Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NIYfVMm5jnFRnk-UrqaqVwnJ_70.roa
File: NIYfVMm5jnFRnk-UrqaqVwnJ_70.roa (raw, json)
Hash identifier: m0tz2IsNFS20/v6LDVOEx9zV5wX5MPQG7QtoDWMGe/M=
Subject key identifier: 34:86:1F:54:C9:B9:8E:71:51:9E:4F:94:AE:A6:AA:57:09:C9:FF:BD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A02517743F8D6E05297D635452E4442B59
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NIYfVMm5jnFRnk-UrqaqVwnJ_70.roa
Signing time: Fri 21 Aug 2026 16:11:29 +0000
ROA not before: Fri 21 Aug 2026 16:11:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 151.240.146.0/23 maxlen: 24
151.240.148.0/23 maxlen: 24
151.242.236.0/22 maxlen: 24
151.247.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:17:74:3f:8d:6e:05:29:7d:63:54:52:e4:44:2b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 21 16:11:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34861f54c9b98e71519e4f94aea6aa5709c9ffbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:93:43:02:a0:51:74:79:ce:68:f6:e0:c1:cd:
37:4c:ca:d5:b2:ae:19:74:ae:99:2d:5f:2b:c9:88:
4c:2a:36:24:f3:d4:7e:09:6e:aa:9c:dd:5a:75:79:
24:35:9d:29:bf:ee:18:51:a4:01:98:49:61:1a:b3:
3b:1a:15:5b:4f:fc:9c:7a:69:11:cc:9e:e3:8e:06:
12:ff:b0:00:b8:aa:fc:b2:c6:27:a7:fc:86:d2:16:
99:2e:db:68:8d:f6:ce:db:82:fe:02:c4:6d:1d:e8:
52:58:1c:cd:e0:78:e2:ed:af:93:bc:2c:3a:da:fe:
b9:a0:3c:27:6f:59:81:49:5a:af:c5:27:be:c8:fc:
69:95:d6:43:69:0a:16:97:f0:e7:7e:d0:ba:68:c0:
44:a2:fd:a7:25:13:58:24:cc:03:6a:00:44:16:d5:
e6:2c:a5:62:63:e1:37:ff:a0:17:eb:9b:0e:f2:08:
e4:14:e6:1c:d3:4f:42:b6:1c:5a:19:84:1c:fe:cd:
f6:a5:9f:6b:36:7b:d6:f2:4c:19:65:44:0e:b3:89:
be:44:d3:16:22:99:24:85:61:50:a8:df:00:6c:7d:
d8:00:34:86:05:1d:2d:fb:30:a9:b1:51:f2:f4:b0:
f4:5f:f2:27:56:8b:97:09:6a:39:98:d0:9a:3f:35:
90:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:86:1F:54:C9:B9:8E:71:51:9E:4F:94:AE:A6:AA:57:09:C9:FF:BD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NIYfVMm5jnFRnk-UrqaqVwnJ_70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.146.0-151.240.149.255
151.242.236.0/22
151.247.84.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:04:ea:f8:30:f2:1f:2c:4f:d6:83:38:7c:03:e1:3f:77:cc:
60:e6:0b:6b:3d:bd:a2:84:73:36:a1:c5:aa:e1:e9:84:18:6a:
7c:fd:0e:90:f0:2d:2b:b4:d6:e3:87:11:fe:af:7b:be:b3:be:
2f:29:fb:bd:ba:89:c3:68:2f:30:86:3a:4a:88:74:e5:d2:07:
13:90:79:41:7c:88:58:48:bd:08:bc:80:c4:5a:50:44:9c:aa:
2a:83:eb:d9:95:60:5b:04:96:cb:ad:01:f6:af:a1:9c:25:e0:
1a:67:61:88:ef:67:81:58:27:f5:95:a1:74:0a:92:8b:48:55:
20:3e:4b:59:25:ac:1d:91:cb:76:8f:fc:ba:87:a1:ec:64:77:
81:47:64:b5:69:3d:c1:56:ea:ae:bd:33:55:13:de:b3:e4:b7:
a9:af:d7:c5:43:94:ee:15:6a:92:68:43:cb:2b:70:d1:6b:d0:
72:24:70:e8:30:40:9d:65:75:f2:80:ea:d5:39:28:8a:2b:aa:
98:84:2c:ed:b8:f2:0e:d9:f4:9a:c2:f4:99:d2:07:3d:8b:c3:
47:45:da:a8:8e:75:10:59:c9:9e:c9:88:27:c0:4d:6d:48:2e:
49:f8:86:37:53:af:80:21:ed:9c:f0:d8:04:24:95:cb:31:e3:
6f:ee:77:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:07:56 2026 by rpki-client