Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KMHfKIKSLJ8l7D6Qi-A90zCQj-c.roa
File: KMHfKIKSLJ8l7D6Qi-A90zCQj-c.roa (raw, json)
Hash identifier: HOTXXsObVR7ml6MEvoI/K5d+jc594e/hOiKRyCzcFm8=
Subject key identifier: 28:C1:DF:28:82:92:2C:9F:25:EC:3E:90:8B:E0:3D:D3:30:90:8F:E7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FBBC01BCD60BA020EF7C35E8C7675FD4C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KMHfKIKSLJ8l7D6Qi-A90zCQj-c.roa
Signing time: Sat 01 Aug 2026 05:15:57 +0000
ROA not before: Sat 01 Aug 2026 05:15:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 151.240.205.0/24 maxlen: 24
151.241.119.0/24 maxlen: 24
151.241.122.0/24 maxlen: 24
151.243.227.0/24 maxlen: 24
151.243.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bb:c0:1b:cd:60:ba:02:0e:f7:c3:5e:8c:76:75:fd:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 1 05:15:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28c1df2882922c9f25ec3e908be03dd330908fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:3f:f0:ed:33:25:3c:a5:a6:d8:58:78:aa:
e1:b2:2d:7c:52:d0:ee:9e:62:83:75:e2:2c:9b:65:
c5:12:ce:9e:bf:08:53:b6:ac:7f:0e:2d:69:d3:c7:
b7:17:9c:cd:67:42:bb:82:39:b9:6c:e7:f0:e4:58:
8c:78:cf:a6:28:63:61:41:3d:4b:6f:3f:bb:bd:9c:
50:87:61:ec:2d:55:f3:a1:48:21:77:d4:7a:26:64:
f2:ea:a9:ee:8d:5b:ac:3a:84:c6:aa:fd:ed:60:61:
60:94:4e:6d:d4:13:06:70:b8:4b:95:5a:cf:ca:b6:
94:ee:28:7d:7b:78:c1:07:59:09:f9:44:7d:e0:52:
0b:d6:f8:62:89:c8:fc:42:0b:0c:a1:ce:19:9c:d7:
be:77:c4:d5:27:be:9e:e4:54:f4:e2:0f:3b:64:63:
fe:8d:80:6f:74:5b:60:85:96:4d:c4:fa:1f:23:9a:
07:78:b4:65:88:4d:35:cc:1e:6b:c8:c0:b0:a2:6b:
76:47:86:ec:81:ef:10:4e:85:0e:ca:14:68:6e:5c:
02:1e:65:b0:a4:b2:d4:cf:1f:87:06:57:bf:2d:83:
01:1b:d2:6d:79:5f:18:0b:19:b9:0f:8a:ff:2f:df:
06:04:18:85:27:50:a8:7c:4c:13:1d:f8:d4:0a:68:
b2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C1:DF:28:82:92:2C:9F:25:EC:3E:90:8B:E0:3D:D3:30:90:8F:E7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KMHfKIKSLJ8l7D6Qi-A90zCQj-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.205.0/24
151.241.119.0/24
151.241.122.0/24
151.243.227.0/24
151.243.235.0/24
Signature Algorithm: sha256WithRSAEncryption
30:67:9d:b0:98:8f:9e:62:6b:68:33:c1:66:ea:e4:d7:f7:9a:
7c:1e:6e:67:b4:e8:41:46:b1:a4:52:f4:62:9c:58:98:08:43:
d3:6c:2e:b6:dd:3a:c6:f2:a3:ab:1a:a9:c9:70:78:12:f5:01:
0c:a7:b8:ec:1a:cd:4b:af:a3:03:43:87:f4:fa:da:20:31:68:
c9:10:fc:82:5d:2d:92:16:c3:9a:e8:38:0b:f3:01:fa:b5:10:
8a:6b:d6:66:9b:3b:00:e9:20:47:d2:60:3c:11:c2:8f:98:8c:
36:44:7d:13:39:ab:23:3b:72:c8:83:69:d0:04:bb:2e:2d:d9:
3a:c6:60:ab:10:52:01:51:72:4a:7f:78:33:e1:cc:e4:2f:f0:
4b:72:26:f9:23:fc:ba:86:53:22:4d:49:00:e3:21:22:48:51:
b0:88:0e:a3:64:28:3b:d5:ba:d7:9b:fd:99:07:fc:b6:3b:ff:
d9:5f:00:d3:9c:e2:6d:e5:f2:81:79:af:90:2e:6e:a1:6f:be:
39:65:32:39:b2:ae:c8:c4:df:b9:68:63:94:ae:fa:f2:3c:ac:
74:8e:3b:18:ac:f9:e0:62:62:6f:d4:cc:ac:16:35:5f:ad:e7:
36:0f:c9:9e:78:e0:6c:9e:ef:68:9f:2c:2f:09:4b:1d:59:e8:
b0:49:37:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 07:54:12 2026 by rpki-client