Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CxHQwwpEIQU5x16eauvd02qCtxU.roa
File: CxHQwwpEIQU5x16eauvd02qCtxU.roa (raw, json)
Hash identifier: BWm5kLeS0Mxrh1qN/T3jpm0n888ABxuINim7DRul4wQ=
Subject key identifier: 0B:11:D0:C3:0A:44:21:05:39:C7:5E:9E:6A:EB:DD:D3:6A:82:B7:15
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A00047EF4BC02589D33235F122E6544BAB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CxHQwwpEIQU5x16eauvd02qCtxU.roa
Signing time: Fri 14 Aug 2026 12:38:29 +0000
ROA not before: Fri 14 Aug 2026 12:38:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402857
IP address blocks: 151.240.6.0/24 maxlen: 24
151.240.7.0/24 maxlen: 24
151.240.179.0/24 maxlen: 24
151.242.67.0/24 maxlen: 24
151.242.118.0/24 maxlen: 24
151.245.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 17:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:47:ef:4b:c0:25:89:d3:32:35:f1:22:e6:54:4b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 14 12:38:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b11d0c30a44210539c75e9e6aebddd36a82b715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:57:90:bf:13:88:c7:77:dc:af:49:ba:33:1b:
de:3e:d2:21:10:28:e9:4d:0f:ce:d2:ee:e3:af:f9:
39:2c:41:94:8e:7b:42:f1:5b:b3:0f:82:b4:3c:84:
68:24:88:b6:19:81:e0:d1:3b:1a:c6:8b:ec:8e:2d:
2f:25:84:92:ff:57:b2:7f:5b:7e:d3:ef:ec:7c:0d:
53:59:7d:2e:af:46:17:4e:49:00:a1:6a:0a:f5:dc:
cc:e9:a1:80:ba:67:d4:a9:a6:a1:33:ea:9d:26:cf:
ad:85:b8:60:89:46:de:d8:fd:0b:7d:45:03:85:80:
7e:2a:ed:76:32:ce:38:db:a3:23:b7:94:cb:dd:2e:
8a:5e:40:50:ac:cf:8f:28:46:d7:d7:d1:08:71:03:
22:74:9a:88:5d:ba:47:d7:8e:c3:f2:4f:36:58:81:
8f:a6:ed:d3:b4:62:e9:e6:b1:94:62:99:c6:2d:3e:
3f:2c:20:0f:34:5e:48:6c:3f:3d:e9:0c:db:14:aa:
f7:bd:05:ff:d3:43:7e:bb:16:cb:f5:6e:db:1c:87:
2b:42:77:af:9f:3b:c6:b3:96:57:02:e3:ad:3d:fe:
ac:75:9e:66:a1:ed:09:9e:04:31:3a:a4:18:2b:8d:
7f:c6:5d:ce:12:af:30:e5:00:ef:80:4b:59:e6:70:
d8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:11:D0:C3:0A:44:21:05:39:C7:5E:9E:6A:EB:DD:D3:6A:82:B7:15
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CxHQwwpEIQU5x16eauvd02qCtxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.6.0/23
151.240.179.0/24
151.242.67.0/24
151.242.118.0/24
151.245.60.0/24
Signature Algorithm: sha256WithRSAEncryption
10:41:ee:5b:0a:43:e0:83:ee:c2:ab:d2:45:31:9c:88:08:4f:
70:ff:82:ad:53:2c:7b:42:60:5a:03:b1:7f:fe:ee:6b:65:e9:
d9:cb:21:7a:62:47:2d:ab:b0:6d:49:11:31:08:e1:f3:8c:4a:
a3:b7:3c:1c:19:c2:77:bb:b0:22:75:44:9f:58:ba:32:63:d1:
d6:23:2f:9e:f7:32:02:06:92:a6:d8:59:b3:09:37:de:84:7f:
8b:d7:42:8d:9d:f5:d6:5a:74:85:d8:5d:a4:49:99:68:78:f6:
e9:70:8a:59:08:9e:40:d1:e6:9c:80:48:87:2b:9a:0f:5d:07:
31:eb:61:c7:2b:41:45:49:10:b7:d7:9d:db:6b:f9:37:41:eb:
26:ad:c7:d9:a7:fe:5f:2c:47:e8:74:b2:a0:d7:db:b0:8e:93:
67:38:97:e5:44:c9:8e:c4:7f:87:00:c1:b1:71:75:f4:02:01:
05:b9:06:00:7d:54:44:03:41:a8:86:b9:cf:77:9a:d4:5b:a4:
5a:69:25:2d:4b:fb:0d:a8:6c:f8:15:f4:92:02:4e:e3:af:ae:
59:51:2b:59:58:4d:45:73:94:cf:30:99:9f:92:ad:59:87:2d:
4b:2a:42:6b:49:39:86:cb:14:00:32:83:08:f4:ea:c1:f5:8a:
b1:9e:35:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:13:58 2026 by rpki-client