Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/17Ekvq7gD6z5UZ5ZDqU39wooMQE.roa
File: 17Ekvq7gD6z5UZ5ZDqU39wooMQE.roa (raw, json)
Hash identifier: VQ/X1x/VwWeEw6c2uL4SY/YQq+3ZWUgdNRTybLVno8Q=
Subject key identifier: D7:B1:24:BE:AE:E0:0F:AC:F9:51:9E:59:0E:A5:37:F7:0A:28:31:01
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E02945DDDE237E8BDF777026523D00168
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/17Ekvq7gD6z5UZ5ZDqU39wooMQE.roa
Signing time: Thu 07 May 2026 13:15:38 +0000
ROA not before: Thu 07 May 2026 13:15:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203156
IP address blocks: 151.243.138.0/24 maxlen: 24
151.243.149.0/24 maxlen: 24
151.247.144.0/24 maxlen: 24
151.247.145.0/24 maxlen: 24
151.247.150.0/24 maxlen: 24
151.247.181.0/24 maxlen: 24
151.247.224.0/24 maxlen: 24
151.247.229.0/24 maxlen: 24
151.247.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 May 2026 10:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:02:94:5d:dd:e2:37:e8:bd:f7:77:02:65:23:d0:01:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 7 13:15:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7b124beaee00facf9519e590ea537f70a283101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:06:81:d8:98:61:ef:46:d0:92:ee:a3:65:
dd:a8:d6:0f:3f:11:bd:01:fa:4d:ab:87:1b:af:3d:
5d:09:82:81:10:4d:55:a0:02:eb:4f:ea:b2:f8:cc:
35:f3:57:09:f6:dd:38:c4:7a:db:dd:81:40:3a:97:
34:99:bc:5d:2b:07:be:af:f3:4a:fd:6d:d4:7e:ae:
11:9e:0d:86:00:81:5a:a5:22:1a:f5:92:09:07:4a:
4e:df:98:ff:2e:15:c7:55:87:82:c2:3c:a9:63:9e:
60:be:42:ec:33:69:8e:f0:e6:54:6e:9c:33:2f:54:
c0:19:db:d3:0b:d5:75:29:5c:2e:21:ba:81:ce:7b:
aa:0b:05:90:9b:1a:50:47:16:71:8f:d2:cf:b2:f0:
a8:1c:38:11:2e:b3:83:1f:c2:46:d6:e6:24:dd:dc:
15:09:82:08:da:05:77:4d:ee:18:61:e3:5c:ec:f9:
55:bd:12:54:97:df:48:b6:81:35:49:10:88:1e:b5:
0b:5c:54:9f:02:0f:f3:13:90:ef:14:38:00:66:ce:
a3:39:37:9a:63:d5:b7:67:cc:4a:86:19:29:78:ef:
11:6c:d5:c4:43:0d:37:7f:07:92:af:c6:48:c8:b4:
16:a2:98:9f:04:e5:73:59:a6:7a:45:a7:94:f9:83:
bc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B1:24:BE:AE:E0:0F:AC:F9:51:9E:59:0E:A5:37:F7:0A:28:31:01
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/17Ekvq7gD6z5UZ5ZDqU39wooMQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.138.0/24
151.243.149.0/24
151.247.144.0/23
151.247.150.0/24
151.247.181.0/24
151.247.224.0/24
151.247.229.0-151.247.230.255
Signature Algorithm: sha256WithRSAEncryption
05:0b:8b:0c:58:cd:e9:e4:00:47:b8:73:65:04:0b:e5:ce:6f:
1c:6d:5e:c8:3d:0f:61:91:bc:47:01:cf:c9:cb:dd:87:50:2c:
7b:61:c5:13:b3:e5:a0:14:8b:9c:09:04:ac:2a:16:a2:c9:af:
4b:60:cd:43:78:19:ce:f7:a0:a1:7b:0b:0e:2a:03:31:cf:4c:
db:4f:6c:a4:eb:90:ff:41:70:37:be:6b:81:ce:40:e9:10:8d:
82:fa:d3:c5:dc:73:7e:4f:5f:a9:f4:65:b2:40:3c:12:40:a8:
76:cb:2f:a8:84:e9:b1:6c:84:74:7d:11:3c:eb:8e:5a:b7:c5:
e6:6e:30:36:43:c3:0f:1a:86:9e:29:85:3d:e3:9c:ae:f8:07:
bd:9e:24:03:42:a9:08:61:c0:f2:e7:0d:7a:82:db:a2:a4:9d:
f0:e0:22:05:ee:6a:97:b9:3b:86:0b:27:1f:20:09:bc:c3:f5:
8c:2a:8d:0e:6a:53:22:8e:1f:31:bd:bd:67:3d:18:71:9d:44:
c2:42:de:9c:98:3c:ac:27:40:f0:6e:b8:c9:1d:d3:62:f2:ce:
f4:d9:c1:e2:7b:d9:ab:a3:ea:ad:c0:7f:31:3f:0f:e5:3a:36:
73:3f:af:d1:14:9b:21:84:ad:4d:7c:2a:53:a4:43:02:b8:f4:
ea:06:2e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 19:13:57 2026 by rpki-client