Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R2B5f80N8uEvo1pYcBR0TyAtwAc.roa
File: R2B5f80N8uEvo1pYcBR0TyAtwAc.roa (raw, json)
Hash identifier: deetotEItxwrLAifd5JqoJJ+Pb9hhzU8XeKdmlaJfHU=
Subject key identifier: 47:60:79:7F:CD:0D:F2:E1:2F:A3:5A:58:70:14:74:4F:20:2D:C0:07
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A06698F41F8AB081C5640D0CA37B450280
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R2B5f80N8uEvo1pYcBR0TyAtwAc.roa
Signing time: Thu 03 Sep 2026 09:28:15 +0000
ROA not before: Thu 03 Sep 2026 09:28:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 151.240.126.0/23 maxlen: 24
151.242.148.0/24 maxlen: 24
151.242.204.0/24 maxlen: 24
151.245.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:98:f4:1f:8a:b0:81:c5:64:0d:0c:a3:7b:45:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 3 09:28:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4760797fcd0df2e12fa35a587014744f202dc007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fe:3c:3d:a3:b3:17:4f:f6:0f:9c:d4:66:0d:
48:66:44:17:70:e2:62:93:6e:3e:a0:ac:3e:d3:f6:
eb:10:b0:44:42:fc:e9:4e:95:51:df:14:0d:42:1c:
d3:69:7f:f7:92:3f:40:03:fb:a3:f1:75:e2:92:08:
71:90:df:83:54:9a:51:30:58:f2:78:25:20:65:fd:
0a:b4:49:cb:6e:1b:41:86:16:53:48:50:92:03:e6:
48:05:21:58:3a:53:0c:74:d2:e1:f6:ca:8d:71:83:
73:f8:da:8b:00:1e:be:23:4e:6c:e3:09:22:8f:8c:
76:46:41:1a:51:4e:e1:b8:ff:e1:71:94:2c:13:5e:
35:52:86:b5:3f:b5:27:c4:b7:66:b7:ba:80:f1:44:
74:d5:09:d8:0c:b3:23:95:b4:5b:d6:8a:b3:b2:4e:
2f:3c:1d:0a:dc:a6:f9:54:94:f8:86:af:9e:64:e9:
e3:b1:59:25:1e:e8:b2:75:e4:d1:b4:7a:5d:80:5f:
6b:d0:e2:bd:27:11:4b:c9:a4:f7:28:0b:17:7b:7e:
1c:2e:c6:a6:60:31:af:9e:ef:a7:03:42:a9:18:ef:
31:4c:98:f7:08:bc:31:b3:b5:85:64:14:93:c1:9d:
85:e0:8e:1e:cc:14:48:ed:6c:5c:c1:ca:9e:7a:97:
64:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:60:79:7F:CD:0D:F2:E1:2F:A3:5A:58:70:14:74:4F:20:2D:C0:07
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R2B5f80N8uEvo1pYcBR0TyAtwAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.126.0/23
151.242.148.0/24
151.242.204.0/24
151.245.124.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:7b:f2:cf:36:89:bd:3d:5c:c8:e5:c8:b1:2c:d8:c6:63:81:
5e:dd:6b:8e:e5:3f:ce:e1:b3:c3:91:c1:55:50:41:cf:f9:15:
23:9c:66:04:79:b2:b3:14:e5:6e:bf:18:a3:0e:9c:32:a4:c1:
f8:f1:c3:47:97:76:70:11:83:66:b9:10:1d:b0:93:41:f3:e1:
18:1e:ac:62:d6:6c:3d:76:2f:d0:bc:81:b9:56:c5:eb:e4:2f:
80:83:c9:3b:50:ab:52:a3:a6:94:14:82:3a:24:2f:47:75:18:
ce:15:1e:d5:5f:3b:d0:d1:3f:77:b4:a5:27:74:c7:e9:4e:80:
21:e4:c3:5e:49:c7:2e:1b:13:5b:1f:c6:a4:88:0e:27:7c:09:
90:b8:35:74:0d:05:b0:ed:ec:e0:d2:ef:37:9c:f4:81:1d:6c:
a9:6b:eb:e6:7f:1d:aa:a9:32:aa:08:bf:dd:95:e5:fb:53:a7:
f9:44:2f:87:7b:85:cd:01:ff:aa:9b:21:69:99:24:0a:91:3a:
5a:47:23:66:33:78:d8:43:30:d1:cd:34:f6:18:a7:83:42:69:
2c:8e:0b:d6:4b:4e:70:91:51:b2:8e:29:f5:05:b2:32:26:4f:
47:51:a8:86:76:af:9c:a5:df:85:3e:eb:ca:03:b6:cb:d8:83:
e8:d2:14:c5
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaBmmPQfirCBxWQNDKN7RQKAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwOTAzMDkyODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzYwNzk3ZmNkMGRmMmUxMmZhMzVhNTg3MDE0NzQ0ZjIwMmRjMDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/48PaOzF0/2D5zUZg1IZkQXcOJi
k24+oKw+0/brELBEQvzpTpVR3xQNQhzTaX/3kj9AA/uj8XXikghxkN+DVJpRMFjy
eCUgZf0KtEnLbhtBhhZTSFCSA+ZIBSFYOlMMdNLh9sqNcYNz+NqLAB6+I05s4wki
j4x2RkEaUU7huP/hcZQsE141Uoa1P7UnxLdmt7qA8UR01QnYDLMjlbRb1oqzsk4v
PB0K3Kb5VJT4hq+eZOnjsVklHuiydeTRtHpdgF9r0OK9JxFLyaT3KAsXe34cLsam
YDGvnu+nA0KpGO8xTJj3CLwxs7WFZBSTwZ2F4I4ezBRI7WxcwcqeepdkswIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFEdgeX/NDfLhL6NaWHAUdE8gLcAHMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvUjJCNWY4ME44dUV2bzFwWWNCUjBUeUF0d0FjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBl/B+AwQA
l/KUAwQAl/LMAwQAl/V8MA0GCSqGSIb3DQEBCwUAA4IBAQANe/LPNom9PVzI5cix
LNjGY4Fe3WuO5T/O4bPDkcFVUEHP+RUjnGYEebKzFOVuvxijDpwypMH48cNHl3Zw
EYNmuRAdsJNB8+EYHqxi1mw9di/QvIG5VsXr5C+Ag8k7UKtSo6aUFII6JC9HdRjO
FR7VXzvQ0T93tKUndMfpToAh5MNeSccuGxNbH8akiA4nfAmQuDV0DQWw7ezg0u83
nPSBHWypa+vmfx2qqTKqCL/dleX7U6f5RC+He4XNAf+qmyFpmSQKkTpaRyNmM3jY
QzDRzTT2GKeDQmksjgvWS05wkVGyjin1BbIyJk9HUaiGdq+cpd+FPuvKA7bL2IPo
0hTF
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:00 2026 by rpki-client