Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FBHpA61lOuL0yA03NMHiR3RPr9s.roa
File: FBHpA61lOuL0yA03NMHiR3RPr9s.roa (raw, json)
Hash identifier: mPoBhiLmQhP+PJk3zQYYXZOMV3NUxeowD0mRt7tBvTA=
Subject key identifier: 14:11:E9:03:AD:65:3A:E2:F4:C8:0D:37:34:C1:E2:47:74:4F:AF:DB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E3BFD5570C1BAC25713B5BC6B61769FF3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FBHpA61lOuL0yA03NMHiR3RPr9s.roa
Signing time: Mon 18 May 2026 16:48:38 +0000
ROA not before: Mon 18 May 2026 16:48:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 151.244.194.0/24 maxlen: 24
151.244.195.0/24 maxlen: 24
151.245.189.0/24 maxlen: 24
151.245.199.0/24 maxlen: 24
151.245.220.0/24 maxlen: 24
151.245.224.0/24 maxlen: 24
151.245.225.0/24 maxlen: 24
151.245.228.0/24 maxlen: 24
151.245.247.0/24 maxlen: 24
151.246.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3b:fd:55:70:c1:ba:c2:57:13:b5:bc:6b:61:76:9f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 18 16:48:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1411e903ad653ae2f4c80d3734c1e247744fafdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d9:91:35:b7:f7:3a:25:f5:78:19:4b:6b:fa:
30:6c:b5:8c:5b:fd:ae:56:b9:28:71:c0:22:58:54:
ba:d6:5e:aa:ed:95:ca:74:92:bd:1f:3c:93:6d:90:
2a:8a:71:2c:76:eb:35:76:45:4a:08:c9:2a:a9:8f:
62:4b:55:8e:9b:e9:aa:ee:a1:8c:b9:3b:25:26:a1:
ee:db:c4:14:f2:b5:e5:3f:ac:35:c9:1e:9d:43:1c:
f9:62:d1:66:0d:8b:98:dc:1c:65:a5:0f:7a:4f:d5:
67:75:d1:1f:9a:5f:e7:75:95:b1:9c:d7:cc:6a:e2:
24:3b:67:17:19:6c:da:fd:17:28:58:dc:76:0b:43:
38:f7:ae:b4:cf:6c:9b:b3:7f:4d:e3:6d:8e:8b:a3:
02:b4:00:55:92:c6:bc:f7:3b:f4:d4:d9:d2:8d:da:
9e:30:22:1d:43:2e:f2:27:fe:16:f3:04:8b:ec:5c:
07:f3:4c:db:13:b0:70:12:1e:8f:29:00:3f:d9:ec:
96:ec:d2:56:33:d9:5f:c6:d9:df:95:7a:dd:c7:50:
db:a7:dc:2b:31:7f:19:c2:64:8d:38:e1:43:25:35:
e7:c4:15:68:47:9b:c8:71:b3:3b:1a:0a:9c:b4:41:
e9:17:34:1f:55:cc:88:28:d8:7a:57:fb:f1:5b:2d:
2f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:11:E9:03:AD:65:3A:E2:F4:C8:0D:37:34:C1:E2:47:74:4F:AF:DB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FBHpA61lOuL0yA03NMHiR3RPr9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.194.0/23
151.245.189.0/24
151.245.199.0/24
151.245.220.0/24
151.245.224.0/23
151.245.228.0/24
151.245.247.0/24
151.246.191.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ef:f5:25:78:f8:65:54:14:ee:23:e3:f5:2b:bf:74:42:32:
26:8c:dc:a4:c1:61:ad:09:c4:ce:df:ca:c3:28:0a:31:ba:58:
3b:43:5f:1e:00:3e:f8:3a:98:b0:bb:26:df:c6:96:2a:cf:70:
a9:99:9e:90:d4:fe:71:3b:39:c9:50:0e:a9:32:5c:8d:ef:79:
58:5a:52:33:d2:de:5c:d1:7b:1d:5f:3e:41:00:06:d3:e9:a2:
09:96:b5:3d:84:ac:be:95:51:31:c2:9b:a7:e5:4e:1b:93:80:
b2:c3:81:90:bb:b1:24:b6:37:73:6a:60:7a:28:39:5c:d7:65:
44:c6:7a:cc:87:ac:ef:6d:ea:ca:9c:66:e0:85:88:93:0f:fd:
8d:40:b0:06:cc:a2:41:9d:b4:a5:0f:56:ef:e3:ed:59:e7:38:
a7:a0:f9:82:21:ed:4d:e6:b2:23:b7:f6:75:4f:90:07:8b:ca:
a4:c3:36:ad:2b:40:da:7e:9a:e5:6e:a9:d4:78:2a:f5:42:25:
78:a6:d4:04:f6:28:2c:99:56:75:aa:d6:84:99:69:1f:6c:e8:
a9:49:80:9e:c3:b2:d8:95:6f:9b:e9:41:8b:95:73:51:b4:59:
d6:10:f8:45:a8:71:aa:e1:ec:af:24:18:5f:09:44:c5:6e:ff:
7e:54:6b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 17:46:41 2026 by rpki-client