Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5x1RiMSSYvOA5RAhaZGsJ6fT4Zc.roa
File: 5x1RiMSSYvOA5RAhaZGsJ6fT4Zc.roa (raw, json)
Hash identifier: tK+fu2brt3KydGMb1RLCBtZE9jAJI9vbyrg0aLr2VlY=
Subject key identifier: E7:1D:51:88:C4:92:62:F3:80:E5:10:21:69:91:AC:27:A7:D3:E1:97
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F11F5A3E789B2156F2E9B426177789E5D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5x1RiMSSYvOA5RAhaZGsJ6fT4Zc.roa
Signing time: Mon 29 Jun 2026 05:58:58 +0000
ROA not before: Mon 29 Jun 2026 05:58:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215152
IP address blocks: 151.244.160.0/24 maxlen: 24
151.244.170.0/24 maxlen: 24
151.244.175.0/24 maxlen: 24
151.244.177.0/24 maxlen: 24
151.244.190.0/24 maxlen: 24
151.247.97.0/24 maxlen: 24
151.247.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f5:a3:e7:89:b2:15:6f:2e:9b:42:61:77:78:9e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 29 05:58:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e71d5188c49262f380e510216991ac27a7d3e197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:71:ab:d8:46:94:04:99:9c:70:41:2d:08:
d5:82:44:4a:b1:92:7d:16:67:45:02:4c:4b:31:a3:
9a:09:25:37:b1:6e:f6:2e:e2:11:b4:22:89:89:80:
c5:f7:5b:1f:03:b9:58:bc:e2:1e:23:79:85:27:a0:
7e:f8:90:f8:ae:f5:9c:91:0e:22:00:3a:3f:f1:3e:
b8:3a:8d:d9:84:78:dd:e3:36:cf:b5:5d:b2:ff:9c:
51:ff:8e:a9:18:2a:70:bb:e6:50:78:07:04:1c:91:
32:4a:ca:b9:7f:13:fe:fe:6c:63:e3:d7:03:99:46:
8e:a8:ad:0b:75:6d:ac:05:b6:4f:68:8c:b3:9f:39:
78:58:8d:8f:51:ef:78:53:69:45:63:c6:4f:3d:98:
98:42:dc:c2:0b:bb:61:c1:af:a7:7a:f2:74:03:0d:
f7:a5:c9:8a:9e:8c:e1:0a:21:43:d8:86:ea:42:3d:
d9:82:0a:bc:5b:72:43:57:8f:95:e8:30:f7:6f:8c:
b8:80:35:91:60:96:e4:e2:03:17:bd:43:ae:db:49:
f8:f7:56:d3:99:d9:e5:ff:37:11:e3:5c:30:54:22:
3f:fa:19:d0:4a:e6:3d:0f:ef:50:d5:58:c9:8b:22:
26:09:b7:9b:be:86:1e:84:7e:61:dd:31:b1:70:dc:
64:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1D:51:88:C4:92:62:F3:80:E5:10:21:69:91:AC:27:A7:D3:E1:97
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5x1RiMSSYvOA5RAhaZGsJ6fT4Zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.160.0/24
151.244.170.0/24
151.244.175.0/24
151.244.177.0/24
151.244.190.0/24
151.247.97.0/24
151.247.105.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ae:77:d1:74:89:3d:f7:d3:dc:21:b0:1c:73:31:e0:f4:fd:
f0:97:a4:13:3f:ef:38:62:37:5c:8a:d6:8f:62:e9:03:7e:0b:
e4:4a:f2:5c:d5:9a:58:f0:c7:fb:45:0d:90:12:32:4e:d6:c6:
db:d8:3f:59:59:06:c3:50:65:ce:57:8c:e9:1d:ce:14:3d:e2:
50:b7:0b:cb:9e:fa:90:96:6d:09:05:40:09:46:a5:76:f3:97:
97:f4:f1:83:8a:f2:ae:01:7a:25:5e:e2:cc:8b:fd:d8:e9:d6:
75:95:b3:90:98:09:dd:40:35:06:a0:3e:f0:9f:51:8a:49:d3:
01:19:f1:60:5a:91:54:69:2a:ec:53:26:7d:a1:dc:4f:8c:e0:
1b:f7:3e:01:23:b3:7d:09:cb:ac:6b:43:09:5c:47:0d:15:bd:
a6:ca:cc:e8:6a:3d:1f:6c:04:e7:ab:c7:93:dd:71:ed:98:66:
f6:f0:0f:a3:a3:33:a7:97:b3:2a:02:7e:1f:dd:5f:9b:e9:b3:
44:6b:a8:c8:73:99:b6:f4:f1:2f:e2:27:30:a4:da:fa:4e:cd:
29:ae:bb:a9:a9:96:26:fd:8f:bb:ec:0c:81:7e:92:94:1c:be:
93:ad:61:9a:f9:c6:a9:c4:41:44:54:b7:dd:57:fc:ab:e5:fd:
8f:d5:11:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:08:55 2026 by rpki-client