96:9d:3d:e7:77:5b:94:da:9e:e4:
c2:24:fd:4d:b3:06:1e:73:10:0d:41:32:96:54:08:
76:6a:0a:69:96:a1:39:b4:bc:e8:cf:b3:34:9f:93:
67:a0:cf:b3:86:e6:d2:61:0a:16:4e:6f:d4:14:f5:
72:f3:56:9d:7a:95:e1:03:62:37:c6:75:64:46:20:
25:87:94:5b:4d:3c:1d:c2:6a:c5:a5:bd:28:41:80:
4e:91:87:97:6b:f9:51:de:2d:12:b8:88:a7:42:a5:
82:92:48:33:ea:1e:59:1e:69:f8:d7:a7:63:83:ea:
e5:b5:56:77:89:42:4a:b0:08:3a:6b:5c:cb:fb:fa:
17:fd:cf:a4:22:ce:2f:95:95:53:9a:9c:09:32:e8:
67:13:f4:92:20:2a:d8:57:68:9c:1c:09:82:76:10:
7f:5b:30:b1:a8:20:9d:2f:fc:24:14:bd:75:20:d5:
3c:48:99:d2:17:5c:96:49:24:87:2c:71:0e:f2:68:
c5:bc:84:54:7e:51:0b:ee:d1:3a:bb:0b:c4:4f:7e:
0d:48:99:23:d4:c5:19:7e:68:0e:c4:9a:a7:3a:eb:
5d:b0:fd:54:8c:4e:b5:f0:5d:33:4b:69:0a:86:50:
a9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BF:99:1F:41:F9:2E:60:93:23:0B:65:90:82:26:C5:62:44:E2:35
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eL-ZH0H5LmCTIwtlkIImxWJE4jU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.116.0/24
151.244.119.0/24
151.244.238.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e0:c7:75:e8:79:59:27:4b:de:31:0b:59:1d:ac:4f:28:21:
59:8c:3f:f2:5b:cd:2d:27:3e:0b:5f:16:21:4e:f1:54:60:e2:
e6:c0:74:af:a4:50:ff:91:27:55:ad:76:58:08:90:77:da:fb:
25:03:b6:70:66:c4:28:55:58:30:32:01:ea:3d:f5:ac:55:5f:
9f:30:ee:50:65:4d:03:cc:fc:83:84:ef:7d:b0:8d:62:a8:26:
2f:85:59:d8:72:1b:3d:6b:b1:38:b9:a0:56:e1:f7:a0:fd:70:
07:e4:04:01:e4:90:06:01:6b:46:d8:1f:8b:8e:b1:67:0c:dc:
82:32:95:dd:cd:60:5b:d4:7f:d5:6f:f1:b7:83:d3:c5:d1:0a:
77:a0:df:29:d9:d1:c1:10:65:70:09:de:28:be:9b:dd:61:c1:
ad:0b:cd:0c:70:ee:62:90:c2:0a:dc:dd:4d:93:55:d2:96:63:
09:d6:d2:25:ba:27:31:f0:50:5b:29:c2:25:74:d8:71:cc:a3:
32:3f:07:85:69:44:5a:20:0f:19:e1:24:18:c6:1a:68:18:ba:
a3:61:fa:e5:c3:91:f2:59:6b:ee:e5:5d:a1:0a:f9:96:77:59:
d0:d5:2f:02:64:eb:35:7a:9b:a5:6c:f3:9c:a7:d0:c0:2c:79:
10:29:34:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:15 2026 by rpki-client