Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DhK5hXGNj9NdYOwdxI_G__QBYtI.roa
File: DhK5hXGNj9NdYOwdxI_G__QBYtI.roa (raw, json)
Hash identifier: NXb43unWlVGJavYJMuR+D1bc2k10otYqMJsBU/a1qJc=
Subject key identifier: 0E:12:B9:85:71:8D:8F:D3:5D:60:EC:1D:C4:8F:C6:FF:F4:01:62:D2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0626949298314C9A88E3943A7F79BE956
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DhK5hXGNj9NdYOwdxI_G__QBYtI.roa
Signing time: Wed 02 Sep 2026 13:57:42 +0000
ROA not before: Wed 02 Sep 2026 13:57:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64267
IP address blocks: 151.240.2.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.241.33.0/24 maxlen: 24
151.241.43.0/24 maxlen: 24
151.241.48.0/24 maxlen: 24
151.242.26.0/24 maxlen: 24
151.242.114.0/24 maxlen: 24
151.244.42.0/24 maxlen: 24
151.244.69.0/24 maxlen: 24
151.245.69.0/24 maxlen: 24
151.246.224.0/24 maxlen: 24
151.246.230.0/24 maxlen: 24
151.246.234.0/24 maxlen: 24
151.247.35.0/24 maxlen: 24
151.247.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:69:49:29:83:14:c9:a8:8e:39:43:a7:f7:9b:e9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 2 13:57:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e12b985718d8fd35d60ec1dc48fc6fff40162d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:de:91:9f:ec:6a:74:eb:e1:c1:a4:cb:44:90:
85:49:8e:7d:da:43:65:d2:6f:b3:b9:f9:73:2b:c8:
55:c9:f7:71:9f:1e:54:6a:2c:ae:68:0b:c5:38:8d:
ad:02:2a:b0:57:7a:d3:30:1a:23:8d:ea:2c:8b:2c:
4c:22:90:60:88:6a:8c:9f:36:9c:3c:0c:89:1a:9e:
4c:46:e8:90:eb:76:de:f0:a9:ee:1c:cf:ee:a3:0e:
13:5e:44:2a:e6:a9:0a:ff:8b:2b:88:cf:7d:1a:8f:
9a:6a:b7:c0:00:1f:81:50:f0:00:41:66:99:fe:71:
8b:85:a7:58:07:cc:47:99:3d:d1:5a:22:2b:80:05:
6f:7e:5a:31:cc:80:2e:cd:35:ef:0c:bb:0b:a6:a5:
26:a4:17:78:67:ef:56:71:af:14:72:ee:c1:7f:12:
40:2e:ba:c2:49:d8:d6:4a:43:b3:46:75:14:5a:45:
05:e7:d3:72:4d:4a:27:d0:c3:43:7c:a1:e1:08:64:
52:db:92:44:f2:4c:8e:be:80:93:42:13:00:2d:77:
ad:21:62:06:22:4a:06:da:67:c1:49:58:b9:52:df:
22:5f:b9:43:38:cc:5d:4d:cf:8d:07:40:66:74:07:
20:cb:61:98:a9:22:8b:56:d9:04:f3:01:b7:8b:3e:
73:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:12:B9:85:71:8D:8F:D3:5D:60:EC:1D:C4:8F:C6:FF:F4:01:62:D2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DhK5hXGNj9NdYOwdxI_G__QBYtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.2.0/24
151.240.173.0/24
151.241.33.0/24
151.241.43.0/24
151.241.48.0/24
151.242.26.0/24
151.242.114.0/24
151.244.42.0/24
151.244.69.0/24
151.245.69.0/24
151.246.224.0/24
151.246.230.0/24
151.246.234.0/24
151.247.35.0/24
151.247.246.0/24
Signature Algorithm: sha256WithRSAEncryption
77:30:3f:b8:de:6f:9c:e2:4d:5e:70:4b:f0:7b:1b:9b:04:de:
ce:c9:98:71:9e:d0:3b:2f:1c:9b:ce:b5:4d:f9:eb:6d:ae:84:
20:ed:30:8a:9a:cd:d5:cc:b1:df:31:65:a4:7b:e6:26:76:71:
0c:11:45:36:07:04:1f:c9:d8:ea:ef:f5:5f:c0:a9:0c:d6:dc:
57:8d:bb:6a:23:72:77:7f:c1:92:2d:22:c3:f7:ce:a3:93:bb:
d7:4b:a3:1d:1d:61:b1:ca:14:52:2d:d4:a2:eb:83:aa:99:ee:
b0:a8:49:80:3c:e6:ce:a2:ab:ba:0b:dc:bb:06:e5:aa:c1:98:
cd:0a:45:29:06:33:a0:10:f0:8a:8c:26:51:7c:11:cf:86:5a:
11:ca:94:41:f8:18:45:14:0f:20:6e:9e:bd:dc:08:84:b2:35:
d1:15:f4:6f:df:18:ee:35:5f:7b:c3:6a:f9:0c:52:81:bb:d4:
4b:d5:0f:28:75:10:15:34:0d:0c:c6:c0:c0:2a:d9:68:30:82:
85:3e:69:95:37:45:87:6d:ce:e6:c1:bf:a3:f8:ee:ae:be:cd:
42:11:ec:9b:dd:b1:d3:d8:0b:57:74:35:0c:d3:b3:95:73:58:
34:9f:ca:95:0d:a7:77:30:69:1d:5e:c9:e0:b1:0c:30:74:e3:
bf:29:26:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:38:50 2026 by rpki-client