Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/947Bwxvr7bs-0qUnue8XPp4Kc40.roa
File: 947Bwxvr7bs-0qUnue8XPp4Kc40.roa (raw, json)
Hash identifier: Rl4Rtx6qFVcyqkFiUhcsjMRCdMv2vv07M5HPrsbprmA=
Subject key identifier: F7:8E:C1:C3:1B:EB:ED:BB:3E:D2:A5:27:B9:EF:17:3E:9E:0A:73:8D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019ECA703BA64ACD4133B446E70CA6182E31
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/947Bwxvr7bs-0qUnue8XPp4Kc40.roa
Signing time: Mon 15 Jun 2026 08:40:13 +0000
ROA not before: Mon 15 Jun 2026 08:40:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 151.240.118.0/24 maxlen: 24
151.243.87.0/24 maxlen: 24
151.243.174.0/24 maxlen: 24
151.247.50.0/23 maxlen: 24
151.247.52.0/23 maxlen: 24
151.247.184.0/23 maxlen: 24
151.247.186.0/23 maxlen: 24
151.247.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:70:3b:a6:4a:cd:41:33:b4:46:e7:0c:a6:18:2e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 15 08:40:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f78ec1c31bebedbb3ed2a527b9ef173e9e0a738d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:95:57:06:a9:0b:e5:a9:28:6c:0d:83:a1:75:
fb:5c:1d:53:a7:9a:be:bc:15:1a:0f:4e:47:62:17:
23:58:7b:e9:d8:1d:60:d8:14:ee:ed:f0:d7:44:c8:
09:e9:3d:52:6c:b3:8c:7a:3d:f9:00:11:18:f3:1b:
e8:7a:d3:56:3e:37:69:e4:d5:79:ac:c3:a0:5d:85:
ba:cf:dd:7c:9f:cf:0f:f7:7b:a0:1f:af:33:ac:6b:
b8:b5:6e:58:96:ec:3b:7b:7e:27:51:dc:47:20:c4:
97:17:d6:39:38:5c:ed:5d:84:86:44:37:f0:99:19:
a1:ae:f1:f5:83:6a:78:0a:1d:11:f2:68:1f:a4:1b:
47:2d:fa:27:e8:ce:d8:63:d2:1c:1e:89:2f:4f:54:
a5:1d:d2:25:40:9c:c9:bd:4b:a4:90:6b:71:18:92:
96:bf:51:2a:20:98:51:ee:ef:fc:e0:fd:1e:4c:9c:
9b:a6:92:3c:19:1e:a4:51:e3:27:a8:52:26:60:7f:
93:6b:db:87:66:ad:73:76:fd:f0:ee:ec:c5:ca:75:
9c:18:10:7f:c2:84:4f:e4:c8:98:55:63:20:2d:56:
f5:4f:69:37:dd:78:85:d8:49:6a:dd:e5:61:33:eb:
e3:49:df:01:e4:4e:e6:d3:af:5c:c6:72:20:41:eb:
3a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8E:C1:C3:1B:EB:ED:BB:3E:D2:A5:27:B9:EF:17:3E:9E:0A:73:8D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/947Bwxvr7bs-0qUnue8XPp4Kc40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.118.0/24
151.243.87.0/24
151.243.174.0/24
151.247.50.0-151.247.53.255
151.247.184.0/22
151.247.240.0/24
Signature Algorithm: sha256WithRSAEncryption
62:d3:74:fe:82:27:77:7c:3a:14:20:19:64:81:16:fa:6f:b3:
42:74:26:c5:b2:b3:8d:c4:cb:41:17:28:0e:09:4d:a2:a7:d2:
ec:14:0a:c7:79:1b:c3:9f:33:be:2a:33:06:8f:ca:e7:f2:81:
68:2b:e8:1b:93:a0:30:73:53:23:61:f1:3b:31:3b:0a:d4:62:
42:f1:82:56:e5:f2:b8:5f:e6:db:29:f9:e4:dd:07:6c:2a:79:
80:bd:24:39:c1:5e:cb:2c:53:0d:f3:27:5d:93:1e:27:32:4d:
86:44:b7:a1:e8:e3:3f:d1:33:87:f1:72:6f:e4:da:97:e5:fe:
5e:c5:16:cb:f0:17:6c:ca:5c:da:e2:4f:2b:13:72:5d:fd:b4:
ef:42:d3:89:2e:a4:56:1d:90:a6:1c:56:d9:15:34:a1:5f:8a:
f0:1f:41:b2:79:4b:aa:fa:07:a9:b0:49:3f:bc:3e:a4:e0:6a:
3f:94:e6:ea:f7:ce:36:09:0f:f8:e7:1b:07:87:2f:e5:be:83:
19:7e:73:0a:05:ca:30:62:4f:61:bd:c0:24:91:d4:68:5d:ae:
67:aa:fb:c6:36:fa:5d:1b:52:23:ee:4b:1e:50:fe:1c:b6:97:
8e:b9:5c:ae:67:7a:ab:6a:62:1d:fa:ce:94:c9:52:32:0b:05:
f0:1b:03:fb
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZ7KcDumSs1BM7RG5wymGC4xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNjE1MDg0MDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzhlYzFjMzFiZWJlZGJiM2VkMmE1MjdiOWVmMTczZTllMGE3MzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZVXBqkL5akobA2DoXX7XB1Tp5q+
vBUaD05HYhcjWHvp2B1g2BTu7fDXRMgJ6T1SbLOMej35ABEY8xvoetNWPjdp5NV5
rMOgXYW6z918n88P93ugH68zrGu4tW5Yluw7e34nUdxHIMSXF9Y5OFztXYSGRDfw
mRmhrvH1g2p4Ch0R8mgfpBtHLfon6M7YY9IcHokvT1SlHdIlQJzJvUukkGtxGJKW
v1EqIJhR7u/84P0eTJybppI8GR6kUeMnqFImYH+Ta9uHZq1zdv3w7uzFynWcGBB/
woRP5MiYVWMgLVb1T2k33XiF2Elq3eVhM+vjSd8B5E7m069cxnIgQes6TwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFPeOwcMb6+27PtKlJ7nvFz6eCnONMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvOTQ3Qnd4dnI3YnMtMHFVbnVlOFhQcDRLYzQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAl/B2AwQA
l/NXAwQAl/OuMAwDBAGX9zIDBAGX9zQDBAKX97gDBACX9/AwDQYJKoZIhvcNAQEL
BQADggEBAGLTdP6CJ3d8OhQgGWSBFvpvs0J0JsWys43Ey0EXKA4JTaKn0uwUCsd5
G8OfM74qMwaPyufygWgr6BuToDBzUyNh8TsxOwrUYkLxglbl8rhf5tsp+eTdB2wq
eYC9JDnBXsssUw3zJ12THicyTYZEt6Ho4z/RM4fxcm/k2pfl/l7FFsvwF2zKXNri
TysTcl39tO9C04kupFYdkKYcVtkVNKFfivAfQbJ5S6r6B6mwST+8PqTgaj+U5ur3
zjYJD/jnGweHL+W+gxl+cwoFyjBiT2G9wCSR1Ghdrmeq+8Y2+l0bUiPuSx5Q/hy2
l465XK5neqtqYh36zpTJUjILBfAbA/s=
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:50 2026 by rpki-client