Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HTAJEhWBFDcVVAsCS73hcgWIf1c.roa
File: HTAJEhWBFDcVVAsCS73hcgWIf1c.roa (raw, json)
Hash identifier: dpGZaNSLrblyBGVMNjAMXs5M0TJ71YPXMG5ao+0ZLyk=
Subject key identifier: 1D:30:09:12:15:81:14:37:15:54:0B:02:4B:BD:E1:72:05:88:7F:57
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EF44CD6D5C8EAF809D9FD2AA23DB5D910
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HTAJEhWBFDcVVAsCS73hcgWIf1c.roa
Signing time: Tue 23 Jun 2026 11:45:36 +0000
ROA not before: Tue 23 Jun 2026 11:45:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9457
IP address blocks: 151.246.129.0/24 maxlen: 24
151.247.79.0/24 maxlen: 24
151.247.111.0/24 maxlen: 24
151.247.180.0/24 maxlen: 24
151.247.237.0/24 maxlen: 24
151.247.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:4c:d6:d5:c8:ea:f8:09:d9:fd:2a:a2:3d:b5:d9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 23 11:45:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d3009121581143715540b024bbde17205887f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:ae:5f:90:33:ab:0d:48:f0:fd:15:44:a9:
8c:f3:a7:c8:f8:72:a6:79:6f:d4:3d:99:43:5e:c8:
51:f8:20:8e:8b:09:4f:87:26:96:b7:b8:b6:6b:01:
40:23:8b:90:29:ff:c1:4c:af:7f:d4:09:dc:62:0f:
f7:37:b3:d4:c2:34:cb:00:d2:96:9f:cc:e0:0e:d1:
81:be:76:04:51:b1:7d:10:0a:81:65:83:35:65:24:
1f:f3:75:58:2d:45:df:7c:e7:6b:de:7f:c9:a6:c8:
47:d0:53:3b:2e:bf:1b:78:57:0c:52:97:5f:49:0b:
ba:d0:80:e0:38:fc:0a:9d:54:e4:b2:44:04:ae:d0:
d4:b5:d0:0b:8f:78:c4:fe:16:a5:a3:c1:3f:f4:a9:
f9:a7:57:48:b4:39:0d:e6:28:77:8a:c0:7e:77:5d:
28:3f:5e:c2:28:9b:d2:26:1c:43:78:f6:e0:69:76:
33:a7:4c:b9:b5:87:5a:f2:67:0d:c1:81:d5:32:ac:
27:c6:8e:cd:96:6a:95:41:c6:77:e7:df:83:82:69:
7d:1a:b9:f9:d4:33:6a:1c:a0:ca:17:72:3d:5e:78:
4f:47:9b:0d:d5:da:dc:b9:6f:71:38:7e:c0:85:67:
50:aa:74:aa:12:a2:96:ba:b1:aa:84:23:db:b0:85:
74:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:30:09:12:15:81:14:37:15:54:0B:02:4B:BD:E1:72:05:88:7F:57
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HTAJEhWBFDcVVAsCS73hcgWIf1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.129.0/24
151.247.79.0/24
151.247.111.0/24
151.247.180.0/24
151.247.237.0/24
151.247.251.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:72:29:fb:d6:2b:c8:df:be:f9:2f:c6:c2:68:a1:65:ac:29:
0b:fa:ff:2a:aa:6b:09:61:c2:b4:71:f5:b0:29:c4:94:8c:9a:
72:dd:7d:b1:c4:67:22:8a:11:ea:3e:0d:a8:bb:41:7c:7c:13:
6e:e4:3b:09:e8:34:71:4a:fc:f0:78:59:1f:5a:65:63:18:9b:
12:45:21:f0:1f:c8:2c:4b:c7:18:65:7f:cc:14:61:87:46:9b:
95:81:7b:36:54:d1:c6:b1:56:f0:16:0d:e9:67:56:36:d9:72:
78:65:f9:12:0f:01:6b:8f:d1:88:b8:39:33:b1:03:93:bf:9f:
d4:60:7f:78:fb:71:34:c8:e3:17:55:71:06:60:32:3f:7a:65:
39:14:c1:e2:b0:a3:0f:ac:fc:70:85:bb:48:c5:99:e5:eb:c0:
89:d7:30:fc:58:d9:c9:3b:4d:6c:90:37:65:1e:23:77:e6:70:
fd:77:aa:46:90:3c:5c:79:e1:6e:14:f9:2a:c9:c6:f5:28:b5:
ca:fb:95:c1:05:d2:69:ba:29:45:5a:d1:16:3f:30:7f:9e:2b:
48:25:e1:11:69:f3:7a:81:94:aa:48:5e:b9:08:0c:e7:58:17:
c2:c8:9c:9e:35:cb:6d:1c:b1:f1:57:17:bf:69:70:90:d3:e0:
09:24:76:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 21:46:51 2026 by rpki-client