Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QYSgaZQb-CoH4B3mwszxWmIFc9c.roa
File: QYSgaZQb-CoH4B3mwszxWmIFc9c.roa (raw, json)
Hash identifier: x/XK8f5xfBfAtCd3yQS9azQdgGVPYCXgJwQgvPZS7SQ=
Subject key identifier: 41:84:A0:69:94:1B:F8:2A:07:E0:1D:E6:C2:CC:F1:5A:62:05:73:D7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E276D0AD2AFD9C95926CAF833CD0668CD
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QYSgaZQb-CoH4B3mwszxWmIFc9c.roa
Signing time: Thu 14 May 2026 16:58:38 +0000
ROA not before: Thu 14 May 2026 16:58:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207019
IP address blocks: 151.246.152.0/24 maxlen: 24
151.246.156.0/24 maxlen: 24
151.246.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:27:6d:0a:d2:af:d9:c9:59:26:ca:f8:33:cd:06:68:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 14 16:58:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4184a069941bf82a07e01de6c2ccf15a620573d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d0:5e:b4:4c:a6:61:3e:01:76:5b:58:b3:b9:
60:7b:6a:41:50:b6:10:76:ba:59:10:07:0c:c0:af:
a8:54:2b:00:76:74:1f:fe:62:54:fb:6d:ca:5d:f4:
89:61:2b:fa:a5:3d:97:09:b8:c3:16:ad:4f:85:d1:
e2:3e:a4:53:e9:b3:44:0b:7f:16:73:9d:3f:29:79:
8e:5d:9b:3f:60:a1:6b:d7:97:c0:e5:48:48:b1:41:
86:44:af:61:1f:73:2b:5b:e2:c8:c6:0b:70:84:ec:
2a:95:10:2d:38:1a:90:ed:b6:eb:8f:bd:f5:e4:13:
76:b7:60:6b:98:db:5e:97:e5:f6:62:99:13:9f:fc:
dc:2f:d6:95:24:73:e4:eb:0c:d8:55:ab:5f:f8:14:
1a:04:3b:ea:35:5a:97:8c:1d:3f:ed:3b:b0:9b:58:
32:b5:71:40:1c:cb:71:46:1a:42:4e:19:97:67:3c:
56:05:71:40:63:05:fe:58:3f:5f:5e:9f:85:26:93:
c8:4e:2d:78:47:4e:7c:5d:6a:73:a5:92:2f:19:90:
e8:9e:7d:39:53:ea:c5:22:a1:82:0b:ba:97:cb:a0:
70:94:4b:16:6a:e6:5a:1a:c9:36:d0:35:6c:ea:9b:
8f:2d:a8:e5:3b:e3:af:8e:36:42:e4:12:d6:70:a3:
6e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:84:A0:69:94:1B:F8:2A:07:E0:1D:E6:C2:CC:F1:5A:62:05:73:D7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QYSgaZQb-CoH4B3mwszxWmIFc9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.152.0/24
151.246.156.0/24
151.246.158.0/24
Signature Algorithm: sha256WithRSAEncryption
44:f2:58:c2:f5:85:1e:03:f3:25:0d:f9:8f:b7:2a:1e:0a:72:
a3:d5:07:d0:48:2a:7b:c7:f3:a3:96:83:2a:42:7a:34:e9:ed:
7f:41:bb:57:23:39:37:a3:80:16:ea:ef:2c:e5:2c:46:d3:5d:
be:ee:b9:3d:92:00:74:3e:7f:ad:2d:b9:09:3a:9a:1c:27:22:
ba:34:0b:00:a5:db:7b:c8:59:a6:cf:6e:02:7d:fe:d8:5f:70:
06:ba:ec:8e:6e:2f:72:d7:93:f9:a2:9c:80:c3:b8:a3:a2:53:
35:39:30:17:fd:be:97:aa:d1:01:2e:a6:dd:d2:7f:e1:de:66:
e1:7c:9f:55:72:81:36:55:5c:cb:90:fe:f4:35:8b:97:08:4a:
23:44:40:5f:17:11:89:51:34:79:55:88:0a:bd:61:f7:51:18:
7a:88:93:35:39:8e:67:5d:7d:80:aa:00:64:b4:b0:5f:80:93:
02:91:09:59:37:93:15:09:fc:00:ba:74:50:38:e5:5d:58:d7:
1f:6b:ea:cb:fc:e4:ae:17:9c:c4:ab:a2:2a:98:56:58:a0:10:
61:4b:a9:a6:60:d0:0b:b6:ab:cc:f2:40:b0:32:d7:65:e4:34:
c0:b1:b7:d6:fa:80:0e:5b:19:f1:f1:db:c7:9f:b7:58:33:91:
b1:11:0e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:32:21 2026 by rpki-client