Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/H0tZiHLRgYjd46OcsnP2SQ9wr4E.roa
File: H0tZiHLRgYjd46OcsnP2SQ9wr4E.roa (raw, json)
Hash identifier: hwx+hAVwDMW2EWmaOJ1YDqypeDu1wti4juvN5uhIBhI=
Subject key identifier: 1F:4B:59:88:72:D1:81:88:DD:E3:A3:9C:B2:73:F6:49:0F:70:AF:81
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CD759CDC774949FBB13646957BA3BA03B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/H0tZiHLRgYjd46OcsnP2SQ9wr4E.roa
Signing time: Tue 10 Mar 2026 10:45:12 +0000
ROA not before: Tue 10 Mar 2026 10:45:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63473
IP address blocks: 151.241.5.0/24 maxlen: 24
151.241.113.0/24 maxlen: 24
151.242.15.0/24 maxlen: 24
151.242.74.0/24 maxlen: 24
151.242.85.0/24 maxlen: 24
151.243.148.0/24 maxlen: 24
151.245.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 07:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:59:cd:c7:74:94:9f:bb:13:64:69:57:ba:3b:a0:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 10 10:45:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1f4b598872d18188dde3a39cb273f6490f70af81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1a:ae:57:bc:6d:57:be:8c:18:b6:df:f8:62:
d4:b7:e2:89:18:d5:10:63:47:bd:09:0b:f5:30:04:
44:7c:5b:ef:68:b4:f3:40:74:da:b9:33:fe:71:5c:
e5:3b:03:08:ce:95:af:b8:b8:ca:f9:64:08:57:60:
49:d4:ac:f0:35:df:b2:86:37:91:c3:a5:70:e4:cb:
1f:c3:0b:86:42:3f:60:36:be:9d:e4:fe:bb:ad:1a:
83:12:12:76:a9:aa:02:5e:d1:6a:24:70:ef:67:46:
3e:75:3c:3f:ee:6c:69:88:5d:ba:b2:96:35:44:26:
7b:ad:57:0e:b6:26:ca:8e:ae:16:c5:5d:85:66:1d:
c4:cb:af:22:30:ed:fd:a8:b7:49:57:84:14:77:9c:
5c:b0:ad:db:ba:22:c2:3a:02:5b:66:1d:f9:56:d4:
ac:34:b9:16:64:ab:14:c6:f1:f5:a3:0d:ca:52:31:
b6:16:a1:39:9d:c1:76:9f:bd:64:f0:13:a5:0c:44:
d1:ce:0c:08:9b:67:3c:09:75:5d:50:3a:e5:36:ef:
a2:8d:b2:a4:40:aa:5e:95:55:3f:61:1c:16:34:53:
5f:ce:ca:2d:29:cf:5e:3d:d0:03:d5:5f:3e:77:e9:
4d:2a:8c:35:6c:54:d3:9c:88:68:ca:d2:bd:99:eb:
47:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4B:59:88:72:D1:81:88:DD:E3:A3:9C:B2:73:F6:49:0F:70:AF:81
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/H0tZiHLRgYjd46OcsnP2SQ9wr4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.5.0/24
151.241.113.0/24
151.242.15.0/24
151.242.74.0/24
151.242.85.0/24
151.243.148.0/24
151.245.106.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:39:2f:f6:66:e5:25:54:2c:2d:8c:2b:5f:c1:0a:16:93:5c:
0e:01:5f:b7:4f:64:58:5c:1d:2b:1b:eb:0f:71:27:48:29:c8:
eb:83:41:1c:ad:3a:2d:a0:d8:15:e9:7a:8b:a6:ae:a7:e9:e7:
67:be:5b:4e:d3:39:a7:9d:c2:65:00:a4:01:de:1d:29:90:57:
8c:bc:f8:f6:97:21:7b:3d:02:de:e9:e7:66:8b:37:a3:9f:82:
13:14:c5:3c:9b:78:32:97:14:e0:16:7e:41:d1:5e:24:e6:d7:
bb:7b:d4:2e:c5:cf:b2:53:7e:40:b8:8d:a2:96:ca:0e:1b:81:
bc:6d:78:ae:64:df:4e:c3:e3:f2:47:fa:43:24:2f:c3:6e:d7:
3c:2a:51:c2:97:07:3d:42:1a:60:d3:00:31:6b:82:b3:d9:96:
b5:a0:55:39:f3:90:a5:0f:60:1e:b5:bb:bc:17:3a:5e:f3:63:
29:f4:68:0f:5f:b4:d0:65:7b:44:99:1e:6a:c2:8f:8a:8c:59:
20:bd:35:92:d3:0c:0a:b9:4b:93:e7:b4:a6:4e:fe:0d:b7:68:
f3:fb:59:f9:3e:5b:56:35:36:39:06:a2:1a:82:28:2f:12:26:
c1:81:6d:fb:ff:55:c6:09:9e:a0:af:0b:b3:ea:49:71:fe:86:
ee:4f:a6:e9
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZzXWc3HdJSfuxNkaVe6O6A7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwMzEwMTA0NTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjRiNTk4ODcyZDE4MTg4ZGRlM2EzOWNiMjczZjY0OTBmNzBhZjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRquV7xtV76MGLbf+GLUt+KJGNUQ
Y0e9CQv1MAREfFvvaLTzQHTauTP+cVzlOwMIzpWvuLjK+WQIV2BJ1KzwNd+yhjeR
w6Vw5MsfwwuGQj9gNr6d5P67rRqDEhJ2qaoCXtFqJHDvZ0Y+dTw/7mxpiF26spY1
RCZ7rVcOtibKjq4WxV2FZh3Ey68iMO39qLdJV4QUd5xcsK3buiLCOgJbZh35VtSs
NLkWZKsUxvH1ow3KUjG2FqE5ncF2n71k8BOlDETRzgwIm2c8CXVdUDrlNu+ijbKk
QKpelVU/YRwWNFNfzsotKc9ePdAD1V8+d+lNKow1bFTTnIhoytK9metHyQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFB9LWYhy0YGI3eOjnLJz9kkPcK+BMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvSDB0WmlITFJnWWpkNDZPY3NuUDJTUTl3cjRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAl/EFAwQA
l/FxAwQAl/IPAwQAl/JKAwQAl/JVAwQAl/OUAwQAl/VqMA0GCSqGSIb3DQEBCwUA
A4IBAQCnOS/2ZuUlVCwtjCtfwQoWk1wOAV+3T2RYXB0rG+sPcSdIKcjrg0EcrTot
oNgV6XqLpq6n6ednvltO0zmnncJlAKQB3h0pkFeMvPj2lyF7PQLe6edmizejn4IT
FMU8m3gylxTgFn5B0V4k5te7e9Quxc+yU35AuI2ilsoOG4G8bXiuZN9Ow+PyR/pD
JC/Dbtc8KlHClwc9Qhpg0wAxa4Kz2Za1oFU585ClD2Aetbu8Fzpe82Mp9GgPX7TQ
ZXtEmR5qwo+KjFkgvTWS0wwKuUuT57SmTv4Nt2jz+1n5PltWNTY5BqIagigvEibB
gW37/1XGCZ6grwuz6klx/obuT6bp
-----END CERTIFICATE-----
Generated at Fri Mar 13 16:25:38 2026 by rpki-client