Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JQHuc_MsDTPjTOg2D12GUFUKnhc.roa
File: JQHuc_MsDTPjTOg2D12GUFUKnhc.roa (raw, json)
Hash identifier: ztZHOxitr6MqJwgcXvhJzabrcgLnCkE/t07WKAfReBU=
Subject key identifier: 25:01:EE:73:F3:2C:0D:33:E3:4C:E8:36:0F:5D:86:50:55:0A:9E:17
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A1298F3DC7DB867F4BFC23011CC1A7E696
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JQHuc_MsDTPjTOg2D12GUFUKnhc.roa
Signing time: Sun 11 Oct 2026 06:03:35 +0000
ROA not before: Sun 11 Oct 2026 06:03:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213347
IP address blocks: 151.242.10.0/24 maxlen: 24
151.243.25.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:8f:3d:c7:db:86:7f:4b:fc:23:01:1c:c1:a7:e6:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 11 06:03:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2501ee73f32c0d33e34ce8360f5d8650550a9e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d3:d5:89:4a:bd:98:a2:c7:36:ee:8b:31:28:
f6:84:b0:1f:a8:64:ac:76:fa:26:a9:44:f6:c4:f3:
f5:36:00:87:9d:23:df:db:32:04:e1:45:13:a0:e9:
4d:ed:18:78:5a:13:76:af:db:43:12:62:5c:c4:94:
07:1b:a9:8a:ff:8e:f7:b4:7f:1a:11:e9:ff:21:32:
3e:f1:99:a5:9b:3e:68:fd:ce:a5:c2:9d:5a:81:2f:
c9:2c:4b:3b:c2:69:26:ef:9d:50:1f:46:ff:60:e0:
e7:ef:64:57:5a:e2:ed:cf:62:53:61:4d:b0:8e:d4:
cb:83:ec:4b:4f:b5:43:41:cc:1e:e1:29:10:e5:3c:
3f:af:73:04:8f:81:cf:ba:9b:b8:a1:b2:e9:69:47:
c0:15:f8:cb:08:1d:1f:cb:7c:08:6a:bc:3b:7c:74:
cf:fb:e2:ef:0b:e3:a4:1a:cd:7a:69:3a:1f:2c:93:
42:35:81:a9:ae:de:1a:6f:bc:97:4d:6b:06:43:d5:
cc:63:67:b2:8d:93:8c:1b:4c:6a:31:24:59:1c:dc:
c6:c5:49:c8:d6:19:b5:37:d8:16:45:19:eb:65:d9:
fe:57:96:50:60:80:e5:02:e9:ba:87:85:97:c4:33:
bb:12:d5:87:f5:0f:65:59:b3:2a:38:aa:f6:96:e5:
33:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:01:EE:73:F3:2C:0D:33:E3:4C:E8:36:0F:5D:86:50:55:0A:9E:17
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JQHuc_MsDTPjTOg2D12GUFUKnhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.10.0/24
151.243.25.0/24
151.247.241.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:2e:73:d3:e3:61:80:2c:bc:74:0b:4a:3c:87:ab:41:89:25:
42:d6:ca:d0:c9:07:40:ff:f5:ff:02:30:7f:62:fc:f2:1c:ed:
5c:81:2b:91:f8:1a:d9:ca:19:1a:f0:0f:80:65:ad:33:1e:6b:
f2:19:cd:91:89:3a:57:54:33:cb:90:f1:fe:d0:a1:09:6c:1c:
5b:da:51:da:20:12:5c:fd:b2:be:0d:f9:69:57:ea:78:22:9e:
96:90:fa:d0:11:5d:bf:7f:1d:fa:b5:95:f7:2d:6c:bd:a9:9d:
28:7c:07:97:b1:c0:30:ab:42:94:7d:06:8f:6e:24:4a:bd:0a:
6e:ac:e6:59:99:c7:76:43:a0:6d:7f:9f:79:75:f9:49:83:05:
5c:8f:e7:5b:93:b7:5d:b4:60:25:b2:b8:c3:5c:56:63:1c:48:
a3:b6:be:44:92:e2:41:2b:e4:d3:37:22:02:6d:21:f7:b9:36:
fd:ba:86:e3:6f:f6:e9:0a:73:be:3d:d4:30:9d:e9:3c:ef:28:
27:e8:4b:0e:37:52:94:33:3c:82:38:e8:35:70:92:fc:2f:18:
3f:17:f3:47:88:a3:d9:4d:fb:03:0b:66:e4:f1:6c:be:60:2d:
d4:b3:87:f1:ef:65:b8:c9:7b:1f:af:cb:a0:76:56:68:40:96:
d6:b8:fd:2a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaEpjz3H24Z/S/wjARzBp+aWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYxMDExMDYwMzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTAxZWU3M2YzMmMwZDMzZTM0Y2U4MzYwZjVkODY1MDU1MGE5ZTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9PViUq9mKLHNu6LMSj2hLAfqGSs
dvomqUT2xPP1NgCHnSPf2zIE4UUToOlN7Rh4WhN2r9tDEmJcxJQHG6mK/473tH8a
Een/ITI+8Zmlmz5o/c6lwp1agS/JLEs7wmkm751QH0b/YODn72RXWuLtz2JTYU2w
jtTLg+xLT7VDQcwe4SkQ5Tw/r3MEj4HPupu4obLpaUfAFfjLCB0fy3wIarw7fHTP
++LvC+OkGs16aTofLJNCNYGprt4ab7yXTWsGQ9XMY2eyjZOMG0xqMSRZHNzGxUnI
1hm1N9gWRRnrZdn+V5ZQYIDlAum6h4WXxDO7EtWH9Q9lWbMqOKr2luUz9QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCUB7nPzLA0z40zoNg9dhlBVCp4XMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvSlFIdWNfTXNEVFBqVE9nMkQxMkdVRlVLbmhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/IKAwQA
l/MZAwQAl/fxMA0GCSqGSIb3DQEBCwUAA4IBAQBOLnPT42GALLx0C0o8h6tBiSVC
1srQyQdA//X/AjB/YvzyHO1cgSuR+BrZyhka8A+AZa0zHmvyGc2RiTpXVDPLkPH+
0KEJbBxb2lHaIBJc/bK+DflpV+p4Ip6WkPrQEV2/fx36tZX3LWy9qZ0ofAeXscAw
q0KUfQaPbiRKvQpurOZZmcd2Q6Btf595dflJgwVcj+dbk7ddtGAlsrjDXFZjHEij
tr5EkuJBK+TTNyICbSH3uTb9uobjb/bpCnO+PdQwnek87ygn6EsON1KUMzyCOOg1
cJL8Lxg/F/NHiKPZTfsDC2bk8Wy+YC3Us4fx72W4yXsfr8ugdlZoQJbWuP0q
-----END CERTIFICATE-----
Generated at Mon Oct 19 03:08:35 2026 by rpki-client