Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/09fCoa2QE_qBXUUkcCmnrs4RbSk.roa
File: 09fCoa2QE_qBXUUkcCmnrs4RbSk.roa (raw, json)
Hash identifier: T2RhcOhOIFMwj+5+Pb2ffqDD4rGoROoezR6Qv1Pej/w=
Subject key identifier: D3:D7:C2:A1:AD:90:13:FA:81:5D:45:24:70:29:A7:AE:CE:11:6D:29
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EFD3910EAE1438F3186C3CCDBA04E1797
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/09fCoa2QE_qBXUUkcCmnrs4RbSk.roa
Signing time: Thu 25 Jun 2026 05:20:35 +0000
ROA not before: Thu 25 Jun 2026 05:20:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 37.202.194.0/24 maxlen: 24
151.241.207.0/24 maxlen: 24
151.243.7.0/24 maxlen: 24
151.243.152.0/24 maxlen: 24
151.243.154.0/24 maxlen: 24
151.243.195.0/24 maxlen: 24
151.243.197.0/24 maxlen: 24
151.243.228.0/24 maxlen: 24
151.243.231.0/24 maxlen: 24
151.244.54.0/24 maxlen: 24
151.244.167.0/24 maxlen: 24
151.244.180.0/24 maxlen: 24
151.244.222.0/24 maxlen: 24
151.244.224.0/24 maxlen: 24
151.244.235.0/24 maxlen: 24
151.246.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:39:10:ea:e1:43:8f:31:86:c3:cc:db:a0:4e:17:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 25 05:20:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3d7c2a1ad9013fa815d45247029a7aece116d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d6:6b:99:0e:26:6e:d2:ad:0d:39:0c:b2:17:
22:ab:5f:76:ef:18:d2:ed:42:1a:87:13:2d:99:0d:
b8:32:62:8b:10:89:89:33:fc:b0:24:86:bc:55:fd:
04:6e:9d:b6:f0:5d:cb:ff:f8:f1:86:4f:fb:b2:e4:
82:b6:23:98:13:54:4d:3d:3e:66:49:46:2c:ea:bf:
22:22:5c:f2:0a:d2:02:bb:ed:c0:49:27:78:aa:a8:
b1:e0:11:22:02:54:2c:7d:41:cb:09:57:68:58:c4:
0f:a8:38:05:7c:1f:16:38:f8:4a:07:df:c2:ff:35:
3e:1c:5e:7c:ec:03:16:21:a8:1f:48:a7:bf:32:a8:
13:3f:bf:3d:bc:42:d8:95:f8:07:b1:7e:ff:62:7f:
d6:d8:6c:45:8e:cc:60:6a:d4:7e:ff:db:ee:32:c2:
57:c5:9a:8d:9b:a4:b6:56:0f:e7:01:9d:06:c7:ce:
a0:27:72:8f:fc:bb:8c:71:4c:8e:59:92:da:4c:44:
50:7d:9c:51:2c:4b:d2:87:3c:fe:ad:11:f0:9e:ae:
0c:04:22:9f:cc:77:5b:20:15:a8:93:50:c3:d0:7c:
93:a2:96:b2:34:41:04:71:f8:da:ea:95:ec:9d:15:
c7:3a:40:8e:f7:41:54:2c:d5:1f:eb:83:45:d2:4d:
ef:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D7:C2:A1:AD:90:13:FA:81:5D:45:24:70:29:A7:AE:CE:11:6D:29
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/09fCoa2QE_qBXUUkcCmnrs4RbSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.194.0/24
151.241.207.0/24
151.243.7.0/24
151.243.152.0/24
151.243.154.0/24
151.243.195.0/24
151.243.197.0/24
151.243.228.0/24
151.243.231.0/24
151.244.54.0/24
151.244.167.0/24
151.244.180.0/24
151.244.222.0/24
151.244.224.0/24
151.244.235.0/24
151.246.161.0/24
Signature Algorithm: sha256WithRSAEncryption
63:28:b0:2e:55:94:9a:1e:ad:3d:12:81:ca:de:ef:cd:37:5f:
2d:c0:9a:a4:1e:86:32:c4:96:56:b0:ba:fe:dc:8d:2e:d7:59:
0a:b3:a1:82:9a:78:63:7a:4e:22:86:49:85:4d:64:98:e9:2f:
69:49:3c:b8:b1:ba:7e:61:52:28:16:94:04:18:4a:3b:23:a8:
04:d7:61:f7:9b:98:6d:8c:66:7e:bc:29:fb:4c:a2:7b:9f:6f:
77:2f:22:e8:a5:39:0c:b4:82:9f:12:7d:04:43:d2:b8:42:7c:
49:30:87:55:5e:3d:c4:72:8b:9e:8b:05:f7:9f:23:8b:c9:b3:
fd:c4:fc:1e:3c:96:ad:95:ae:9a:9a:e4:57:57:e9:b7:44:7a:
c7:08:9c:1a:66:36:49:54:e1:b5:1a:4b:e6:71:d9:4e:ac:1a:
e3:69:d0:21:26:9b:49:a3:65:ab:65:ad:5c:49:5a:03:f4:57:
c7:b4:1c:0f:4c:02:d0:08:25:7f:d7:06:fc:77:63:b0:51:6c:
39:18:81:d1:2a:34:36:ba:9e:f1:45:51:58:65:ef:3c:2a:85:
69:05:55:09:c8:66:9b:db:25:74:d4:77:fe:62:6d:2e:9b:a9:
13:15:a8:94:be:ed:2f:22:76:58:b2:53:2f:c6:06:89:5c:a4:
1e:fa:99:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 13:50:53 2026 by rpki-client