Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6N1RuHMpj-ZgCaHMw8aD12ZPjA4.roa
File: 6N1RuHMpj-ZgCaHMw8aD12ZPjA4.roa (raw, json)
Hash identifier: nfrY8ySTRmjg7W9ZkF7I8p8UJmKIE0/dN1BiwNB25Zw=
Subject key identifier: E8:DD:51:B8:73:29:8F:E6:60:09:A1:CC:C3:C6:83:D7:66:4F:8C:0E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F3746F8707F5600036B8F681F4BFC7424
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6N1RuHMpj-ZgCaHMw8aD12ZPjA4.roa
Signing time: Mon 06 Jul 2026 11:53:45 +0000
ROA not before: Mon 06 Jul 2026 11:53:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397630
IP address blocks: 151.240.2.0/24 maxlen: 24
151.241.33.0/24 maxlen: 24
151.241.43.0/24 maxlen: 24
151.241.48.0/24 maxlen: 24
151.242.26.0/24 maxlen: 24
151.242.114.0/24 maxlen: 24
151.243.26.0/24 maxlen: 24
151.244.42.0/24 maxlen: 24
151.245.69.0/24 maxlen: 24
151.246.224.0/24 maxlen: 24
151.246.230.0/24 maxlen: 24
151.246.234.0/24 maxlen: 24
151.247.38.0/24 maxlen: 24
151.247.39.0/24 maxlen: 24
151.247.42.0/24 maxlen: 24
151.247.43.0/24 maxlen: 24
151.247.54.0/24 maxlen: 24
151.247.93.0/24 maxlen: 24
151.247.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:46:f8:70:7f:56:00:03:6b:8f:68:1f:4b:fc:74:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 6 11:53:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8dd51b873298fe66009a1ccc3c683d7664f8c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1a:97:b7:c4:40:53:d8:28:f7:6f:96:41:af:
33:a2:62:11:0c:86:2c:be:2e:51:eb:73:1e:99:d8:
03:cd:85:df:97:f5:ef:bd:5b:67:c4:4e:d8:e3:1b:
82:b0:ec:4c:84:2d:91:0c:df:f0:9f:ec:a2:a6:2e:
95:dd:3f:04:96:d9:9a:be:87:6c:3a:e6:cd:2b:75:
b9:7b:a5:f4:2b:5d:a7:18:38:b9:44:13:59:3f:71:
c1:05:3d:74:4e:3e:86:06:d4:e4:fa:cd:fc:cb:d1:
3f:01:6d:92:64:8f:9a:89:b5:25:d9:33:9b:78:f6:
92:02:db:f3:ce:1f:95:30:f0:d2:d6:02:9c:92:61:
2c:47:b4:08:48:33:aa:f1:37:f7:f6:ed:6d:66:16:
a9:1b:b3:bf:f4:11:2c:53:21:65:04:0b:fd:a6:d2:
3e:d0:22:d8:95:7e:2b:d3:46:70:75:64:14:d2:2c:
40:3d:d6:f9:32:87:66:19:03:02:93:86:ee:de:17:
39:a9:18:8e:5e:16:d9:0d:ae:4c:4a:f2:13:c5:32:
a8:2d:7b:87:8f:a5:46:87:1a:bd:9a:9f:c1:8a:c4:
6d:f6:5b:16:87:c9:21:d5:58:bf:05:25:17:a0:73:
a1:ee:7f:7d:86:83:9b:87:53:86:20:54:0d:f0:45:
00:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DD:51:B8:73:29:8F:E6:60:09:A1:CC:C3:C6:83:D7:66:4F:8C:0E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6N1RuHMpj-ZgCaHMw8aD12ZPjA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.2.0/24
151.241.33.0/24
151.241.43.0/24
151.241.48.0/24
151.242.26.0/24
151.242.114.0/24
151.243.26.0/24
151.244.42.0/24
151.245.69.0/24
151.246.224.0/24
151.246.230.0/24
151.246.234.0/24
151.247.38.0/23
151.247.42.0/23
151.247.54.0/24
151.247.93.0/24
151.247.246.0/24
Signature Algorithm: sha256WithRSAEncryption
65:64:06:7d:81:b1:09:14:29:29:14:6b:6a:51:6a:96:e7:40:
02:76:54:8a:14:fb:2d:90:f2:ba:1e:48:a1:b4:2d:7e:0c:a9:
a1:2f:80:31:50:61:8e:69:bf:60:64:ed:6d:69:34:ee:7e:39:
d0:1f:d4:17:95:df:8e:d7:5f:2c:a7:39:91:27:3c:c8:52:a2:
22:0f:96:88:66:59:74:f9:5e:da:47:d6:b6:ce:c6:fb:3b:40:
83:d6:fd:1a:31:3f:0c:9b:f6:e9:42:74:31:1b:ec:62:4f:06:
23:fb:b9:b0:74:d3:8d:1c:c5:5f:84:9a:ca:6a:69:55:b1:bf:
e5:e9:6a:f1:35:cd:62:93:b1:e3:0c:c5:5b:15:38:dd:0a:5c:
c7:17:46:f9:7a:ac:3d:30:46:97:dc:3e:6b:0c:25:ab:1e:85:
9e:bb:b1:12:3d:30:4f:3c:00:fc:e7:10:21:a3:40:44:b0:9c:
68:d1:ef:aa:95:27:f6:a8:e2:a6:d7:b8:47:51:87:1f:c0:ec:
f8:87:d8:52:8d:97:df:6f:bb:98:f9:4e:0a:3f:70:3a:0e:0d:
99:ed:1e:c4:d9:09:7a:47:fc:2f:bd:6e:e2:2e:52:25:26:b0:
fb:58:b3:a2:54:6f:b5:c1:16:9a:e8:16:b1:bf:e3:29:2a:3e:
10:b7:62:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:26 2026 by rpki-client