Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xnshxZlM8X_gRjD21xOMLfWCun0.roa
File: xnshxZlM8X_gRjD21xOMLfWCun0.roa (raw, json)
Hash identifier: qhoBgFg+sVZpW0+82lvS5wrpIssUpsEwzaPnoI4DwK0=
Subject key identifier: C6:7B:21:C5:99:4C:F1:7F:E0:46:30:F6:D7:13:8C:2D:F5:82:BA:7D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D4CCA1DC562C287A96E83BD67D08F782B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xnshxZlM8X_gRjD21xOMLfWCun0.roa
Signing time: Thu 02 Apr 2026 06:03:27 +0000
ROA not before: Thu 02 Apr 2026 06:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146996
IP address blocks: 151.243.210.0/24 maxlen: 24
151.243.211.0/24 maxlen: 24
151.246.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Apr 2026 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4c:ca:1d:c5:62:c2:87:a9:6e:83:bd:67:d0:8f:78:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 2 06:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c67b21c5994cf17fe04630f6d7138c2df582ba7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:e6:04:e6:b6:4a:d7:01:d3:12:54:f3:57:
30:9a:67:04:ac:89:5a:84:ff:45:08:50:46:8e:07:
1f:fd:e4:4a:92:8a:6c:28:5f:36:b1:b2:4d:62:e0:
b0:13:e2:f6:b6:0f:7f:eb:d6:77:57:f7:3d:91:42:
b0:e3:74:00:d4:41:9f:f8:31:c1:9e:15:29:18:a0:
41:9b:14:7d:9d:2e:56:95:22:2f:44:a4:39:a0:69:
f3:5f:97:2c:82:cd:ba:fd:e6:41:3d:97:57:44:1d:
8c:bb:69:c1:82:f2:b6:75:02:35:a7:76:23:b1:73:
5e:6c:0c:72:fb:9a:bc:31:6c:53:52:50:f3:46:5c:
cb:16:f3:48:07:dd:bf:6a:24:12:4b:2c:45:e5:56:
46:2e:e9:83:c3:0c:a0:bb:f6:96:8b:9d:1b:53:82:
73:1f:6a:1a:fc:01:a5:a6:11:60:10:e3:d0:79:a3:
72:bb:1e:7d:55:6a:ab:b2:69:dc:1c:bc:7b:d7:93:
ec:0f:be:7d:2d:85:2e:47:76:49:e8:cb:2b:99:9d:
cb:f7:12:01:64:7c:fd:68:44:9d:4e:c1:3b:a7:11:
91:1e:42:fa:b6:fb:8c:4a:64:b9:89:fa:2f:ec:b4:
04:fb:ac:48:f5:52:6c:4b:32:9a:e3:bb:7b:d4:88:
2a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7B:21:C5:99:4C:F1:7F:E0:46:30:F6:D7:13:8C:2D:F5:82:BA:7D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xnshxZlM8X_gRjD21xOMLfWCun0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.210.0/23
151.246.242.0/24
Signature Algorithm: sha256WithRSAEncryption
64:b4:28:f6:13:29:10:83:26:02:b5:4b:fc:03:49:dc:43:8b:
ba:49:d3:c1:c1:29:af:7f:98:0b:ad:30:35:cc:8e:91:a3:5e:
47:1a:a1:76:c1:6b:11:33:19:5e:f8:33:b7:2b:36:62:69:43:
f4:0c:4b:b1:3c:47:e8:27:06:4e:19:94:26:c4:62:da:c5:85:
8f:14:25:82:7d:ff:0a:6a:32:34:ce:6a:47:9d:fc:1c:36:c1:
7a:cd:16:a6:87:fb:8c:7d:10:12:88:b0:4f:d3:54:ae:49:2d:
5d:a8:47:b4:15:12:f0:ff:98:8f:f7:d4:e0:90:da:a5:45:af:
fd:55:da:ee:61:b1:6b:19:d7:8d:92:bf:26:20:71:39:08:4b:
1c:65:a2:0e:5b:7d:79:1d:75:63:08:06:d9:9f:a9:d2:d4:19:
4d:69:23:89:19:67:5d:7c:76:15:a4:c7:a2:67:d7:b3:0a:76:
98:f7:1d:d5:52:ea:d1:c4:a1:94:14:1f:85:db:bb:ea:6b:dd:
74:12:bf:93:3d:37:d1:6d:d0:41:ca:d3:99:c0:5c:ac:06:f2:
91:53:d5:bd:40:fe:03:32:b9:8d:8b:83:4e:28:92:77:00:04:
1f:e5:da:57:aa:f1:b8:ee:fe:cf:b0:ef:c0:67:16:43:fc:68:
0c:08:79:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 01:00:50 2026 by rpki-client