Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-sc6p6hrNbJqBtCi2Xw7duiiEf4.roa
File: 1-sc6p6hrNbJqBtCi2Xw7duiiEf4.roa (raw, json)
Hash identifier: PlO8/NVRfBBRPbIEgDa5ScedzlDrLuEy4iQvFwARBvY=
Subject key identifier: FA:C7:3A:A7:A8:6B:35:B2:6A:06:D0:A2:D9:7C:3B:76:E8:A2:11:FE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FAD8A16D4999D39B9C76A3013427184DC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-sc6p6hrNbJqBtCi2Xw7duiiEf4.roa
Signing time: Wed 29 Jul 2026 11:02:15 +0000
ROA not before: Wed 29 Jul 2026 11:02:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 272547
IP address blocks: 151.242.41.0/24 maxlen: 24
151.243.33.0/24 maxlen: 24
151.243.218.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:8a:16:d4:99:9d:39:b9:c7:6a:30:13:42:71:84:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 29 11:02:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fac73aa7a86b35b26a06d0a2d97c3b76e8a211fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8b:74:06:42:96:b6:76:fc:c1:c0:16:d9:10:
d1:0e:a4:25:e9:53:e8:2e:35:73:fd:03:ab:63:96:
43:19:c0:8d:c1:1c:8f:b7:7e:ae:a1:45:7c:3d:d5:
4f:7d:2b:9b:ff:f0:33:c0:c0:19:31:e2:06:28:e2:
fd:5e:1e:e0:59:1f:58:6c:ef:72:2a:70:55:7b:e1:
22:74:5e:d2:38:21:b2:df:5b:0d:cd:55:d1:e3:46:
b2:8c:23:ac:b6:37:ef:af:aa:d2:2a:c3:42:a1:36:
ef:b9:32:8c:07:4a:3c:3a:f4:34:21:5a:49:29:8d:
36:93:a9:a3:08:d4:d4:81:04:f0:2b:ba:5a:73:2a:
df:0e:8d:7d:a8:1f:87:5f:37:79:63:e1:73:37:7b:
72:0f:2c:f9:70:82:f4:95:74:2d:f8:44:80:1b:d3:
98:9a:4b:43:bd:e6:d9:77:69:b5:db:61:93:5c:14:
eb:4a:3a:b3:0c:c2:c4:5d:e6:f4:07:41:f1:3e:77:
a2:ff:14:a7:79:51:82:cd:54:2f:c0:d0:66:cf:aa:
53:15:c8:74:92:25:09:0e:d2:cb:c4:2d:73:03:92:
04:8e:d1:90:72:fb:c8:97:7d:27:29:78:77:e8:08:
a2:f2:a6:c6:8c:45:71:ed:d3:5e:52:24:2a:c4:a8:
76:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C7:3A:A7:A8:6B:35:B2:6A:06:D0:A2:D9:7C:3B:76:E8:A2:11:FE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-sc6p6hrNbJqBtCi2Xw7duiiEf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.41.0/24
151.243.33.0/24
151.243.218.0/23
Signature Algorithm: sha256WithRSAEncryption
88:a0:3f:4e:ac:9b:9a:d4:0c:8b:be:83:ee:cd:a2:8a:43:d0:
65:9f:ab:7a:6b:19:b6:a1:ff:7c:f5:e9:55:51:b5:3d:64:0e:
de:94:14:1d:32:ce:9b:de:54:34:07:f5:b2:85:86:87:f6:48:
c6:55:75:d7:d2:05:6c:16:ce:1a:79:53:32:d5:c1:95:74:19:
e2:03:82:fd:41:dc:9f:c4:74:29:35:16:16:1d:63:c1:10:44:
56:d7:58:d7:c8:9c:c8:8b:3d:32:ff:a3:66:d8:57:4a:bc:6a:
84:46:a5:15:be:e0:15:a7:0a:e7:ad:96:0c:7b:93:9c:b9:d2:
d2:fe:7d:c6:88:29:f9:0d:05:9f:5b:96:4f:5b:2a:9e:f0:d5:
0f:8e:51:5f:85:36:2a:0d:ff:00:73:ee:b3:b2:9e:0c:39:7e:
ec:83:06:d6:79:7f:96:03:7f:a1:06:b9:f0:98:ed:07:48:62:
52:d3:01:fb:f4:42:c1:bc:b9:45:5b:b8:ec:d6:c1:f2:a0:46:
23:b0:22:30:36:be:90:2a:50:6b:ed:18:4a:28:69:55:48:8b:
89:f7:e5:99:78:4c:6f:10:06:2c:9a:44:c5:67:f7:24:58:60:
a4:0b:51:a9:e6:ae:a5:a4:61:30:8c:41:66:59:6b:ff:b3:c0:
92:e4:87:73
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:39 2026 by rpki-client