Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1hmmYTNuT3pAcKDlYP6nUOXRmIo.roa
File: 1hmmYTNuT3pAcKDlYP6nUOXRmIo.roa (raw, json)
Hash identifier: d1tDED/adyOE+DnNa4M3vAoPaEYmab7YHqSXLQrxS+k=
Subject key identifier: D6:19:A6:61:33:6E:4F:7A:40:70:A0:E5:60:FE:A7:50:E5:D1:98:8A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A1162468C2DE72BDB350EBD07646F76A60
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1hmmYTNuT3pAcKDlYP6nUOXRmIo.roa
Signing time: Wed 07 Oct 2026 11:34:07 +0000
ROA not before: Wed 07 Oct 2026 11:34:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 151.243.51.0/24 maxlen: 24
151.245.40.0/24 maxlen: 24
151.245.68.0/24 maxlen: 24
151.245.91.0/24 maxlen: 24
151.246.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:24:68:c2:de:72:bd:b3:50:eb:d0:76:46:f7:6a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 7 11:34:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d619a661336e4f7a4070a0e560fea750e5d1988a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3d:8f:0e:74:97:20:c0:8c:2f:8f:d4:03:87:
2a:63:01:39:14:10:12:3a:60:be:3e:6e:15:c6:0b:
6b:27:30:a8:fd:93:47:6b:b2:68:af:86:78:7b:48:
82:43:6c:03:57:2b:3f:6b:8b:7a:7e:f0:17:e8:a6:
0a:1e:b6:2d:87:e5:d6:27:b5:3d:4e:ce:72:0a:cd:
b4:2f:8d:b8:f0:df:95:38:2c:f7:b9:77:da:8f:8e:
62:6b:5a:79:49:71:1a:59:41:25:f0:87:ac:ab:0b:
fc:a5:c9:17:19:df:fa:6e:34:c8:05:31:33:13:4e:
8c:3d:70:52:9d:b3:7f:e4:e4:3b:78:91:68:24:60:
7f:e7:60:eb:6f:1e:52:10:11:b9:78:62:6f:31:e6:
a9:7d:30:2f:80:02:0c:61:3b:55:33:ac:bd:ae:56:
cb:a4:d5:ba:35:a7:5e:e3:e6:f3:3b:26:c6:db:49:
e2:6b:58:55:ab:52:c0:6b:55:ce:05:b2:a0:9f:00:
5a:3d:2a:a6:fb:74:2e:e0:e0:9e:d3:1a:f9:30:a8:
ca:14:7c:4d:62:39:3f:1e:3f:c7:72:7a:46:e7:4d:
ca:48:90:e1:1e:1b:90:e9:7a:5d:4a:28:c0:34:75:
01:17:6a:6e:93:5b:a3:c0:de:2c:c9:40:0f:01:82:
5c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:19:A6:61:33:6E:4F:7A:40:70:A0:E5:60:FE:A7:50:E5:D1:98:8A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1hmmYTNuT3pAcKDlYP6nUOXRmIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.51.0/24
151.245.40.0/24
151.245.68.0/24
151.245.91.0/24
151.246.180.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:37:6f:5f:69:a0:a7:1e:ad:ee:bb:f7:9a:17:84:7e:f4:9a:
56:51:b9:0a:5e:43:ae:41:4f:01:0b:ef:4d:96:54:9f:68:6d:
45:17:a9:73:ac:f8:03:19:f2:3d:4b:eb:ad:e5:42:bc:e2:c5:
e5:4f:e6:42:f7:4a:4b:47:e4:e9:73:b5:d5:10:bb:26:69:79:
34:25:91:a9:80:b8:f7:62:6c:96:26:70:69:10:2f:48:b6:16:
9f:83:a4:af:c7:83:26:6d:8b:ed:48:56:72:d8:52:fa:3b:7e:
bb:44:78:ce:d5:4e:a5:74:65:75:1b:63:53:ec:56:96:9e:26:
2e:f0:58:51:61:ff:cb:15:28:98:a0:b0:a5:5c:d2:22:ef:f5:
ab:52:ab:98:e7:c2:ab:7f:b1:ac:d4:46:6d:94:52:77:22:1f:
1d:8e:ef:2e:25:b1:11:b1:88:58:b3:ac:c1:2f:f9:92:ce:19:
76:7f:aa:ce:4f:25:cd:d4:89:a6:64:95:1e:39:eb:38:1b:08:
78:c2:cc:5e:dc:86:9c:1d:ae:c6:f6:25:50:2c:e4:e2:ce:b3:
8c:e0:75:33:98:e4:a2:db:a6:f9:ae:31:df:71:b6:57:a0:18:
d9:c0:e1:97:ea:fa:36:26:44:e6:ca:10:6e:a6:80:34:65:0f:
a1:a7:de:dd
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaEWJGjC3nK9s1Dr0HZG92pgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYxMDA3MTEzNDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjE5YTY2MTMzNmU0ZjdhNDA3MGEwZTU2MGZlYTc1MGU1ZDE5ODhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3z2PDnSXIMCML4/UA4cqYwE5FBAS
OmC+Pm4VxgtrJzCo/ZNHa7Jor4Z4e0iCQ2wDVys/a4t6fvAX6KYKHrYth+XWJ7U9
Ts5yCs20L4248N+VOCz3uXfaj45ia1p5SXEaWUEl8Iesqwv8pckXGd/6bjTIBTEz
E06MPXBSnbN/5OQ7eJFoJGB/52Drbx5SEBG5eGJvMeapfTAvgAIMYTtVM6y9rlbL
pNW6Nade4+bzOybG20nia1hVq1LAa1XOBbKgnwBaPSqm+3Qu4OCe0xr5MKjKFHxN
Yjk/Hj/HcnpG503KSJDhHhuQ6XpdSijANHUBF2puk1ujwN4syUAPAYJcrQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFNYZpmEzbk96QHCg5WD+p1Dl0ZiKMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvMWhtbVlUTnVUM3BBY0tEbFlQNm5VT1hSbUlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAl/MzAwQA
l/UoAwQAl/VEAwQAl/VbAwQAl/a0MA0GCSqGSIb3DQEBCwUAA4IBAQAON29faaCn
Hq3uu/eaF4R+9JpWUbkKXkOuQU8BC+9NllSfaG1FF6lzrPgDGfI9S+ut5UK84sXl
T+ZC90pLR+Tpc7XVELsmaXk0JZGpgLj3YmyWJnBpEC9Ithafg6Svx4MmbYvtSFZy
2FL6O367RHjO1U6ldGV1G2NT7FaWniYu8FhRYf/LFSiYoLClXNIi7/WrUquY58Kr
f7Gs1EZtlFJ3Ih8dju8uJbERsYhYs6zBL/mSzhl2f6rOTyXN1ImmZJUeOes4Gwh4
wsxe3IacHa7G9iVQLOTizrOM4HUzmOSi26b5rjHfcbZXoBjZwOGX6vo2JkTmyhBu
poA0ZQ+hp97d
-----END CERTIFICATE-----
Generated at Sun Oct 18 07:25:46 2026 by rpki-client