Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2hd3o1kAaE1BEn6iKOd9UVojYTU.roa
File: 2hd3o1kAaE1BEn6iKOd9UVojYTU.roa (raw, json)
Hash identifier: rXqrsWZU/gAyJ7AM6UA0an3M7CXyV/rLPEK3tEcO6Ig=
Subject key identifier: DA:17:77:A3:59:00:68:4D:41:12:7E:A2:28:E7:7D:51:5A:23:61:35
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E504C9B583E1130F15DB2427435822E18
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2hd3o1kAaE1BEn6iKOd9UVojYTU.roa
Signing time: Fri 22 May 2026 15:27:38 +0000
ROA not before: Fri 22 May 2026 15:27:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401881
IP address blocks: 151.244.93.0/24 maxlen: 24
151.244.124.0/24 maxlen: 24
151.246.159.0/24 maxlen: 24
151.246.167.0/24 maxlen: 24
151.246.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:50:4c:9b:58:3e:11:30:f1:5d:b2:42:74:35:82:2e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 22 15:27:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da1777a35900684d41127ea228e77d515a236135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:2d:29:b1:99:09:d9:70:c9:67:91:41:da:
5e:1d:e7:cd:a0:dd:96:b0:85:f9:e5:bb:2c:dc:3a:
ca:62:3a:e4:61:36:88:85:50:0c:91:bb:b0:11:e6:
1b:f7:8b:5e:56:e2:b4:da:2f:29:86:bd:c0:3a:c9:
96:ae:37:be:2a:8a:2e:3b:a2:c5:81:bd:ba:d8:0e:
d9:ed:64:79:4f:e0:84:aa:eb:50:e1:e8:97:f3:ee:
f7:64:52:91:b2:a5:d4:61:d7:72:bb:c4:e6:9f:9f:
3d:0c:70:e1:95:ca:72:8a:7f:5f:54:c9:c4:57:cb:
bf:44:8e:ea:e3:0b:0c:07:3b:f9:dd:20:df:75:a9:
55:c1:55:e6:d2:f5:01:84:4e:f0:3f:4a:85:c8:0e:
d5:92:41:c4:ca:21:b6:a2:bc:36:08:a9:ca:b4:76:
4e:cf:c0:5c:ed:c0:88:e2:ae:c6:05:27:5b:39:3a:
0c:c8:fb:60:e4:51:f0:8d:63:1f:04:ef:bd:1c:4d:
35:31:08:c8:dd:e7:d6:67:64:8b:85:4a:2a:d2:ca:
86:a4:1d:85:aa:86:45:f1:56:29:71:57:41:96:1f:
69:29:a3:89:b9:91:ef:ec:20:4f:d5:ce:0b:86:eb:
d6:6d:f0:8d:71:a4:2a:c3:1b:a3:b4:7b:f8:07:e0:
84:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:17:77:A3:59:00:68:4D:41:12:7E:A2:28:E7:7D:51:5A:23:61:35
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2hd3o1kAaE1BEn6iKOd9UVojYTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.93.0/24
151.244.124.0/24
151.246.159.0/24
151.246.167.0/24
151.246.241.0/24
Signature Algorithm: sha256WithRSAEncryption
76:6b:3b:d5:ab:4b:5a:6f:8d:e7:b0:ca:71:da:ee:70:7d:43:
b8:8a:40:14:84:12:a7:19:c1:0c:ea:b9:99:68:d6:74:55:ec:
7b:72:46:4f:d4:b4:2d:42:f9:bc:49:b1:f3:ea:94:0f:3b:b2:
f6:fe:32:c5:4d:4c:ff:e6:47:f1:ae:53:4f:5d:0f:84:02:f4:
9f:fe:c5:c1:65:da:56:31:9b:06:91:cd:66:43:65:38:1d:08:
cd:50:04:f0:8d:b3:62:7c:59:e2:bc:1c:d4:a6:5a:23:53:9f:
a5:79:1a:f4:0a:96:a1:0e:3a:87:54:3f:83:0e:f9:c9:68:b1:
dd:8f:8e:ae:b7:00:6b:89:80:cb:0e:3f:71:ad:5d:27:65:3a:
83:7c:7e:10:f9:9c:40:d9:f1:bc:9d:4d:18:5c:86:2f:19:0b:
6b:8e:fc:b2:2f:ca:37:b9:53:27:21:ae:75:f4:75:dc:d7:a0:
a2:e6:c8:26:00:6f:dc:19:08:7d:45:e0:11:4e:60:de:28:1b:
42:c4:91:15:d0:b6:d9:50:5e:04:9a:78:da:4e:d5:69:8b:7a:
00:74:c2:95:c3:64:77:c9:93:37:cd:47:86:8b:dc:12:12:cb:
a1:8d:1f:f4:ac:a9:c4:51:48:af:68:f0:de:29:51:32:ac:22:
50:48:62:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:25:03 2026 by rpki-client