Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2PCyS_wHp6J-kcI6WoT8SdWsHXQ.roa
File: 2PCyS_wHp6J-kcI6WoT8SdWsHXQ.roa (raw, json)
Hash identifier: NkzRT16niN5Q3ES64cDWMbF8iDvR3l4VKQVBfSIrY2o=
Subject key identifier: D8:F0:B2:4B:FC:07:A7:A2:7E:91:C2:3A:5A:84:FC:49:D5:AC:1D:74
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0F610F3B2F9FF3CED3EE14254FDF21792
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2PCyS_wHp6J-kcI6WoT8SdWsHXQ.roa
Signing time: Thu 01 Oct 2026 06:05:01 +0000
ROA not before: Thu 01 Oct 2026 06:05:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205634
IP address blocks: 151.243.132.0/24 maxlen: 24
151.243.133.0/24 maxlen: 24
151.243.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:10:f3:b2:f9:ff:3c:ed:3e:e1:42:54:fd:f2:17:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 1 06:05:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d8f0b24bfc07a7a27e91c23a5a84fc49d5ac1d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:13:51:ce:ee:4b:55:f9:f3:3f:95:2d:c6:8e:
96:6e:f3:ed:59:b1:3d:2c:9d:3d:8a:3c:df:b8:85:
5f:1a:cc:1b:a3:cc:c6:96:9d:c1:c3:35:bc:3f:f5:
37:6d:7e:a6:c0:55:a3:8d:30:3c:c2:1c:95:ca:11:
06:50:47:9f:bb:60:56:a3:b7:25:26:2f:8d:8b:aa:
7c:34:2b:a5:a2:30:ab:de:41:d2:d8:f3:f0:0a:1b:
79:12:4f:b2:88:36:48:73:98:86:91:0e:62:11:21:
80:f3:e2:cd:b3:49:c6:21:7d:5a:33:3e:f8:cc:21:
ac:aa:2b:ce:91:ec:e1:a9:b4:b8:37:da:da:55:40:
8a:de:53:8a:e8:54:bb:0f:ff:7e:6d:88:d7:19:6a:
fd:8a:23:a1:a0:a6:90:51:bb:fa:a2:bc:8e:d1:b7:
7f:e1:07:a3:54:cc:8c:f2:a7:ed:6a:2b:ff:9d:ff:
7c:87:ef:86:57:4f:f8:32:83:c3:4d:ed:b0:5a:26:
d3:2d:c8:71:da:47:30:2f:fe:83:4b:9f:c6:0c:23:
9e:a6:45:9c:fb:40:d1:e2:e1:20:b7:5c:92:80:b5:
56:47:8c:e3:ce:f9:e0:56:cd:98:f4:85:87:39:f3:
e4:b8:b8:85:9e:99:80:ea:61:f0:61:0b:d0:a1:41:
80:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F0:B2:4B:FC:07:A7:A2:7E:91:C2:3A:5A:84:FC:49:D5:AC:1D:74
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2PCyS_wHp6J-kcI6WoT8SdWsHXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.132.0/23
151.243.135.0/24
Signature Algorithm: sha256WithRSAEncryption
40:d1:a7:80:00:11:bb:15:78:00:fe:d8:63:4c:5c:00:3c:50:
cf:dd:d7:44:e5:aa:0d:2b:56:71:7d:bd:07:d2:29:dd:45:d7:
5e:be:c4:61:8c:38:67:f5:12:12:56:e8:73:64:22:87:81:64:
33:26:cd:e2:fb:ca:2f:3b:c3:3e:2a:c5:cb:de:2c:21:d6:ba:
3a:0f:a8:94:79:de:5b:c0:74:ef:00:f3:c3:c8:7b:da:7f:2d:
26:27:64:dc:71:70:9f:31:eb:48:d9:f3:8c:91:a1:ca:1e:31:
78:ee:84:cf:fa:75:57:ee:ff:e6:20:b5:e9:77:d3:be:e4:c3:
fb:f9:79:fb:ab:e2:af:91:34:ca:83:a2:0c:e6:78:76:08:f8:
74:04:fc:57:ec:3c:64:ad:fe:f1:c9:ee:7c:c4:77:2c:69:1a:
63:e5:e4:d3:5a:84:e7:93:1d:62:98:22:7f:36:f5:3d:3f:5e:
f7:82:e2:01:ba:18:73:f7:0d:d9:61:75:42:29:d4:56:48:2b:
6d:9f:c5:8d:d5:3b:e4:d6:42:fd:4b:4c:fb:4c:5f:5b:a4:cd:
28:44:bf:11:7f:5a:e1:11:b3:27:4a:30:0e:e1:62:1e:3e:8d:
c0:f9:34:21:3d:54:10:46:4c:34:0d:3b:64:2c:00:81:d0:11:
1e:af:93:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 03:59:38 2026 by rpki-client