Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CVq_SM-TH_RLXqYbdfcFKBluaCg.roa
File: CVq_SM-TH_RLXqYbdfcFKBluaCg.roa (raw, json)
Hash identifier: ee09hQr7X+2FHDQnjiOHE9mdW9ttx11qV+fper511gY=
Subject key identifier: 09:5A:BF:48:CF:93:1F:F4:4B:5E:A6:1B:75:F7:05:28:19:6E:68:28
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E93E1DA24DEF03FC4528B845A9A15A533
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CVq_SM-TH_RLXqYbdfcFKBluaCg.roa
Signing time: Thu 04 Jun 2026 18:25:12 +0000
ROA not before: Thu 04 Jun 2026 18:25:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214024
IP address blocks: 151.241.128.0/22 maxlen: 24
151.243.179.0/24 maxlen: 24
151.246.184.0/24 maxlen: 24
151.246.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:e1:da:24:de:f0:3f:c4:52:8b:84:5a:9a:15:a5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 4 18:25:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=095abf48cf931ff44b5ea61b75f70528196e6828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:96:8a:2c:a4:bc:9d:c2:e2:53:be:e6:ea:80:
44:d2:77:5e:e0:cc:be:c8:31:29:2f:80:98:4f:59:
47:87:75:94:cd:c5:68:89:8a:6a:25:13:3d:fa:8e:
eb:54:4b:ef:ea:1a:55:52:79:4d:a9:4b:85:27:33:
42:17:40:a7:82:5e:31:95:71:5a:13:4e:3a:4c:9a:
bd:da:7f:3d:c6:c8:34:c0:29:f7:23:fe:06:f2:cd:
c4:8d:f0:71:2a:2b:c3:75:1a:dd:42:03:d5:9b:fd:
85:1c:f6:c4:6d:cf:e7:a9:1a:f8:b4:22:c1:19:ed:
dc:95:d2:6e:d2:f0:fb:f7:40:4b:57:34:f4:f0:52:
33:46:03:bc:8d:7b:51:62:5f:db:8d:23:b6:dd:8c:
4c:77:d3:ed:91:de:ae:38:eb:04:93:54:9a:f7:d6:
96:ed:cf:9f:49:2d:1f:06:78:27:3d:60:ba:ce:9f:
01:98:82:56:71:67:45:7e:02:41:60:1d:4b:11:24:
a9:7a:bd:6c:8c:0c:b4:e0:a2:64:0f:df:06:36:57:
01:36:f3:ee:37:ed:a7:b8:95:4a:00:73:62:2b:93:
b9:54:61:6e:80:5e:95:82:14:3b:59:bd:84:f6:69:
60:1c:b0:77:9d:bc:cb:c0:a7:a7:af:1f:c2:21:60:
7a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5A:BF:48:CF:93:1F:F4:4B:5E:A6:1B:75:F7:05:28:19:6E:68:28
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CVq_SM-TH_RLXqYbdfcFKBluaCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
151.243.179.0/24
151.246.184.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:95:94:5c:83:a5:98:7b:bb:a0:a2:8e:f8:f2:19:a9:7b:72:
e6:9b:d4:59:dd:12:81:39:97:b5:2b:4f:aa:c8:53:8b:34:d7:
b6:67:e6:7b:3c:32:eb:74:81:24:5f:5a:dd:e5:3f:bd:4a:21:
99:76:73:0f:ee:fd:67:d0:9d:76:63:ba:71:24:e5:56:72:c9:
1b:13:7b:98:44:0f:c1:81:d1:e1:30:d2:7a:18:c2:01:c9:8a:
ee:99:f0:09:75:ff:5f:dd:90:d5:e4:f1:6d:96:02:60:85:b4:
12:e3:2b:dd:ec:17:30:c5:71:04:6b:82:c9:25:ce:62:0f:c6:
2f:bf:48:e6:fd:d4:d9:f2:f1:30:13:08:7d:4c:24:64:83:7c:
4a:1c:e9:53:42:b5:73:8a:09:ef:1c:92:b7:dd:bb:ed:98:70:
06:f2:9d:ae:4a:47:1f:93:87:fb:d2:7f:b7:61:bd:e6:53:26:
a4:b8:b7:c1:9c:c0:d5:5c:90:a0:4a:49:2f:fa:51:a2:61:31:
06:02:9f:5c:91:03:ef:67:0b:16:f0:54:ff:d0:9d:07:a5:27:
45:2d:55:d6:07:39:97:66:0f:a4:8b:79:6c:14:9e:0e:8e:7e:
bc:5f:a9:fe:11:1b:26:91:02:ba:5f:f1:43:72:9a:a6:be:c3:
0a:51:4b:f8
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ6T4dok3vA/xFKLhFqaFaUzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNjA0MTgyNTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTVhYmY0OGNmOTMxZmY0NGI1ZWE2MWI3NWY3MDUyODE5NmU2ODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpaKLKS8ncLiU77m6oBE0nde4My+
yDEpL4CYT1lHh3WUzcVoiYpqJRM9+o7rVEvv6hpVUnlNqUuFJzNCF0Cngl4xlXFa
E046TJq92n89xsg0wCn3I/4G8s3EjfBxKivDdRrdQgPVm/2FHPbEbc/nqRr4tCLB
Ge3cldJu0vD790BLVzT08FIzRgO8jXtRYl/bjSO23YxMd9Ptkd6uOOsEk1Sa99aW
7c+fSS0fBngnPWC6zp8BmIJWcWdFfgJBYB1LESSper1sjAy04KJkD98GNlcBNvPu
N+2nuJVKAHNiK5O5VGFugF6VghQ7Wb2E9mlgHLB3nbzLwKenrx/CIWB6LwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAlav0jPkx/0S16mG3X3BSgZbmgoMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvQ1ZxX1NNLVRIX1JMWHFZYmRmY0ZLQmx1YUNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCl/GAAwQA
l/OzAwQBl/a4MA0GCSqGSIb3DQEBCwUAA4IBAQCylZRcg6WYe7ugoo748hmpe3Lm
m9RZ3RKBOZe1K0+qyFOLNNe2Z+Z7PDLrdIEkX1rd5T+9SiGZdnMP7v1n0J12Y7px
JOVWcskbE3uYRA/BgdHhMNJ6GMIByYrumfAJdf9f3ZDV5PFtlgJghbQS4yvd7Bcw
xXEEa4LJJc5iD8Yvv0jm/dTZ8vEwEwh9TCRkg3xKHOlTQrVzignvHJK33bvtmHAG
8p2uSkcfk4f70n+3Yb3mUyakuLfBnMDVXJCgSkkv+lGiYTEGAp9ckQPvZwsW8FT/
0J0HpSdFLVXWBzmXZg+ki3lsFJ4Ojn68X6n+ERsmkQK6X/FDcpqmvsMKUUv4
-----END CERTIFICATE-----
Generated at Fri Jun 12 00:05:44 2026 by rpki-client