Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2QRWr9smB5kxDsidYcsXPhfgpeM.roa
File: 2QRWr9smB5kxDsidYcsXPhfgpeM.roa (raw, json)
Hash identifier: 4E19I4och2dkHDJnhZDhpEFfY7x5hgWFAWdZMsKID7M=
Subject key identifier: D9:04:56:AF:DB:26:07:99:31:0E:C8:9D:61:CB:17:3E:17:E0:A5:E3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CB32563FD02ECD449A626EDD2178BBDD4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2QRWr9smB5kxDsidYcsXPhfgpeM.roa
Signing time: Tue 03 Mar 2026 10:01:37 +0000
ROA not before: Tue 03 Mar 2026 10:01:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9457
IP address blocks: 151.246.129.0/24 maxlen: 24
151.246.157.0/24 maxlen: 24
151.247.79.0/24 maxlen: 24
151.247.95.0/24 maxlen: 24
151.247.100.0/24 maxlen: 24
151.247.111.0/24 maxlen: 24
151.247.180.0/24 maxlen: 24
151.247.237.0/24 maxlen: 24
151.247.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 07:18:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:25:63:fd:02:ec:d4:49:a6:26:ed:d2:17:8b:bd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 3 10:01:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d90456afdb260799310ec89d61cb173e17e0a5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f0:14:16:0c:6a:42:1c:55:6e:e8:7b:ac:af:
ec:50:16:e4:77:8a:44:a9:48:ea:ae:d3:9d:3c:4a:
24:e2:a8:7d:58:dd:ba:f7:cf:8b:98:83:b9:af:ba:
6d:28:6f:91:f9:8e:fe:77:dc:1e:32:13:25:c3:a8:
2f:3c:b9:1e:54:c0:f5:02:a9:91:dc:3d:e1:51:31:
9d:b2:6e:e5:78:14:52:17:8e:82:0e:1f:bc:74:47:
c4:ed:2b:1d:68:e5:16:7f:0d:a2:41:90:af:d2:09:
c2:a7:65:88:ad:d4:dc:1a:c1:cf:6e:d3:52:8c:b7:
2a:09:0c:ca:d7:57:01:f0:1d:55:21:3c:47:89:26:
26:01:2f:45:d9:3e:0f:d5:7c:22:df:53:10:9a:4a:
9f:78:f9:97:36:11:ab:05:f6:76:fc:ad:de:87:b1:
24:df:b5:d7:f9:bc:d5:9b:62:4a:fa:b2:0f:96:c7:
91:14:1e:1f:93:49:d8:10:b9:7a:3c:ff:64:60:9a:
a7:b3:66:13:bf:bd:eb:94:64:ac:db:8b:44:24:ec:
80:ae:4d:c7:3b:2a:0d:6a:29:56:c4:4a:ee:62:e2:
40:f3:65:b5:da:6d:47:be:a6:ab:a0:cd:11:b6:69:
dc:7c:71:d2:01:cf:41:4c:38:0b:f9:a6:7e:fe:bb:
be:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:04:56:AF:DB:26:07:99:31:0E:C8:9D:61:CB:17:3E:17:E0:A5:E3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2QRWr9smB5kxDsidYcsXPhfgpeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.129.0/24
151.246.157.0/24
151.247.79.0/24
151.247.95.0/24
151.247.100.0/24
151.247.111.0/24
151.247.180.0/24
151.247.237.0/24
151.247.251.0/24
Signature Algorithm: sha256WithRSAEncryption
12:99:9a:31:8f:fc:0f:3f:34:3d:b8:2f:58:4c:95:c3:02:dd:
49:a2:0a:aa:23:e8:e6:b8:d8:19:4f:a7:95:06:2d:e1:58:90:
da:5f:cd:9e:54:b9:d4:37:19:f8:ea:6c:36:db:2f:a6:dc:b2:
33:47:d6:36:98:1d:bb:34:e1:26:fe:c7:99:9c:3a:07:cb:ad:
31:4e:15:39:de:5c:b9:a5:ec:b6:fa:22:5a:08:10:0b:00:52:
8a:d7:0c:61:32:59:4b:e4:63:ea:20:ec:06:f6:44:e7:af:bd:
82:e2:3e:6a:88:74:ef:46:ec:b1:14:f8:9e:57:b4:45:35:b3:
d4:e7:1b:5b:bb:d8:58:36:9f:35:87:54:e2:3f:b4:ba:37:d1:
fe:df:17:98:94:ab:ab:de:78:12:a3:cd:67:7f:94:87:5a:15:
68:8a:ce:e3:4e:88:ea:01:85:71:5d:9c:10:93:95:46:92:d8:
90:14:0f:ac:61:b9:1a:2e:5a:9f:c4:52:aa:66:be:49:c2:36:
84:a9:d8:fe:0b:9d:33:b2:ab:5c:c8:02:14:17:25:3c:26:c6:
de:cc:6c:68:31:36:36:7e:c6:e0:ab:23:40:e9:e6:23:97:2b:
56:36:a1:ec:43:16:01:9a:51:f9:61:48:cf:76:32:7c:ad:be:
26:79:00:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:01:37 2026 by rpki-client