Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JjqtLEbLaGEDMzh7zNzXJNNqfnw.roa
File: JjqtLEbLaGEDMzh7zNzXJNNqfnw.roa (raw, json)
Hash identifier: H/zHxTRYadpDo8gyaGOwXU30v3lZ6OWou0Jxo1cRTVA=
Subject key identifier: 26:3A:AD:2C:46:CB:68:61:03:33:38:7B:CC:DC:D7:24:D3:6A:7E:7C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A04329D95E8079DDBEC2A336FDF34478E7
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JjqtLEbLaGEDMzh7zNzXJNNqfnw.roa
Signing time: Thu 27 Aug 2026 12:20:11 +0000
ROA not before: Thu 27 Aug 2026 12:20:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151704
IP address blocks: 151.242.176.0/24 maxlen: 24
151.242.178.0/24 maxlen: 24
151.242.184.0/24 maxlen: 24
151.247.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:29:d9:5e:80:79:dd:be:c2:a3:36:fd:f3:44:78:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 27 12:20:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=263aad2c46cb68610333387bccdcd724d36a7e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cf:a4:c4:60:f8:ed:68:37:d7:0e:c7:47:4f:
a4:c9:89:93:e6:af:6b:50:9c:67:20:b2:c6:d0:e0:
68:66:f5:f9:3d:97:86:f5:1c:65:66:c3:aa:b7:19:
6a:65:5f:52:b3:b1:37:61:38:07:ca:3d:78:2f:bb:
69:7f:03:53:d3:a3:1d:db:f2:2d:43:1d:41:b6:19:
af:0e:d2:fc:e5:3e:b7:e8:f5:c9:d5:57:5c:ef:fc:
e8:8a:b3:0b:17:2f:cc:08:7e:2e:bd:c9:4e:32:3c:
ee:1a:cc:68:3e:99:a6:35:a5:1f:ed:83:f8:77:df:
e6:f3:80:74:f4:a0:87:5e:09:0c:be:01:00:b5:0a:
18:82:7d:40:76:b7:75:e0:8d:87:c9:cd:5b:76:a2:
ce:0e:6a:0e:c2:3b:e6:eb:b9:0f:50:7b:87:3d:8d:
c3:97:9a:27:06:a7:cb:ff:1a:e4:23:59:7d:c3:e7:
d5:6c:e5:59:63:d7:e1:f8:98:c7:ec:68:95:c0:33:
41:b5:92:2c:78:eb:af:3f:4e:b3:03:1f:11:80:fc:
a5:8d:53:31:66:df:0e:7e:f2:4e:a0:57:cd:2f:ee:
66:c5:71:89:fd:d5:f1:3c:84:a7:ae:74:f2:c5:d6:
9b:e7:a5:70:ff:a5:d8:80:6b:d1:b5:db:d7:38:27:
e9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3A:AD:2C:46:CB:68:61:03:33:38:7B:CC:DC:D7:24:D3:6A:7E:7C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JjqtLEbLaGEDMzh7zNzXJNNqfnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.176.0/24
151.242.178.0/24
151.242.184.0/24
151.247.13.0/24
Signature Algorithm: sha256WithRSAEncryption
55:fe:09:2d:4e:b2:93:81:3d:20:27:47:fa:2e:fc:32:be:d6:
49:e4:45:31:39:c3:12:dd:fa:6e:15:86:e9:35:34:a8:47:64:
13:ab:4a:30:67:88:c9:e0:a9:eb:c7:b7:d8:c7:3d:4f:2c:08:
3f:55:de:0e:bf:2e:33:73:d4:79:58:f2:6c:55:0d:f6:a2:97:
9f:92:0b:61:74:65:6e:05:5d:f1:5a:ae:82:a8:d4:28:7f:a1:
d0:be:92:b1:6e:7c:0e:bd:fc:3f:e3:00:7e:49:bb:c6:a7:38:
74:94:ac:c0:d4:66:c4:44:fc:18:84:34:a4:db:b8:57:ae:f0:
25:6c:34:14:35:ed:23:98:7a:60:1a:4d:16:03:63:86:bb:ae:
51:13:a2:2d:0b:e3:de:e5:ee:2d:47:10:db:dd:18:63:2d:b9:
de:0a:d9:43:30:65:ca:60:13:6b:18:ce:04:59:db:67:ef:b8:
0a:c1:f7:32:0f:d7:ff:3e:10:90:1a:a4:9f:85:61:46:e4:e1:
45:5b:66:b6:b3:bc:a0:64:aa:43:07:d7:d7:cd:25:5c:dd:2d:
06:24:24:f0:5d:3b:91:2a:4d:49:86:8f:e8:22:5f:4b:52:a7:
66:d7:d5:9a:13:e9:d8:3e:98:f7:4f:ad:7f:94:c3:c5:eb:a0:
6f:d2:a1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:16:55 2026 by rpki-client