Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BPkPCXRQC76WDNgU5THWuy0OQaE.roa
File: BPkPCXRQC76WDNgU5THWuy0OQaE.roa (raw, json)
Hash identifier: pBRXL6hp1HzGwUs/+/FrPZgaVhc0hQKQHFZse5DYJxM=
Subject key identifier: 04:F9:0F:09:74:50:0B:BE:96:0C:D8:14:E5:31:D6:BB:2D:0E:41:A1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D9B8F715C33FBF9E7D20926B178C363CF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BPkPCXRQC76WDNgU5THWuy0OQaE.roa
Signing time: Fri 17 Apr 2026 13:09:22 +0000
ROA not before: Fri 17 Apr 2026 13:09:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20326
IP address blocks: 151.241.65.0/24 maxlen: 24
151.241.178.0/24 maxlen: 24
151.243.21.0/24 maxlen: 24
151.243.244.0/24 maxlen: 24
151.244.2.0/24 maxlen: 24
151.244.171.0/24 maxlen: 24
151.245.8.0/21 maxlen: 24
151.245.149.0/24 maxlen: 24
151.247.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:8f:71:5c:33:fb:f9:e7:d2:09:26:b1:78:c3:63:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 17 13:09:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04f90f0974500bbe960cd814e531d6bb2d0e41a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e3:c2:48:fe:51:ec:1b:71:46:92:cb:84:35:
30:e8:e5:a0:95:3b:53:91:a8:94:28:1e:4a:4b:07:
4e:d0:7e:ec:8f:75:15:1a:84:ee:79:ba:3c:70:ca:
c7:a4:b4:52:ad:9a:85:5c:fb:38:c7:c6:53:e0:df:
9e:ae:f6:b7:03:a7:eb:f3:6f:c7:04:65:1f:ec:aa:
1a:ff:7e:eb:13:72:a2:ad:8b:bc:e5:6d:62:a8:11:
96:01:e7:e8:49:9c:03:85:52:70:e0:3a:91:1e:0e:
31:f4:27:7c:21:99:de:a7:1b:36:1a:fc:09:49:97:
6b:c3:7e:81:85:1d:51:0b:96:b3:67:1e:78:3c:f8:
4b:52:a9:f6:ea:8b:b6:73:87:22:43:1f:d1:b2:90:
b1:7e:6d:f5:30:a4:2f:24:12:5e:9a:b8:3b:34:62:
78:27:5a:08:b9:29:8d:5e:83:28:d8:90:74:43:03:
da:72:34:f6:8f:cf:63:02:87:c1:7b:14:ae:3d:dd:
db:71:a2:5f:76:6d:5c:9f:6e:9a:5f:e1:b7:a5:29:
e6:ba:ad:35:d2:ac:a1:34:b6:2d:e0:b9:5d:af:a7:
70:ae:b7:84:48:a2:82:e9:51:66:4c:30:6f:cb:ae:
c7:66:b8:14:23:05:c2:a0:dd:d4:71:91:04:d6:9e:
5e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F9:0F:09:74:50:0B:BE:96:0C:D8:14:E5:31:D6:BB:2D:0E:41:A1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BPkPCXRQC76WDNgU5THWuy0OQaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.65.0/24
151.241.178.0/24
151.243.21.0/24
151.243.244.0/24
151.244.2.0/24
151.244.171.0/24
151.245.8.0/21
151.245.149.0/24
151.247.132.0/24
Signature Algorithm: sha256WithRSAEncryption
76:e0:7a:36:c9:d3:fd:36:cb:9e:72:c6:99:7e:ea:d5:d6:af:
d3:a2:95:02:b9:15:f8:72:10:83:70:29:18:8e:31:65:b8:62:
42:5c:26:3e:ee:37:9e:2f:a6:b6:ea:de:c5:bd:17:55:df:6d:
a4:38:48:4a:75:49:c2:4f:47:e6:16:46:9e:9b:de:e8:80:2a:
e7:ab:b6:f3:10:a3:62:3a:00:ca:d2:0f:31:aa:b5:08:b6:d2:
57:0a:78:c8:d8:7c:d4:05:73:b1:9c:1a:61:e2:dc:86:12:a7:
3b:0f:7c:97:57:19:56:92:db:c1:26:da:00:59:05:1d:6e:1b:
46:d3:ce:d3:50:1d:30:4f:c8:b9:2f:aa:c1:e7:6c:63:eb:a8:
0a:97:59:82:69:28:8d:7a:18:9b:61:72:be:ed:8f:74:a7:0d:
50:6a:50:60:6c:12:34:63:30:a2:0e:7e:3c:b4:7f:45:05:04:
ee:a2:1b:f4:4f:e8:f0:04:f7:7a:1f:1f:04:83:30:c6:95:cb:
e3:b1:a3:db:1a:42:52:ab:16:5e:d8:b1:43:d3:bb:43:dd:4d:
e8:d6:65:95:77:24:3f:da:1f:65:06:23:7b:34:15:3a:71:70:
f9:51:b7:67:7f:00:cb:9f:c5:de:de:e6:02:84:f1:9f:a0:58:
bc:89:f9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 19:36:39 2026 by rpki-client