Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9cQ3aNV9di1pPOTl0hlHBp9Y1r4.roa
File: 9cQ3aNV9di1pPOTl0hlHBp9Y1r4.roa (raw, json)
Hash identifier: cZw+3i9AFh8zOal49WSVQnOZqcAJrT9Bxq0QEZuhG5U=
Subject key identifier: F5:C4:37:68:D5:7D:76:2D:69:3C:E4:E5:D2:19:47:06:9F:58:D6:BE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F0895BAC395E37206398853FCA3031ADB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9cQ3aNV9di1pPOTl0hlHBp9Y1r4.roa
Signing time: Sat 27 Jun 2026 10:17:38 +0000
ROA not before: Sat 27 Jun 2026 10:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 151.244.0.0/24 maxlen: 24
151.244.172.0/24 maxlen: 24
151.246.149.0/24 maxlen: 24
151.246.150.0/24 maxlen: 24
151.246.154.0/24 maxlen: 24
151.246.170.0/24 maxlen: 24
151.247.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:08:95:ba:c3:95:e3:72:06:39:88:53:fc:a3:03:1a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 27 10:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5c43768d57d762d693ce4e5d21947069f58d6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:2e:cf:9f:70:57:80:b3:d0:1b:1d:dd:b8:
0e:ef:2f:d6:e7:93:ae:c2:3b:2a:03:82:8c:00:ca:
74:d1:fa:de:ec:b4:66:90:8d:76:26:0d:51:e6:f1:
fc:33:95:11:20:80:0d:96:c2:88:32:72:a7:8f:43:
31:d4:92:e0:32:0d:3e:65:70:06:f3:b6:7f:8a:c7:
43:51:ef:b7:2c:9c:ae:df:e2:63:ce:3b:da:b8:f0:
7e:1f:6d:58:73:ae:34:2a:56:99:5d:cf:b5:43:81:
5e:02:f8:cb:85:18:10:70:f4:eb:a8:9b:c3:2b:52:
d4:8a:57:4c:a2:db:16:c3:1d:aa:f2:6a:2b:13:68:
0f:2a:5b:b6:bd:46:a8:4d:f6:6f:36:60:19:26:1b:
db:d1:2d:eb:e9:7d:0e:5b:8a:a0:f5:5a:d0:71:0e:
bd:b9:f4:c8:ae:18:d3:aa:ee:28:b9:14:4c:3d:fd:
ce:de:d7:ce:df:ae:5b:d7:63:10:d7:eb:3d:b6:b8:
d1:af:a4:80:43:55:b8:3b:74:03:d3:f7:a7:5b:5a:
26:ca:69:70:7b:62:47:1f:3e:fe:b9:00:a8:21:ae:
24:18:91:b4:1d:14:e3:01:cd:7c:eb:e6:74:20:46:
7d:d5:99:88:bd:fb:9b:c1:fd:91:73:1c:14:3a:3c:
5a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C4:37:68:D5:7D:76:2D:69:3C:E4:E5:D2:19:47:06:9F:58:D6:BE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9cQ3aNV9di1pPOTl0hlHBp9Y1r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.0.0/24
151.244.172.0/24
151.246.149.0-151.246.150.255
151.246.154.0/24
151.246.170.0/24
151.247.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:94:70:3a:53:ff:17:b5:d9:61:6a:8d:d2:b0:50:e3:5e:c6:
a6:cb:05:f4:13:99:2e:5d:32:63:64:f1:08:48:9e:e8:c2:87:
08:9e:d4:66:75:ef:e8:a7:74:43:b6:b0:f5:ae:a9:e1:c1:a9:
1b:64:bc:b9:e2:99:46:60:6b:84:7c:13:08:29:b7:fd:32:0c:
25:2f:fa:b8:00:57:de:75:e8:8d:fe:72:cd:c9:13:5f:0c:10:
42:06:16:27:8b:1a:94:49:eb:a7:57:f0:10:58:5f:70:a2:9e:
cb:ce:59:31:78:4a:7c:4d:8b:8c:98:26:bb:73:9f:63:b9:0c:
23:ea:b4:c2:0f:34:17:e1:48:cf:ce:71:82:a1:fe:31:34:cb:
83:7c:f5:36:0f:3b:f2:13:c3:5b:80:b4:62:de:07:f6:21:90:
83:de:6c:8b:71:d0:9d:a1:38:17:44:e6:f5:e6:76:27:1a:b2:
c6:68:b0:94:b2:b3:3a:bd:8c:6f:97:fb:3e:83:ac:2f:89:86:
6c:69:f7:03:7a:97:61:44:c1:c3:58:d9:60:fa:87:52:0b:fb:
da:b3:7d:58:93:4c:e7:c8:e6:3d:9b:4a:72:84:37:62:67:f6:
84:26:9d:35:e2:1c:fa:a0:e6:36:97:9c:f5:27:9b:89:e8:c9:
5b:c1:d1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:15 2026 by rpki-client