Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/E5HUc0X50EsJkQr6R-Ls36J9908.roa
File: E5HUc0X50EsJkQr6R-Ls36J9908.roa (raw, json)
Hash identifier: BaZMRn3ikqYvj0u9xj4ZbRV/yFpBl50fuuz0GujkAWM=
Subject key identifier: 13:91:D4:73:45:F9:D0:4B:09:91:0A:FA:47:E2:EC:DF:A2:7D:F7:4F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E4FE8CF935B8CBDCD2336F00DE28C4C51
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/E5HUc0X50EsJkQr6R-Ls36J9908.roa
Signing time: Fri 22 May 2026 13:38:38 +0000
ROA not before: Fri 22 May 2026 13:38:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154410
IP address blocks: 151.242.202.0/24 maxlen: 24
151.242.203.0/24 maxlen: 24
151.247.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:e8:cf:93:5b:8c:bd:cd:23:36:f0:0d:e2:8c:4c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 22 13:38:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1391d47345f9d04b09910afa47e2ecdfa27df74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8e:bd:47:89:30:78:d5:64:bd:db:94:2f:80:
86:80:7f:b8:79:02:9d:b5:f4:ab:bd:ff:15:59:3b:
4b:46:8f:c7:b3:7d:2a:44:a7:9d:a9:02:c2:41:1d:
b7:bf:fc:c1:dd:c7:7b:8c:9a:df:5a:70:de:da:a1:
03:77:7e:f2:bb:5a:87:e1:a3:41:38:16:21:d9:b5:
89:46:b1:17:00:2e:63:1f:b6:c6:78:ff:a4:32:5a:
f8:40:ad:bf:25:b4:9d:66:46:a1:35:20:e8:66:03:
e9:ff:e8:08:9c:30:80:68:d1:06:c7:de:76:9a:b3:
8c:06:e1:0e:73:73:ad:b1:3f:51:de:97:28:c6:03:
af:47:0f:f9:da:eb:a4:30:03:14:ee:40:4e:50:8e:
82:c7:87:d3:3a:c3:ad:9e:d8:f0:6e:a0:c2:ee:21:
ea:eb:88:0d:86:3d:b1:8b:53:75:41:7d:ed:21:39:
9d:83:c4:72:aa:2b:d8:61:b7:1c:d2:ed:de:f7:3c:
6d:86:78:da:f8:20:9c:ce:c0:06:33:27:14:70:ca:
69:c8:f0:fe:0b:20:1c:be:a6:4d:6c:de:54:b9:1c:
44:fe:29:81:4e:f4:e5:5f:7f:94:d1:f1:32:d3:04:
7f:7f:20:7d:9f:10:14:92:a8:11:85:d5:6d:30:a9:
e5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:91:D4:73:45:F9:D0:4B:09:91:0A:FA:47:E2:EC:DF:A2:7D:F7:4F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/E5HUc0X50EsJkQr6R-Ls36J9908.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.202.0/23
151.247.194.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:3a:ba:13:1d:6c:41:1e:d7:a6:f6:4f:cb:8b:f5:cf:30:ee:
89:50:1c:8c:ae:b2:1b:d7:9b:97:37:4f:06:29:9f:c8:ea:3f:
f1:74:13:b0:e8:fd:ab:29:8f:40:cf:64:46:d0:25:3c:23:a7:
28:8c:22:3e:c5:3b:1f:b3:65:19:e1:ab:3a:36:e7:9e:0d:65:
73:81:6d:b6:1b:e2:a0:b7:0f:f4:f4:0f:1c:01:fc:de:ee:35:
15:ba:af:93:41:43:36:11:b0:68:0b:91:29:b6:02:18:eb:e7:
aa:cc:11:1d:14:65:fa:62:fc:c2:43:1d:56:12:08:45:d5:27:
2b:ad:00:1b:26:ee:0d:96:47:40:41:95:3a:74:ab:40:77:1c:
a7:d8:7c:e3:6f:b2:b7:72:03:19:1a:84:c4:aa:84:6e:23:60:
16:61:07:9f:9b:f5:58:d9:a9:01:80:aa:01:0b:98:0d:13:9c:
22:62:d2:0f:68:1b:56:7e:f7:ea:95:3b:42:e5:7d:44:6e:bd:
57:2f:34:ea:fb:e8:d0:2a:22:f5:2b:6a:c6:a2:7d:f4:eb:3c:
ba:f1:44:f2:8f:71:e7:4a:b5:46:dd:70:99:7c:ea:c1:6e:04:
f2:a8:ae:a3:aa:3b:b6:28:b6:d3:0f:99:0c:ad:16:c6:b8:16:
09:c6:c6:3a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ5P6M+TW4y9zSM28A3ijExRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNTIyMTMzODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzkxZDQ3MzQ1ZjlkMDRiMDk5MTBhZmE0N2UyZWNkZmEyN2RmNzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Y69R4kweNVkvduUL4CGgH+4eQKd
tfSrvf8VWTtLRo/Hs30qRKedqQLCQR23v/zB3cd7jJrfWnDe2qEDd37yu1qH4aNB
OBYh2bWJRrEXAC5jH7bGeP+kMlr4QK2/JbSdZkahNSDoZgPp/+gInDCAaNEGx952
mrOMBuEOc3OtsT9R3pcoxgOvRw/52uukMAMU7kBOUI6Cx4fTOsOtntjwbqDC7iHq
64gNhj2xi1N1QX3tITmdg8RyqivYYbcc0u3e9zxthnja+CCczsAGMycUcMppyPD+
CyAcvqZNbN5UuRxE/imBTvTlX3+U0fEy0wR/fyB9nxAUkqgRhdVtMKnlqQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBOR1HNF+dBLCZEK+kfi7N+iffdPMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvRTVIVWMwWDUwRXNKa1FyNlItTHMzNko5OTA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBl/LKAwQA
l/fCMA0GCSqGSIb3DQEBCwUAA4IBAQCcOroTHWxBHtem9k/Li/XPMO6JUByMrrIb
15uXN08GKZ/I6j/xdBOw6P2rKY9Az2RG0CU8I6cojCI+xTsfs2UZ4as6NueeDWVz
gW22G+Kgtw/09A8cAfze7jUVuq+TQUM2EbBoC5EptgIY6+eqzBEdFGX6YvzCQx1W
EghF1ScrrQAbJu4NlkdAQZU6dKtAdxyn2Hzjb7K3cgMZGoTEqoRuI2AWYQefm/VY
2akBgKoBC5gNE5wiYtIPaBtWfvfqlTtC5X1Ebr1XLzTq++jQKiL1K2rGon306zy6
8UTyj3HnSrVG3XCZfOrBbgTyqK6jqju2KLbTD5kMrRbGuBYJxsY6
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:57 2026 by rpki-client