Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RguL-rhty4qa4FFi41I4ZRD4kcU.roa
File: RguL-rhty4qa4FFi41I4ZRD4kcU.roa (raw, json)
Hash identifier: 2YAjVW36aUUp09ZwAB/85CShn6PxsJluHmQUW10Yjcc=
Subject key identifier: 46:0B:8B:FA:B8:6D:CB:8A:9A:E0:51:62:E3:52:38:65:10:F8:91:C5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EFD3655AD2FEF62649995EB27019EC00D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RguL-rhty4qa4FFi41I4ZRD4kcU.roa
Signing time: Thu 25 Jun 2026 05:17:36 +0000
ROA not before: Thu 25 Jun 2026 05:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20648
IP address blocks: 151.241.3.0/24 maxlen: 24
151.242.13.0/24 maxlen: 24
151.245.118.0/24 maxlen: 24
151.245.133.0/24 maxlen: 24
151.245.193.0/24 maxlen: 24
151.247.40.0/24 maxlen: 24
151.247.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fd:36:55:ad:2f:ef:62:64:99:95:eb:27:01:9e:c0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 25 05:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=460b8bfab86dcb8a9ae05162e352386510f891c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:64:25:4f:c3:c3:6f:5f:e2:36:0f:06:9c:fb:
e3:db:27:d7:da:75:1e:04:11:11:f7:f9:fc:a1:84:
d3:0d:b0:9f:da:00:d9:52:1c:e6:fe:d4:b9:43:56:
ce:26:14:5b:af:c4:f3:65:ee:92:fe:55:83:0f:df:
c2:74:a6:43:89:38:2b:f1:fa:22:86:6c:5e:55:8e:
6e:df:2e:3a:32:fc:3c:02:a6:2a:74:d3:88:76:de:
8c:26:5a:24:9d:68:be:9d:90:60:76:f7:b8:61:53:
e9:6d:99:73:d6:69:f9:80:40:f9:97:b0:a5:82:91:
e8:6a:da:d3:a2:76:d9:b1:00:53:27:38:f5:21:f7:
b8:87:b2:30:93:d6:18:6d:30:95:76:a9:eb:d4:e7:
f3:dc:20:ce:60:eb:0b:3e:b2:64:49:08:cd:52:a4:
06:d2:b7:65:4f:e3:5f:e2:4c:86:48:76:d7:63:65:
de:a3:2c:40:b4:52:a0:30:e2:61:20:1c:94:66:7c:
b8:8c:a7:73:9a:10:4b:4b:1d:79:62:4f:2e:d4:e8:
6f:e8:a2:6d:2c:67:dc:1d:eb:21:d1:22:17:a7:a5:
d4:cd:f9:fb:1d:6a:8c:10:b8:fc:b2:8b:0a:a6:65:
63:a9:51:ef:f6:58:72:ff:db:a3:d1:f5:62:fc:e2:
f5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0B:8B:FA:B8:6D:CB:8A:9A:E0:51:62:E3:52:38:65:10:F8:91:C5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RguL-rhty4qa4FFi41I4ZRD4kcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.3.0/24
151.242.13.0/24
151.245.118.0/24
151.245.133.0/24
151.245.193.0/24
151.247.40.0/24
151.247.252.0/24
Signature Algorithm: sha256WithRSAEncryption
82:90:8d:48:2d:8a:9a:88:ea:17:53:57:e0:23:bc:2d:0c:d8:
a4:e4:ae:85:7c:5d:97:35:39:c5:ea:7b:aa:b0:8d:c5:ca:c4:
ea:52:26:8f:ed:a2:4a:3e:cc:78:a1:81:c1:5b:13:81:d9:7c:
61:b3:06:cd:22:d3:83:eb:bb:b5:d5:51:50:d3:3e:a3:8a:6f:
c6:60:51:82:61:5e:0f:bc:4b:6d:e9:af:b0:1d:b6:ae:28:67:
70:02:ca:a7:c9:ef:e0:a9:bc:07:4e:f8:70:4b:18:c8:09:b6:
5b:71:51:14:46:4b:10:3f:7c:b3:8a:db:5a:b1:86:be:30:a1:
51:31:88:44:ba:b1:13:7f:d2:f8:fd:38:91:e8:cb:0c:bc:de:
05:07:e6:f3:f8:e7:78:fd:02:9e:06:ff:2a:11:4f:bc:f0:08:
9e:e4:f8:14:29:69:92:b7:63:5a:b1:ea:14:11:ec:8c:c6:7c:
96:8b:85:46:15:ea:c5:ef:55:f8:3d:ae:35:56:ea:71:1c:30:
bb:95:54:a2:ec:e9:63:43:09:48:9c:eb:60:04:17:be:b0:28:
12:e3:e6:ea:e5:bf:9f:ce:57:0f:5c:91:9d:95:b0:d2:2f:10:
eb:48:4e:c3:a3:88:0f:2a:03:58:f5:53:ec:9d:4a:ec:f1:54:
b2:95:53:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 11:27:49 2026 by rpki-client