Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HAhDl0aiAS5K-aoOnNjH6kaSSQA.roa
File: HAhDl0aiAS5K-aoOnNjH6kaSSQA.roa (raw, json)
Hash identifier: ejptmvxKZGDUbtkZUHg6TgwgszoMwU/iLV0+9HsoPX0=
Subject key identifier: 1C:08:43:97:46:A2:01:2E:4A:F9:AA:0E:9C:D8:C7:EA:46:92:49:00
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FF01F055448317F219EC272537DE12697
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HAhDl0aiAS5K-aoOnNjH6kaSSQA.roa
Signing time: Tue 11 Aug 2026 09:19:52 +0000
ROA not before: Tue 11 Aug 2026 09:19:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399359
IP address blocks: 151.240.8.0/24 maxlen: 24
151.240.10.0/24 maxlen: 24
151.246.218.0/24 maxlen: 24
151.247.96.0/24 maxlen: 24
151.247.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 06:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:1f:05:54:48:31:7f:21:9e:c2:72:53:7d:e1:26:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 11 09:19:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c08439746a2012e4af9aa0e9cd8c7ea46924900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:69:50:13:4a:79:db:e6:e2:b8:47:4f:43:
2a:d7:17:e9:d2:12:12:67:08:af:bf:ca:10:35:be:
8c:fe:59:df:83:68:20:31:8a:4f:53:16:a5:95:da:
f0:6a:18:13:dd:5f:77:8e:d8:dd:7b:a3:c1:62:4a:
3d:98:31:6d:75:45:88:b1:a2:76:27:77:85:83:bb:
10:f4:e4:64:b3:6e:8c:78:d8:29:c1:10:a6:82:0b:
64:f1:9c:bc:60:e0:f5:b6:ff:fd:a0:75:e9:95:3a:
15:cc:97:c3:78:4e:d8:78:a5:8f:2b:41:00:45:da:
4d:23:62:ea:7d:41:0a:94:c4:87:70:d7:68:94:af:
a1:47:f2:42:ef:85:0f:31:c4:63:7a:63:d8:a4:83:
c5:a9:93:3b:07:fa:97:20:d8:9f:be:56:32:da:90:
88:a1:b5:b8:e3:02:e3:e2:d7:1e:b4:b8:20:69:04:
b1:63:1e:bc:c0:cf:b3:24:13:60:19:20:5e:73:1c:
ae:e4:eb:5f:6f:ba:d7:26:5b:20:11:2e:d9:d4:0d:
f2:4f:26:38:3b:ae:63:b2:6f:16:9c:61:7e:e8:a4:
98:82:51:3d:98:9e:6a:23:85:e0:f9:2e:18:85:64:
c0:c7:a3:e4:08:44:e3:fe:a1:96:84:3f:63:a8:86:
8b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:08:43:97:46:A2:01:2E:4A:F9:AA:0E:9C:D8:C7:EA:46:92:49:00
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HAhDl0aiAS5K-aoOnNjH6kaSSQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.8.0/24
151.240.10.0/24
151.246.218.0/24
151.247.96.0/24
151.247.98.0/24
Signature Algorithm: sha256WithRSAEncryption
73:a4:d6:ee:f3:c5:ba:1a:35:7f:d0:2f:54:fa:b8:a7:0d:3f:
40:3e:9e:52:03:de:8e:9b:dc:03:1e:f7:87:8c:d0:a9:95:8f:
f0:ac:04:8a:94:6c:9f:1b:7f:06:93:07:c5:dd:99:cc:e0:d5:
5a:7e:ba:62:5c:70:82:2e:16:db:51:82:41:28:c9:cc:5a:9d:
74:f4:7c:1b:89:fd:f7:df:fc:a0:d2:9c:f9:b0:d1:90:17:6d:
ea:d0:e6:c9:71:6b:72:58:cb:9a:80:28:80:96:c8:91:d1:34:
80:02:81:70:a2:6c:ec:48:af:12:30:1c:00:2d:94:43:9e:3d:
32:40:a6:ba:33:b5:bf:f8:1a:76:dd:13:9c:e1:49:c4:b7:d0:
c9:15:e9:76:71:48:d4:64:a2:87:fa:82:67:ac:d0:6c:a0:06:
9f:ab:dc:78:eb:ec:f5:ed:e2:c5:cf:d4:e1:40:99:d3:f4:82:
9b:a6:02:50:11:71:9d:77:cf:d0:50:8b:5d:a2:23:fa:f0:cc:
9a:74:8e:1a:18:65:20:c6:6e:34:ba:08:47:b8:65:12:97:2e:
e1:3d:c2:ae:d3:c9:58:e8:52:e7:99:9c:38:fb:ba:a1:fc:91:
66:61:b9:e2:b5:35:ea:31:76:29:44:e8:b2:66:43:1c:37:0b:
d5:54:2e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 08:36:20 2026 by rpki-client