Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FmiWZOmF6XPNfCe8QlxtZb9abRQ.roa
File: FmiWZOmF6XPNfCe8QlxtZb9abRQ.roa (raw, json)
Hash identifier: 8DMLislr+N417zx2HHVI5iEqmPGdhYIW/KnyWQIKMlM=
Subject key identifier: 16:68:96:64:E9:85:E9:73:CD:7C:27:BC:42:5C:6D:65:BF:5A:6D:14
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DBAC6453819F30B41553AD8BF21B02DB3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FmiWZOmF6XPNfCe8QlxtZb9abRQ.roa
Signing time: Thu 23 Apr 2026 14:37:29 +0000
ROA not before: Thu 23 Apr 2026 14:37:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 151.244.38.0/24 maxlen: 24
151.244.52.0/24 maxlen: 24
151.244.118.0/24 maxlen: 24
151.244.221.0/24 maxlen: 24
151.246.226.0/24 maxlen: 24
151.247.27.0/24 maxlen: 24
151.247.92.0/24 maxlen: 24
151.247.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ba:c6:45:38:19:f3:0b:41:55:3a:d8:bf:21:b0:2d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 23 14:37:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16689664e985e973cd7c27bc425c6d65bf5a6d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:11:84:cd:80:55:e5:0c:ac:8c:b8:e1:a6:c1:
75:77:a5:aa:5d:1e:3c:3b:00:e9:f5:81:38:57:a8:
a3:f4:7a:8b:16:06:09:d0:02:30:65:00:63:fb:1b:
b8:a2:9a:00:8d:1a:f6:74:53:af:b6:92:36:e8:d6:
eb:e3:2a:a5:25:50:d7:67:97:a4:81:b5:14:4d:3c:
bb:40:6c:5f:36:6e:28:ef:75:89:17:01:77:25:93:
41:1b:85:27:aa:c2:db:27:23:23:3a:b6:0b:c4:ce:
5d:f7:f9:5f:62:52:75:7e:4f:68:2c:30:bc:74:c1:
6f:c3:ba:9c:b0:20:8c:b1:0b:d2:de:1e:a9:34:81:
41:57:a8:5d:d7:17:d0:78:d8:6d:1c:1a:2c:8b:cf:
2f:84:fb:ed:03:10:c9:43:7a:08:32:f4:c4:d1:36:
6a:2b:3a:cf:6a:6e:96:b1:a9:f8:b7:b1:18:23:69:
87:3c:4f:4d:10:d3:27:57:a6:13:11:e4:e1:78:2a:
9f:13:dd:ce:d7:66:0b:5f:c4:09:34:c5:17:da:f2:
25:d1:1d:95:5f:fe:a7:45:18:f0:37:5d:d1:b3:ab:
72:ed:b1:6d:f4:3a:1e:93:71:9e:0c:87:8f:c9:aa:
b1:75:67:28:d8:7c:b6:b9:e9:3c:76:98:90:5b:de:
eb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:68:96:64:E9:85:E9:73:CD:7C:27:BC:42:5C:6D:65:BF:5A:6D:14
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FmiWZOmF6XPNfCe8QlxtZb9abRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.38.0/24
151.244.52.0/24
151.244.118.0/24
151.244.221.0/24
151.246.226.0/24
151.247.27.0/24
151.247.92.0/24
151.247.151.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:9a:4b:ce:27:c8:1b:6a:48:dc:cc:2f:11:b2:25:b9:89:41:
f3:55:36:80:ac:61:70:bc:96:a3:2f:41:b7:98:4f:15:78:3b:
5d:cb:f7:60:4c:76:79:e3:a0:04:5f:0a:ad:2a:20:0f:a3:57:
5e:1c:b6:d9:05:66:f9:b8:7b:fe:ce:c7:8f:d5:a5:70:71:fa:
fd:61:2f:bb:8c:8a:9d:ac:0b:fe:fe:43:8c:8e:f9:aa:50:5c:
32:e0:d2:13:2c:52:7a:de:02:9b:9c:79:54:51:b5:f4:af:f4:
82:de:98:88:06:f8:0a:82:38:45:91:04:c2:a7:51:46:90:df:
7a:7d:b5:77:c8:ec:bc:5a:b5:55:da:44:7a:aa:29:a9:c3:28:
36:fe:8f:e1:ca:28:b6:4d:25:1d:a8:88:77:b7:2a:c2:c5:8a:
9c:df:1d:db:5d:48:fc:6a:31:c8:70:59:c2:52:89:47:4b:2b:
e3:ab:1e:a5:ae:a0:dc:4e:80:27:27:70:e9:fd:86:b4:d0:88:
05:b0:8b:7b:e8:97:61:ed:42:e2:32:1c:fc:26:0a:21:aa:65:
3e:c3:87:90:c3:e2:97:0e:f2:34:5a:70:68:b4:af:fd:d6:28:
2e:c5:52:e1:a6:de:a1:50:0e:33:f6:21:dc:1c:bd:e5:d3:58:
e5:10:8e:2b
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZ26xkU4GfMLQVU62L8hsC2zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNDIzMTQzNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjY4OTY2NGU5ODVlOTczY2Q3YzI3YmM0MjVjNmQ2NWJmNWE2ZDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BGEzYBV5QysjLjhpsF1d6WqXR48
OwDp9YE4V6ij9HqLFgYJ0AIwZQBj+xu4opoAjRr2dFOvtpI26Nbr4yqlJVDXZ5ek
gbUUTTy7QGxfNm4o73WJFwF3JZNBG4UnqsLbJyMjOrYLxM5d9/lfYlJ1fk9oLDC8
dMFvw7qcsCCMsQvS3h6pNIFBV6hd1xfQeNhtHBosi88vhPvtAxDJQ3oIMvTE0TZq
KzrPam6Wsan4t7EYI2mHPE9NENMnV6YTEeTheCqfE93O12YLX8QJNMUX2vIl0R2V
X/6nRRjwN13Rs6ty7bFt9Doek3GeDIePyaqxdWco2Hy2uek8dpiQW97rmwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFBZolmTphelzzXwnvEJcbWW/Wm0UMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvRm1pV1pPbUY2WFBOZkNlOFFseHRaYjlhYlJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAl/QmAwQA
l/Q0AwQAl/R2AwQAl/TdAwQAl/biAwQAl/cbAwQAl/dcAwQAl/eXMA0GCSqGSIb3
DQEBCwUAA4IBAQCMmkvOJ8gbakjczC8RsiW5iUHzVTaArGFwvJajL0G3mE8VeDtd
y/dgTHZ546AEXwqtKiAPo1deHLbZBWb5uHv+zseP1aVwcfr9YS+7jIqdrAv+/kOM
jvmqUFwy4NITLFJ63gKbnHlUUbX0r/SC3piIBvgKgjhFkQTCp1FGkN96fbV3yOy8
WrVV2kR6qimpwyg2/o/hyii2TSUdqIh3tyrCxYqc3x3bXUj8ajHIcFnCUolHSyvj
qx6lrqDcToAnJ3Dp/Ya00IgFsIt76Jdh7ULiMhz8JgohqmU+w4eQw+KXDvI0WnBo
tK/91iguxVLhpt6hUA4z9iHcHL3l01jlEI4r
-----END CERTIFICATE-----
Generated at Mon Apr 27 07:55:14 2026 by rpki-client