Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-mxLWi8PH2AyCqjUT7AjLdVaAa4.roa
File: 1-mxLWi8PH2AyCqjUT7AjLdVaAa4.roa (raw, json)
Hash identifier: MHEprVylc7U+CIMMk3CJC6Yvhl08Bbt9ZOEAAyfp9Tw=
Subject key identifier: FA:6C:4B:5A:2F:0F:1F:60:32:0A:A8:D4:4F:B0:23:2D:D5:5A:01:AE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E503D0BA73AC836B0BCAE4BB0B828B54B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-mxLWi8PH2AyCqjUT7AjLdVaAa4.roa
Signing time: Fri 22 May 2026 15:10:38 +0000
ROA not before: Fri 22 May 2026 15:10:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 151.244.93.0/24 maxlen: 24
151.244.124.0/24 maxlen: 24
151.246.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:50:3d:0b:a7:3a:c8:36:b0:bc:ae:4b:b0:b8:28:b5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 22 15:10:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa6c4b5a2f0f1f60320aa8d44fb0232dd55a01ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a4:b8:f7:38:13:0e:79:55:50:85:4e:e6:e1:
9c:54:52:a5:40:9d:48:4b:1d:a3:37:5d:77:1c:d5:
d4:66:84:a1:ec:c7:4a:b5:03:57:44:31:10:a0:c9:
3f:9d:75:5f:19:88:40:25:f2:24:8a:96:95:10:4c:
8b:db:11:94:9a:7a:83:f3:6f:15:eb:f6:70:8f:38:
71:79:84:7e:e0:9d:fa:04:71:69:5f:94:c2:4d:aa:
e0:52:af:87:e7:f7:72:5f:4b:a0:c4:63:f1:52:c1:
07:4d:ec:a8:95:08:18:56:30:19:86:b3:17:4a:3f:
6a:8e:3b:f2:54:7b:f1:79:a7:8b:df:75:99:6b:97:
91:02:d3:d5:12:1f:4e:dc:e4:af:12:c7:bf:77:e9:
a7:e1:e6:f1:3d:73:74:2e:35:40:3f:9f:79:c1:4e:
11:fb:21:16:33:cf:0b:94:52:e1:ae:90:7b:f1:84:
52:e5:cb:1b:b2:11:29:e4:44:d9:21:de:8c:41:c8:
63:31:42:78:c9:14:e1:de:40:75:46:22:4a:c5:7e:
5e:cf:5a:b9:d2:7b:83:02:1e:4e:aa:63:25:fe:54:
4c:46:20:c7:36:ed:83:09:e8:95:88:30:41:ef:4e:
1c:68:93:84:b3:35:51:44:16:e7:19:45:f0:48:08:
cb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6C:4B:5A:2F:0F:1F:60:32:0A:A8:D4:4F:B0:23:2D:D5:5A:01:AE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-mxLWi8PH2AyCqjUT7AjLdVaAa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.93.0/24
151.244.124.0/24
151.246.167.0/24
Signature Algorithm: sha256WithRSAEncryption
70:29:32:00:ca:b5:b1:72:e2:d5:0e:e6:34:f8:98:3a:11:a0:
4f:98:4f:9c:dc:14:6c:04:30:b9:07:1b:f9:e9:ff:ae:3c:eb:
c8:23:e0:ae:42:24:d7:56:fa:77:47:2c:35:98:e3:5b:30:ff:
72:be:5c:8d:94:1a:ab:cf:f1:65:91:5a:6c:dc:d3:7b:b7:53:
8c:7e:eb:d3:a3:d7:ae:d6:14:2e:b0:8c:10:1f:da:4a:84:7d:
3f:0c:cb:74:37:d9:85:78:b0:f6:af:b7:37:a1:3b:41:89:f6:
6a:88:19:77:3e:85:a1:ce:68:d5:88:ba:9b:aa:7d:9f:23:4b:
7b:6e:22:62:2c:23:9b:d6:bf:29:db:38:a4:2f:67:06:20:7d:
52:04:03:55:c5:e3:cd:19:d6:10:a2:16:84:1e:2a:d3:0a:be:
7e:a2:bd:e5:fb:c6:fa:05:08:4b:0c:9a:09:a0:5f:cc:cd:87:
71:03:73:4d:d3:97:bc:12:b0:43:61:20:fe:9c:a3:88:c6:05:
49:b6:48:8d:b2:5e:f6:5a:e8:6c:1b:91:b3:c3:fb:a8:59:e4:
c0:6a:4a:b8:b1:8d:d1:21:ee:4f:16:cc:ae:66:5f:97:65:0b:
e8:20:14:18:c8:a6:37:0b:f5:15:4e:a8:9d:ea:76:77:34:8a:
17:d9:a0:ed
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 6 05:21:35 2026 by rpki-client