Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8JWolwlrs5NmqcDNRVVcFav1bVA.roa
File: 8JWolwlrs5NmqcDNRVVcFav1bVA.roa (raw, json)
Hash identifier: HtBhhCPCcRZJLCGuEXbi9rqYEo/sprocaeRmLg2XmoU=
Subject key identifier: F0:95:A8:97:09:6B:B3:93:66:A9:C0:CD:45:55:5C:15:AB:F5:6D:50
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FBBC01CB4A072EEF4383458EAC9DA87EF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8JWolwlrs5NmqcDNRVVcFav1bVA.roa
Signing time: Sat 01 Aug 2026 05:15:57 +0000
ROA not before: Sat 01 Aug 2026 05:15:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401783
IP address blocks: 151.245.189.0/24 maxlen: 24
151.245.199.0/24 maxlen: 24
151.245.220.0/24 maxlen: 24
151.245.224.0/24 maxlen: 24
151.245.225.0/24 maxlen: 24
151.245.228.0/24 maxlen: 24
151.245.247.0/24 maxlen: 24
151.247.116.0/24 maxlen: 24
151.247.117.0/24 maxlen: 24
151.247.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bb:c0:1c:b4:a0:72:ee:f4:38:34:58:ea:c9:da:87:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 1 05:15:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f095a897096bb39366a9c0cd45555c15abf56d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:91:ab:ff:bd:3b:97:43:85:2f:5e:22:00:
bf:6e:5b:bb:b8:46:64:37:de:79:75:73:0f:c3:b9:
e8:ec:36:2a:17:12:b3:fb:df:f8:19:71:ed:49:ce:
43:35:0f:66:e2:8a:5b:9b:b9:7f:a0:ad:74:48:11:
59:dd:cf:df:a8:70:00:d8:f2:3c:0d:b4:af:b9:7c:
6d:4f:28:9d:4f:c0:55:c2:51:63:2e:65:d7:88:9a:
50:96:87:e4:91:18:92:79:84:4e:ff:0a:5c:71:39:
31:d2:c2:15:89:f9:f2:3a:cc:6b:51:22:d0:ae:81:
e4:a2:d4:f4:36:e0:77:be:f7:7d:0c:b2:7c:d8:24:
13:41:2e:aa:5f:5b:70:d6:a0:1a:dd:5d:1d:51:06:
98:7f:c8:ef:73:9e:ec:50:b0:85:09:f1:32:1c:66:
9c:a9:66:5b:55:7d:b0:2d:d2:51:03:fd:7c:f3:a8:
a6:02:46:30:eb:1d:ee:eb:06:a9:3e:08:e0:78:00:
35:8f:c2:36:d0:96:89:34:1d:9c:1a:9a:9b:9a:cb:
0d:c0:9e:1d:09:b2:e2:07:75:92:ed:7a:a8:fb:ac:
93:5b:3b:cf:e2:27:dc:29:9f:4a:41:69:80:42:d6:
9c:46:d4:9f:93:25:c5:d5:8e:60:01:18:cb:9c:b0:
ca:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:95:A8:97:09:6B:B3:93:66:A9:C0:CD:45:55:5C:15:AB:F5:6D:50
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8JWolwlrs5NmqcDNRVVcFav1bVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.189.0/24
151.245.199.0/24
151.245.220.0/24
151.245.224.0/23
151.245.228.0/24
151.245.247.0/24
151.247.116.0-151.247.118.255
Signature Algorithm: sha256WithRSAEncryption
43:be:81:c2:a5:80:ad:d1:8a:25:f1:2f:c1:73:99:11:3c:9d:
41:c4:f5:15:7f:35:e6:65:fe:f1:3d:d0:7e:b8:15:6d:4d:6f:
d4:43:dd:e5:13:b2:15:4b:f6:9f:c4:bd:df:22:7c:e0:61:03:
db:31:c1:ac:4e:a6:c1:31:69:ca:f5:6d:76:c5:78:2b:3f:8a:
a0:40:17:73:f8:e6:4e:93:99:c5:b0:51:02:a8:8b:0b:1a:58:
f3:5f:3b:5a:b5:62:8e:4a:f9:8a:2a:4e:b3:23:5a:8d:58:c9:
40:12:14:c8:74:5e:76:2d:ee:89:7f:e4:1d:ff:b7:97:d0:bf:
bb:c3:99:c7:75:94:9d:00:e6:b1:73:58:ea:fc:96:ce:32:13:
a8:37:9b:c8:53:35:e3:c7:7d:82:00:80:56:8a:e7:be:7d:b0:
10:e9:2c:67:c6:d6:1b:8c:97:a4:cd:66:f7:10:69:b5:1b:a2:
78:3c:2b:2d:55:f4:ac:18:d0:9b:c1:70:31:63:b9:c2:47:6f:
9b:6b:d6:dd:f7:ac:5f:9b:d6:f0:fb:0a:3f:66:31:bf:fd:06:
b8:29:b5:4e:b1:e9:e5:a9:f4:8f:bb:34:3a:82:44:ec:6d:28:
33:b4:e9:d0:46:c5:37:9a:97:42:41:bc:8e:44:11:f6:0c:b1:
a6:d4:9a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:23:28 2026 by rpki-client