Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7-57jZZ9_PygWf1hIS6oC72geL8.roa
File: 7-57jZZ9_PygWf1hIS6oC72geL8.roa (raw, json)
Hash identifier: 3AAwqRILE8wBr8dONd5O5hjPUm/Rkg4l7KOI1HNKKdg=
Subject key identifier: EF:EE:7B:8D:96:7D:FC:FC:A0:59:FD:61:21:2E:A8:0B:BD:A0:78:BF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A033EEE4CA138C6307766FAA671CAE6411
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7-57jZZ9_PygWf1hIS6oC72geL8.roa
Signing time: Mon 24 Aug 2026 13:21:29 +0000
ROA not before: Mon 24 Aug 2026 13:21:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36530
IP address blocks: 151.241.128.0/22 maxlen: 24
151.243.179.0/24 maxlen: 24
151.245.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:ee:e4:ca:13:8c:63:07:76:6f:aa:67:1c:ae:64:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 24 13:21:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efee7b8d967dfcfca059fd61212ea80bbda078bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d2:e8:b0:94:65:0f:29:93:6d:78:4a:ec:dc:
bf:8e:be:c9:e0:93:e3:61:30:55:c4:c9:78:84:a7:
5b:ef:0f:3b:d0:d4:05:d3:75:69:6a:2b:08:5e:e0:
54:9c:10:06:30:0d:ef:a8:22:68:a6:f2:ac:9d:ef:
5b:33:d3:27:52:6c:eb:1d:f5:a8:8e:0a:62:8c:ba:
2c:4d:94:2f:23:29:25:86:46:5c:18:58:a2:21:b5:
38:c8:21:26:bc:3d:b5:a6:cb:d8:c2:83:f6:3f:ce:
33:38:8b:e1:c2:99:33:c5:6d:ed:62:9b:cf:ce:3e:
7a:e2:fb:8a:54:6d:26:1d:86:c2:2f:74:57:5b:50:
26:db:c9:1c:b7:aa:02:12:eb:75:83:d6:c7:d9:ed:
eb:e8:98:99:12:de:f0:d0:b8:27:91:50:64:6c:e1:
ab:f0:ef:63:97:71:e1:1c:53:60:f6:2e:48:32:fb:
20:38:67:54:9d:94:96:a6:de:1f:e2:90:95:b1:18:
bd:a0:19:a5:99:81:2c:65:d4:81:7e:ef:ab:01:6a:
c4:d8:1a:6c:6a:23:2c:34:f9:2b:92:90:e1:17:45:
fc:67:82:18:10:d6:36:ab:ce:66:31:3e:1d:60:b6:
be:a2:5a:78:64:d7:f0:52:00:77:b8:ae:24:5a:a5:
00:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EE:7B:8D:96:7D:FC:FC:A0:59:FD:61:21:2E:A8:0B:BD:A0:78:BF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7-57jZZ9_PygWf1hIS6oC72geL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
151.243.179.0/24
151.245.90.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:bc:16:67:24:41:45:0f:a0:7d:38:57:a4:cc:72:0b:6d:62:
50:6d:e0:73:6a:88:6b:63:f1:76:c5:5c:10:9a:b4:98:3c:ea:
21:ed:7f:ff:ed:1f:b6:08:87:31:41:be:89:af:65:f1:9a:20:
c4:9e:60:52:06:bb:b9:d8:8d:cc:c5:c6:c5:57:8c:e6:e4:3a:
bc:e6:e9:67:c0:85:2f:47:69:dd:3a:aa:b4:45:42:17:db:7f:
7b:2d:77:b1:44:e7:ff:9f:44:3c:dd:2c:5d:61:7f:97:ff:d3:
20:94:a6:2f:94:5d:21:f4:7f:19:2f:7f:f4:6d:5c:2b:57:80:
de:4e:df:15:eb:65:ec:6e:e5:57:9a:f1:67:c3:a1:92:d3:9a:
5c:b0:6b:4f:14:2f:79:61:35:72:da:0c:c2:6e:77:d2:c0:10:
a1:b0:c0:45:f6:8e:22:6c:65:18:df:e0:5a:f7:ac:18:ee:e6:
e9:00:f3:fb:0a:10:9e:31:70:67:fd:d1:03:6a:fa:aa:39:50:
bf:2b:2b:2c:7e:00:e2:0a:d2:f3:ac:74:d2:70:26:33:62:ca:
ea:60:a2:22:50:5f:74:79:9c:f5:d2:cc:a0:45:95:25:00:64:
50:48:4c:83:49:c0:6e:16:52:ed:da:18:f5:b7:10:0b:cc:6a:
9e:7b:c9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:58:10 2026 by rpki-client