Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QeAz2jEMI2J89HiY0J_hlN2xygo.roa
File: QeAz2jEMI2J89HiY0J_hlN2xygo.roa (raw, json)
Hash identifier: dt4gO2EMN9F0JFSrixN4HKWGJb3/NgMGUXsKx9nNPJU=
Subject key identifier: 41:E0:33:DA:31:0C:23:62:7C:F4:78:98:D0:9F:E1:94:DD:B1:CA:0A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A1161EE9DDDAFAFC39DBAD5724172A7A83
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QeAz2jEMI2J89HiY0J_hlN2xygo.roa
Signing time: Wed 07 Oct 2026 11:28:07 +0000
ROA not before: Wed 07 Oct 2026 11:28:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 151.240.118.0/24 maxlen: 24
151.243.87.0/24 maxlen: 24
151.243.174.0/24 maxlen: 24
151.245.119.0/24 maxlen: 24
151.247.50.0/23 maxlen: 24
151.247.52.0/23 maxlen: 24
151.247.184.0/23 maxlen: 24
151.247.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:1e:e9:dd:da:fa:fc:39:db:ad:57:24:17:2a:7a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 7 11:28:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41e033da310c23627cf47898d09fe194ddb1ca0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:84:76:e3:74:86:49:ae:b1:6e:74:d3:df:54:
0b:5b:76:7a:93:44:ff:37:a4:b8:e9:ae:76:83:ef:
0f:2a:0d:79:dc:1b:9b:78:51:5e:65:59:66:85:e0:
2a:7e:69:7e:51:d8:4e:f3:c1:30:b7:3b:14:92:7f:
09:21:47:e7:9c:4b:31:ec:58:70:58:c7:1c:cf:38:
d8:85:43:67:f5:5b:5e:3c:eb:35:84:a5:54:dd:30:
24:82:80:b0:3f:ef:82:55:62:a1:9b:94:80:94:e0:
f3:9d:06:66:3f:b8:11:ed:6c:17:b0:56:2a:81:1d:
42:03:8e:5d:a8:7f:db:de:f0:5b:5c:d0:64:16:30:
de:38:93:24:2f:85:62:00:35:8c:0a:ad:1e:68:70:
ed:c2:41:72:64:53:37:d5:51:fa:84:cd:07:fd:67:
0e:78:33:9c:b5:1a:49:bf:9c:d7:00:e5:20:52:e1:
f1:3e:f3:50:68:a5:b6:5c:fd:f6:cd:ee:aa:ac:ed:
ca:6a:1b:47:14:3d:d5:60:fb:e7:41:c4:86:5d:62:
3b:6c:f2:f2:3c:e3:e3:74:ba:46:0d:77:0a:a9:2f:
f0:71:a5:be:b4:a0:60:8b:fc:75:e2:0c:e2:50:ad:
6f:18:10:cf:b4:4c:e4:cd:f7:43:14:dc:94:42:76:
50:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E0:33:DA:31:0C:23:62:7C:F4:78:98:D0:9F:E1:94:DD:B1:CA:0A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QeAz2jEMI2J89HiY0J_hlN2xygo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.118.0/24
151.243.87.0/24
151.243.174.0/24
151.245.119.0/24
151.247.50.0-151.247.53.255
151.247.184.0/22
Signature Algorithm: sha256WithRSAEncryption
75:2c:8c:a2:95:30:3d:28:03:f1:2d:a7:8e:31:62:4c:39:17:
7f:15:c3:31:48:a7:ae:e2:e2:14:3e:b7:6c:10:0e:ac:c6:77:
e8:8d:a9:56:e0:c9:57:58:7b:15:bb:ee:a1:eb:f5:a7:f9:f4:
0d:5e:5a:b9:3f:1a:60:dc:aa:49:32:02:7e:43:12:00:fb:1f:
88:e5:5a:24:4c:bf:67:a8:e4:a0:13:c5:b4:99:f3:e4:63:df:
db:11:b1:60:4f:91:10:2d:26:8c:9f:8e:22:85:74:92:c8:fb:
89:b3:05:83:c0:43:00:d5:c1:c6:cb:59:84:5a:be:20:f2:ff:
8e:64:a5:2d:cd:49:87:f8:b0:0c:4f:72:19:64:20:fb:9c:56:
97:fa:fe:60:e2:7a:27:7f:45:cb:66:6b:9b:1f:ca:40:0e:f2:
c2:45:d1:37:77:f7:ff:8a:24:3d:ea:04:a0:0e:ae:3e:c5:e5:
c4:5b:c5:67:23:c8:03:98:eb:eb:58:42:b2:d6:ec:cd:ec:72:
ba:cb:de:be:b5:4c:b6:45:d6:f0:9e:c5:8f:f1:d4:ee:0b:e1:
44:76:55:3b:17:1e:59:7a:86:a5:78:da:56:9c:ed:b1:0e:1e:
82:41:9f:43:5d:60:e3:b3:1c:50:b3:e1:8f:42:53:93:fc:14:
43:62:94:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:37 2026 by rpki-client