Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QG23hMGPBLMsZ46XXNBXkB_zvKQ.roa
File: QG23hMGPBLMsZ46XXNBXkB_zvKQ.roa (raw, json)
Hash identifier: Hpqiz0F7zA/UYyIAW8uVtWTdDzWkcMwsZRllCarLznc=
Subject key identifier: 40:6D:B7:84:C1:8F:04:B3:2C:67:8E:97:5C:D0:57:90:1F:F3:BC:A4
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F6ACD9A78952E6815AC340CF441EE940A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QG23hMGPBLMsZ46XXNBXkB_zvKQ.roa
Signing time: Thu 16 Jul 2026 12:01:27 +0000
ROA not before: Thu 16 Jul 2026 12:01:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152868
IP address blocks: 151.240.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:cd:9a:78:95:2e:68:15:ac:34:0c:f4:41:ee:94:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 16 12:01:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=406db784c18f04b32c678e975cd057901ff3bca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:50:cf:02:c9:90:c3:a6:67:93:e4:16:a0:a4:
f7:10:21:42:80:f4:6c:10:1f:1c:23:ab:45:2c:dd:
9a:a9:2c:bb:04:63:23:27:4a:45:82:6e:43:0b:dc:
ca:61:35:50:97:7f:64:82:5e:02:7f:ef:fb:7e:0d:
4a:ae:9d:6b:4a:89:12:63:c2:77:71:0c:0e:bb:a1:
64:0d:90:6c:18:3f:7b:f0:26:54:ef:f5:b3:00:40:
12:71:12:40:26:a0:88:25:ad:32:4c:7e:fc:89:e6:
64:ad:a5:70:90:ed:49:24:f9:09:1a:8d:40:af:91:
b0:be:c0:ae:e1:01:59:79:36:01:f1:e9:f1:c9:84:
5a:48:b4:0d:84:f1:bd:6e:bc:75:21:c8:27:e1:13:
51:9f:43:c6:80:b8:0a:54:f8:dd:34:cb:e8:79:bc:
ae:74:18:8c:b2:5b:02:b2:42:48:e6:04:b4:c9:bc:
d4:fc:54:98:61:89:fd:53:b3:c2:53:7d:9a:1f:ce:
c2:d0:66:7f:2d:95:ad:0b:7c:5a:db:45:bf:57:d4:
00:64:95:32:68:9e:05:a2:a3:a4:51:3b:9b:50:fe:
75:c9:79:b6:cd:11:65:81:0d:e6:5f:93:18:b3:75:
40:2d:8c:6f:67:5d:6d:38:75:f9:6a:c6:89:67:e8:
00:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6D:B7:84:C1:8F:04:B3:2C:67:8E:97:5C:D0:57:90:1F:F3:BC:A4
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QG23hMGPBLMsZ46XXNBXkB_zvKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.142.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:fe:e8:79:2c:e0:cd:70:2f:c9:ea:7b:50:75:73:8c:ec:29:
90:87:b2:4f:8b:82:d9:08:3f:1f:da:01:6c:b8:c6:a8:f0:f0:
96:5e:b1:9b:fa:76:3b:18:b0:f4:d0:f9:21:6b:b0:a1:b8:e8:
d2:6b:a2:c6:a8:73:59:f0:f1:26:ca:e5:86:ad:10:1d:2e:65:
bc:55:ad:e5:21:de:45:9a:7a:d8:83:c9:ac:b3:f2:30:7e:ce:
81:28:94:c6:a9:32:6f:5b:71:2d:41:b4:a4:c8:b7:57:4a:1a:
ba:62:04:d5:cd:48:91:d5:2c:a8:58:0d:4b:89:8b:14:88:2d:
11:f3:10:48:53:cd:6f:89:ee:88:6e:81:80:1f:54:9b:7e:31:
80:9e:d5:76:45:03:df:20:9d:f3:20:8a:31:e3:46:60:18:5f:
25:17:53:76:0b:db:b2:5d:84:5b:ab:c4:97:b0:5f:23:e8:f5:
4c:08:7e:09:a8:4e:b1:62:86:75:0c:00:3d:ab:6a:2d:d5:38:
b7:21:c8:62:6d:62:d9:1a:5d:d3:cc:b0:ac:64:0f:d5:8e:49:
1a:1f:dc:25:a7:6b:ea:40:06:d2:6e:37:cd:9d:5e:50:7c:fc:
f3:fe:14:71:34:5e:b6:3b:80:65:c3:e1:28:a7:d2:96:a3:f1:
6d:15:d7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:58:40 2026 by rpki-client