Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/E_AgsF8hUrSNdSaKoKr4G5nWKUE.roa
File: E_AgsF8hUrSNdSaKoKr4G5nWKUE.roa (raw, json)
Hash identifier: ELzyb/cbJ/Lvif5p3H50/BgkGQN75QOL4YRUPDaJOtQ=
Subject key identifier: 13:F0:20:B0:5F:21:52:B4:8D:75:26:8A:A0:AA:F8:1B:99:D6:29:41
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A1013854FFA008B35E412BF42BA86DF412
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/E_AgsF8hUrSNdSaKoKr4G5nWKUE.roa
Signing time: Sat 03 Oct 2026 10:03:51 +0000
ROA not before: Sat 03 Oct 2026 10:03:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 37.202.206.0/24 maxlen: 24
151.241.232.0/23 maxlen: 24
151.242.49.0/24 maxlen: 24
151.243.64.0/20 maxlen: 24
151.243.97.0/24 maxlen: 24
151.243.106.0/24 maxlen: 24
151.244.34.0/24 maxlen: 24
151.244.59.0/24 maxlen: 24
151.244.75.0/24 maxlen: 24
151.244.90.0/24 maxlen: 24
151.244.109.0/24 maxlen: 24
151.244.110.0/24 maxlen: 24
151.245.222.0/23 maxlen: 24
151.247.18.0/24 maxlen: 24
151.247.20.0/24 maxlen: 24
151.247.226.0/24 maxlen: 24
151.247.232.0/24 maxlen: 24
151.247.233.0/24 maxlen: 24
151.247.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:38:54:ff:a0:08:b3:5e:41:2b:f4:2b:a8:6d:f4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 3 10:03:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13f020b05f2152b48d75268aa0aaf81b99d62941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:f2:24:01:6d:ab:99:2d:c2:b4:22:96:78:
67:6d:0b:5b:c3:ed:4c:13:a7:57:45:48:91:af:c4:
3c:a9:4c:c2:1a:1c:4d:57:b3:8c:33:14:35:b8:5c:
e7:42:79:6b:00:54:61:20:3e:54:28:21:19:49:67:
e5:a1:e0:87:88:c8:fb:88:c1:f8:13:3d:73:1f:de:
eb:8e:62:5a:c5:3f:5e:f7:8d:1a:2b:c7:85:eb:f7:
d6:1d:e5:7f:b9:1e:b9:6e:c6:d0:cf:d7:d8:b3:2e:
62:9e:5a:2a:89:74:51:c1:88:af:95:49:82:d1:0c:
93:70:ce:05:f2:6c:4d:00:47:5f:b8:b5:e6:1c:f8:
74:3d:8f:22:83:da:e1:a1:cc:10:5a:07:5c:d4:57:
47:00:02:3f:bf:76:9c:77:dd:86:76:be:e5:45:29:
ae:fd:ce:e7:3f:84:b9:60:f2:00:42:63:85:cb:e9:
08:b0:00:f5:46:30:92:ec:b1:64:a4:05:ab:be:6e:
88:51:0f:ef:7f:34:bb:9a:9b:60:48:0b:ec:4e:70:
ed:06:1f:de:a7:45:cb:72:7f:a4:3c:80:78:d0:19:
9c:1e:19:ba:bd:e6:53:8f:2d:72:a1:a2:e9:67:db:
70:6b:43:35:47:7a:cc:30:76:df:fc:7a:36:c0:6f:
cf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F0:20:B0:5F:21:52:B4:8D:75:26:8A:A0:AA:F8:1B:99:D6:29:41
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/E_AgsF8hUrSNdSaKoKr4G5nWKUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.206.0/24
151.241.232.0/23
151.242.49.0/24
151.243.64.0/20
151.243.97.0/24
151.243.106.0/24
151.244.34.0/24
151.244.59.0/24
151.244.75.0/24
151.244.90.0/24
151.244.109.0-151.244.110.255
151.245.222.0/23
151.247.18.0/24
151.247.20.0/24
151.247.226.0/24
151.247.232.0/23
151.247.239.0/24
Signature Algorithm: sha256WithRSAEncryption
62:eb:09:c5:88:9d:64:6c:33:85:49:f0:ca:22:2d:28:28:50:
14:df:1b:3e:96:24:7b:50:29:5c:71:4b:8a:5c:a3:ce:d6:f0:
b2:8b:0c:54:3e:00:0c:93:82:f2:91:12:09:82:e1:f2:b8:82:
39:e0:fe:7b:2c:92:78:20:0e:d5:15:64:a7:67:d1:72:c9:27:
f6:47:37:3e:b7:3a:69:f2:c6:09:a3:7f:24:56:2d:a4:71:57:
ec:9d:fb:50:b0:1b:d8:93:ba:2e:d5:46:af:39:79:22:be:72:
72:c1:c0:50:8d:6c:7e:da:53:94:be:00:ee:79:ff:d7:1d:20:
64:f0:97:c9:51:2d:4a:1c:fc:cb:d9:fb:b7:4b:1f:a3:a3:d2:
64:ba:71:a8:04:38:0b:bb:ef:41:3e:57:a4:1a:d0:a9:c0:5a:
f2:e1:dc:e5:4a:01:80:ae:76:95:71:52:e7:4e:fe:c2:55:d6:
26:9f:0f:c2:2c:c7:76:63:22:41:03:df:e1:4c:0d:04:ca:9d:
7f:c8:1f:65:75:53:ca:54:e9:47:41:a7:73:e6:6b:71:9f:51:
0d:54:e4:8f:7a:7f:bc:70:70:4e:85:e3:1d:5e:3a:68:60:99:
fc:03:05:ec:45:3b:c2:65:77:b0:f1:fe:cd:ff:87:a7:3d:0a:
9d:6e:eb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:00:33 2026 by rpki-client