Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/95WSj6dvEmq5zOt7xd7w1Hn7RaI.roa
File: 95WSj6dvEmq5zOt7xd7w1Hn7RaI.roa (raw, json)
Hash identifier: PZiWrc3nIhKIbXqknKWil3HdxiFcxhiTgdb61LjOCKY=
Subject key identifier: F7:95:92:8F:A7:6F:12:6A:B9:CC:EB:7B:C5:DE:F0:D4:79:FB:45:A2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E81F2B920A7D90A775233E95C0916A6B0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/95WSj6dvEmq5zOt7xd7w1Hn7RaI.roa
Signing time: Mon 01 Jun 2026 06:50:28 +0000
ROA not before: Mon 01 Jun 2026 06:50:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 151.243.178.0/24 maxlen: 24
151.243.183.0/24 maxlen: 24
151.243.234.0/24 maxlen: 24
151.246.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:81:f2:b9:20:a7:d9:0a:77:52:33:e9:5c:09:16:a6:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 1 06:50:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f795928fa76f126ab9cceb7bc5def0d479fb45a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:df:bd:35:66:ab:a4:67:62:2c:f7:14:fe:d7:
59:1b:4b:0d:37:95:1a:e5:1f:b3:c3:ac:63:92:77:
b6:12:32:09:24:3f:b2:4a:4d:c6:9f:aa:50:fe:17:
9f:38:dc:1c:f4:35:61:8b:f6:ea:cd:ae:76:80:a0:
08:fc:e9:3b:3c:62:5d:d3:78:a6:e2:9a:24:a6:d6:
86:51:36:ab:f6:b6:67:38:94:ef:a5:ee:70:44:9f:
22:3a:a1:89:4b:e0:59:47:7d:bc:0f:da:5f:a7:92:
a1:9a:12:16:b5:a6:20:ae:1b:ae:f1:c0:31:51:52:
33:16:4f:a3:4d:56:66:01:05:87:1d:32:74:34:c0:
b3:94:bd:5e:e4:42:2e:92:0e:b6:99:47:c8:ae:86:
c1:a0:e9:af:da:85:ba:5c:bb:d5:54:5d:01:a9:8a:
1c:4f:ae:31:ed:2a:bc:f5:8d:de:f4:06:60:6d:f8:
57:46:9f:be:30:92:8b:3f:0d:49:c0:7f:28:25:e5:
26:4e:40:d4:54:59:ca:e3:5c:48:30:32:6a:07:91:
37:39:94:81:49:f8:f9:db:67:b0:98:54:0b:2b:64:
48:5c:c5:d3:74:a0:53:29:ae:5c:82:a8:3f:92:ab:
ec:fa:25:be:4f:ac:6c:a3:29:54:5c:dd:28:60:4e:
ca:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:95:92:8F:A7:6F:12:6A:B9:CC:EB:7B:C5:DE:F0:D4:79:FB:45:A2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/95WSj6dvEmq5zOt7xd7w1Hn7RaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.178.0/24
151.243.183.0/24
151.243.234.0/24
151.246.245.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:6d:cf:22:25:62:81:cb:4b:99:db:ea:03:17:00:39:75:2c:
a1:88:4e:9a:fc:5e:b8:2d:4c:49:dc:d5:d3:06:d1:97:5b:f3:
70:c1:f4:32:7f:dd:3b:22:59:25:3c:83:53:e9:07:a4:de:93:
39:75:b9:0c:88:46:b5:ea:ac:ac:20:79:66:d3:cb:2f:3b:0d:
62:67:4e:d8:ed:ef:4c:de:40:bc:3a:24:8f:44:3a:e3:15:bd:
f8:31:af:be:94:7e:97:f7:5a:3d:79:c8:df:10:12:37:a3:3f:
a5:4b:1f:f0:37:99:89:16:a7:32:2a:4b:da:79:66:ae:bc:d0:
8d:e1:df:6c:13:2c:6d:d8:20:b4:e6:bc:8c:5f:ce:33:87:f6:
78:80:93:bf:bf:0e:85:1f:f8:90:3e:9b:32:d2:a3:bd:b0:e0:
96:2a:1c:c8:3a:1c:57:f0:9d:8e:f1:ca:d4:63:3d:37:3b:21:
17:95:cf:4c:d4:bd:0d:d1:d3:41:2a:2b:1a:59:e6:b5:0c:6e:
c1:18:bd:87:25:81:20:40:79:6c:17:97:8b:a6:01:a4:89:37:
63:cf:10:c6:6e:3b:a9:74:34:f7:ce:e1:d4:47:83:20:ba:6c:
ca:60:a7:1c:3d:86:cb:e9:fb:16:4e:35:fa:e1:5a:99:d6:e9:
7f:a8:f7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:32:16 2026 by rpki-client