Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3n40iK_91rQq7ouFBs1ypPGOdnw.roa
File: 3n40iK_91rQq7ouFBs1ypPGOdnw.roa (raw, json)
Hash identifier: wL19tqL/iyB4ZU6RDj6fjn+sSTfFVqKw6q1mQLUDkg4=
Subject key identifier: DE:7E:34:88:AF:FD:D6:B4:2A:EE:8B:85:06:CD:72:A4:F1:8E:76:7C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F1DEDEB3664F8C821E421CDB6EA87A3B4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3n40iK_91rQq7ouFBs1ypPGOdnw.roa
Signing time: Wed 01 Jul 2026 13:45:59 +0000
ROA not before: Wed 01 Jul 2026 13:45:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 151.244.194.0/24 maxlen: 24
151.244.195.0/24 maxlen: 24
151.245.189.0/24 maxlen: 24
151.245.199.0/24 maxlen: 24
151.245.220.0/24 maxlen: 24
151.245.224.0/24 maxlen: 24
151.245.225.0/24 maxlen: 24
151.245.228.0/24 maxlen: 24
151.245.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:ed:eb:36:64:f8:c8:21:e4:21:cd:b6:ea:87:a3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 1 13:45:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de7e3488affdd6b42aee8b8506cd72a4f18e767c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d8:2f:8f:76:0c:b5:23:ad:5c:f2:59:c8:76:
74:64:4e:d9:26:99:29:6d:07:ab:23:94:fd:4d:46:
2f:fe:4a:37:53:a2:c1:94:74:95:f8:0f:61:fa:98:
6a:65:35:80:9e:38:6c:df:f9:fd:7d:79:fa:b2:22:
eb:a9:63:fe:d1:a4:f9:2b:0b:3c:0c:ed:72:a7:79:
43:8b:27:f8:d5:43:77:de:b1:63:83:b4:43:52:1a:
7c:23:b3:32:e7:ad:d6:17:f9:4e:56:e7:59:dd:61:
35:f5:d9:0d:fe:d3:90:b6:52:54:40:fb:ce:a8:3c:
99:da:66:bd:eb:69:5c:5e:25:2f:dd:5a:b0:0a:d3:
7f:12:37:31:74:8f:dd:28:d6:73:d2:46:23:55:73:
c4:98:1d:43:82:38:b2:00:b4:65:fd:a2:fc:c1:e5:
37:91:79:a5:0a:63:66:a0:27:ee:84:8b:10:81:04:
29:b2:74:53:20:5d:28:e7:0e:9f:7a:f0:36:1d:0d:
48:f6:85:0d:33:d1:49:2e:13:ba:23:28:68:38:32:
fb:8e:1a:b5:70:11:fb:9e:70:34:2e:7a:92:4f:3e:
de:db:25:81:9a:60:32:64:80:66:20:06:a5:42:dd:
51:f2:e9:8a:8c:5a:28:12:92:7d:9f:32:4f:b1:82:
ca:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7E:34:88:AF:FD:D6:B4:2A:EE:8B:85:06:CD:72:A4:F1:8E:76:7C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3n40iK_91rQq7ouFBs1ypPGOdnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.194.0/23
151.245.189.0/24
151.245.199.0/24
151.245.220.0/24
151.245.224.0/23
151.245.228.0/24
151.245.247.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b6:bb:c8:38:d0:4f:97:de:dd:cd:c8:c6:97:1f:cf:6f:3c:
d3:3a:91:c7:77:56:b7:5d:03:06:80:1c:8f:e5:80:d1:d3:26:
32:df:86:ea:c5:c8:c9:66:fe:a8:a9:20:5c:0f:ee:6e:49:32:
73:f1:ec:fc:8a:4d:de:a2:a8:13:57:58:f1:5a:1a:ad:b5:0d:
c2:17:29:61:92:45:13:21:bf:dd:77:5d:2e:95:d2:9b:a3:a9:
47:d9:5d:48:b5:4a:df:45:03:06:2f:47:4f:ce:ac:72:0b:bb:
9a:f2:c2:9a:75:2d:37:f3:66:4c:78:15:55:28:c6:73:16:ea:
f7:e5:f1:b2:ec:37:1f:bc:61:3e:d0:1e:f0:dc:c8:6e:9f:42:
45:ee:b5:36:9f:52:cd:1e:d9:e2:54:1c:f7:3a:df:5f:28:4c:
7c:a7:4a:05:45:43:e4:a3:43:b6:da:fc:9d:e8:e1:46:b7:e2:
f5:3d:66:5a:35:c8:e4:d2:1c:8f:b3:07:c6:62:21:18:b1:e1:
6d:6c:de:60:d5:57:49:f9:56:aa:74:3b:c7:3b:83:1e:f5:82:
8b:b4:b1:5f:ac:49:c7:c6:d0:84:c9:ca:1a:d9:00:2e:f3:57:
e4:f7:e1:4a:ec:5c:98:1f:28:3a:02:af:d1:e1:30:73:ef:4a:
a0:49:eb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 22:10:51 2026 by rpki-client