Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RjFF5HInKn7GLYs18ySVh4UQbkk.roa
File: RjFF5HInKn7GLYs18ySVh4UQbkk.roa (raw, json)
Hash identifier: eT8iXbOzWnksfLZv/yOWxvIQYIrBS71YjKdgNitBJrU=
Subject key identifier: 46:31:45:E4:72:27:2A:7E:C6:2D:8B:35:F3:24:95:87:85:10:6E:49
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0628512A6E7F31E00F9ED7C2841E91761
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RjFF5HInKn7GLYs18ySVh4UQbkk.roa
Signing time: Wed 02 Sep 2026 14:28:03 +0000
ROA not before: Wed 02 Sep 2026 14:28:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 37.202.206.0/24 maxlen: 24
151.241.232.0/23 maxlen: 24
151.242.49.0/24 maxlen: 24
151.243.64.0/20 maxlen: 24
151.243.97.0/24 maxlen: 24
151.243.106.0/24 maxlen: 24
151.244.34.0/24 maxlen: 24
151.244.59.0/24 maxlen: 24
151.244.62.0/24 maxlen: 24
151.244.63.0/24 maxlen: 24
151.244.75.0/24 maxlen: 24
151.244.76.0/24 maxlen: 24
151.244.87.0/24 maxlen: 24
151.244.90.0/24 maxlen: 24
151.244.109.0/24 maxlen: 24
151.244.110.0/24 maxlen: 24
151.245.18.0/24 maxlen: 24
151.245.222.0/23 maxlen: 24
151.247.18.0/24 maxlen: 24
151.247.20.0/24 maxlen: 24
151.247.226.0/24 maxlen: 24
151.247.232.0/24 maxlen: 24
151.247.233.0/24 maxlen: 24
151.247.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:85:12:a6:e7:f3:1e:00:f9:ed:7c:28:41:e9:17:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 2 14:28:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=463145e472272a7ec62d8b35f324958785106e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:23:7c:5b:f6:9f:22:42:92:42:8b:68:75:25:
e8:a5:5a:40:ce:34:37:05:de:c6:fb:74:30:40:3d:
ed:99:78:a3:9e:fe:fa:5f:ec:4c:68:48:96:00:12:
f3:e7:cc:88:0f:f6:31:1d:27:bc:f9:d0:03:3e:ab:
a8:83:83:ae:ec:2c:dc:25:c9:96:9d:59:c5:4c:19:
ee:20:ee:95:05:d6:be:08:78:52:78:bc:71:86:17:
de:b2:24:d6:31:e2:e0:dc:b7:01:74:21:84:96:e1:
bf:74:61:4f:94:f7:58:fe:9d:fd:d5:00:4b:e3:19:
ae:b7:40:ed:93:6b:30:ed:62:ec:5a:dd:de:e9:11:
77:3a:2a:9d:6a:bc:f1:47:2f:91:31:ad:f8:52:be:
9d:f4:8f:17:61:9a:5f:ef:97:71:6d:eb:cf:1b:f2:
08:da:9b:fc:e9:14:86:f6:9c:c1:e6:6e:8a:35:d6:
c9:13:18:70:ae:a4:61:52:ba:f8:f7:2f:2a:6d:09:
7c:3b:22:39:fb:e8:a7:d9:57:75:a9:28:7a:79:a9:
80:ae:4a:6f:d5:77:ff:4c:78:62:65:7e:71:e6:22:
37:e7:6e:9c:a7:0b:ca:e0:92:2d:c1:e4:1e:17:21:
17:d7:ff:77:5f:7a:2d:cd:82:40:a6:74:2c:dc:7f:
f6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:31:45:E4:72:27:2A:7E:C6:2D:8B:35:F3:24:95:87:85:10:6E:49
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RjFF5HInKn7GLYs18ySVh4UQbkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.206.0/24
151.241.232.0/23
151.242.49.0/24
151.243.64.0/20
151.243.97.0/24
151.243.106.0/24
151.244.34.0/24
151.244.59.0/24
151.244.62.0/23
151.244.75.0-151.244.76.255
151.244.87.0/24
151.244.90.0/24
151.244.109.0-151.244.110.255
151.245.18.0/24
151.245.222.0/23
151.247.18.0/24
151.247.20.0/24
151.247.226.0/24
151.247.232.0/23
151.247.239.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:b8:9c:df:72:e8:a6:6e:cd:b1:47:fd:83:d9:2d:5a:5f:75:
13:94:b8:da:1a:f7:24:2f:ea:24:dd:f0:dc:3c:ea:d0:db:bf:
e7:25:2d:54:69:14:9b:59:1a:ed:f8:dc:10:e5:a5:b6:e1:8d:
08:a5:55:39:c5:04:02:cc:35:ca:78:a4:ae:84:2c:48:a4:71:
44:81:57:df:8a:70:fe:98:eb:01:d1:0b:33:38:7b:0e:1c:53:
26:0d:e8:61:d3:24:8b:5d:64:ee:e4:19:fa:b1:26:3f:db:55:
f1:29:ed:42:17:5b:4f:c1:c9:0f:5b:96:02:d9:bd:a7:b3:44:
e8:b8:c1:f8:3c:fe:88:3e:71:bb:9a:f9:fa:2a:f7:21:cf:61:
f4:50:06:cd:c5:38:67:69:e5:40:25:5a:99:b7:c7:54:bc:c4:
d6:e3:ca:1e:47:01:2c:9d:44:14:12:44:27:7e:4d:97:05:9f:
fb:78:2f:83:c4:20:da:a5:2f:9b:cd:38:10:cc:b4:1d:f7:ae:
fe:a3:93:0f:d8:a0:47:ec:6d:ba:15:04:d4:a2:0d:9c:d2:19:
39:5c:c6:0a:3b:38:63:94:de:3e:0f:fb:b3:d0:7b:bb:15:1b:
7f:bd:82:25:1a:4e:58:a9:2f:cf:1e:3a:34:a4:17:de:70:b8:
c3:50:63:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:08:05 2026 by rpki-client