Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1FWLIrKYmoeUM4GVt4NmjLO0sYM.roa
File: 1FWLIrKYmoeUM4GVt4NmjLO0sYM.roa (raw, json)
Hash identifier: KG0GfK8IsBTi/vLeBJ1DOJntzIakiQb48zWhNo6TmmQ=
Subject key identifier: D4:55:8B:22:B2:98:9A:87:94:33:81:95:B7:83:66:8C:B3:B4:B1:83
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CCA023731C5DE51DA019CAF54E9EF07B4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1FWLIrKYmoeUM4GVt4NmjLO0sYM.roa
Signing time: Sat 07 Mar 2026 20:34:28 +0000
ROA not before: Sat 07 Mar 2026 20:34:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 151.240.73.0/24 maxlen: 24
151.244.38.0/24 maxlen: 24
151.244.52.0/24 maxlen: 24
151.244.221.0/24 maxlen: 24
151.244.223.0/24 maxlen: 24
151.244.238.0/24 maxlen: 24
151.245.241.0/24 maxlen: 24
151.247.82.0/24 maxlen: 24
151.247.91.0/24 maxlen: 24
151.247.94.0/24 maxlen: 24
151.247.142.0/24 maxlen: 24
151.247.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ca:02:37:31:c5:de:51:da:01:9c:af:54:e9:ef:07:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 7 20:34:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4558b22b2989a8794338195b783668cb3b4b183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3a:4c:8f:4d:a3:f0:37:8a:70:56:e5:19:a6:
49:34:42:29:a2:38:7e:86:73:ec:e0:0b:a0:a7:90:
fb:1a:e7:16:d4:ff:35:0e:53:09:f4:03:11:7d:60:
c1:c2:87:46:a1:23:f4:e3:d3:10:c3:4a:63:cc:d1:
0a:14:af:92:aa:56:de:b8:1f:3c:55:dd:c9:20:38:
04:a5:c2:95:e1:f7:d7:86:69:2e:1c:af:f8:a9:d2:
9d:37:84:cf:bb:f3:4e:77:c2:3f:db:9b:a2:31:3c:
bf:7d:bf:38:9e:1e:4c:ff:9d:8d:34:9a:a6:ab:b0:
83:bf:1c:b3:cb:b4:52:be:36:45:74:b6:27:55:e1:
ba:a9:1c:76:16:5a:38:db:cf:7b:65:da:35:32:47:
5b:e3:73:87:dc:57:ae:fa:4b:86:38:00:68:08:65:
7a:70:08:ee:e3:26:21:6b:1f:52:1c:be:d1:58:4d:
61:fd:ee:63:b3:19:32:07:f1:5e:66:c9:ec:9c:51:
d2:33:cc:34:93:72:14:ed:03:e7:bd:48:4f:28:be:
79:b3:e9:f9:32:1b:47:72:a4:ea:0b:6a:f8:23:95:
af:8e:ff:f8:c4:83:af:49:7f:e8:9d:36:27:9d:72:
aa:2b:38:36:50:2e:8e:a7:09:ce:b5:eb:e3:df:51:
ff:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:55:8B:22:B2:98:9A:87:94:33:81:95:B7:83:66:8C:B3:B4:B1:83
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1FWLIrKYmoeUM4GVt4NmjLO0sYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.73.0/24
151.244.38.0/24
151.244.52.0/24
151.244.221.0/24
151.244.223.0/24
151.244.238.0/24
151.245.241.0/24
151.247.82.0/24
151.247.91.0/24
151.247.94.0/24
151.247.142.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:ad:1a:0c:e3:7f:01:67:71:c2:41:5e:77:2c:5b:cc:ac:1e:
7e:df:cb:69:b4:2c:c8:f9:e1:c2:92:4b:99:3d:a3:c0:36:93:
36:90:37:a7:66:07:f4:10:10:8f:e8:ac:27:f3:09:9e:ac:c9:
32:84:70:af:21:45:10:76:ee:fd:ff:c0:2b:79:9b:be:70:a5:
46:3f:70:2d:09:93:06:8e:be:63:af:40:a1:e8:19:0c:3c:a4:
33:d3:e0:19:ac:cd:5e:90:dd:dd:4c:2e:b1:41:50:68:b4:88:
8f:29:c5:ff:7e:29:83:01:e0:36:d6:a2:a5:f2:2a:da:6a:2c:
c9:d3:ca:51:03:d0:7d:c7:1c:43:6d:1f:65:1a:81:a9:ec:09:
74:e9:2b:4b:71:40:85:63:ae:72:52:06:32:d0:61:2d:76:23:
1f:ba:0e:c5:80:40:19:b5:7e:2b:23:1d:8f:2f:25:71:42:09:
82:1f:b4:ca:59:f4:46:1b:66:04:f2:99:80:76:c9:d4:4a:08:
d1:11:82:c0:d1:dc:53:ee:49:3a:43:ad:42:78:38:c7:1d:fd:
39:e8:a3:1a:56:21:ee:b3:4a:57:db:cb:c1:d3:3c:ec:71:88:
18:95:76:33:ef:68:ee:20:78:d9:1e:29:8b:c5:cc:c9:9c:57:
c1:60:5a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 07:58:35 2026 by rpki-client