Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SOXs5KWXdnfX1XY4KRgTa1Y1Q9E.roa
File: SOXs5KWXdnfX1XY4KRgTa1Y1Q9E.roa (raw, json)
Hash identifier: b92p8SAzuvpjorff3AHrJMRxt12aHLqd3mTa4oz4EEw=
Subject key identifier: 48:E5:EC:E4:A5:97:76:77:D7:D5:76:38:29:18:13:6B:56:35:43:D1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A04853E8C30C6795BA2DD2CCF4D0BC5469
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SOXs5KWXdnfX1XY4KRgTa1Y1Q9E.roa
Signing time: Fri 28 Aug 2026 12:24:13 +0000
ROA not before: Fri 28 Aug 2026 12:24:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 151.240.43.0/24 maxlen: 24
151.240.44.0/24 maxlen: 24
151.240.46.0/24 maxlen: 24
151.240.47.0/24 maxlen: 24
151.240.48.0/24 maxlen: 24
151.240.49.0/24 maxlen: 24
151.240.50.0/24 maxlen: 24
151.240.51.0/24 maxlen: 24
151.240.52.0/24 maxlen: 24
151.240.53.0/24 maxlen: 24
151.240.54.0/24 maxlen: 24
151.240.55.0/24 maxlen: 24
151.240.56.0/24 maxlen: 24
151.240.57.0/24 maxlen: 24
151.240.58.0/24 maxlen: 24
151.240.59.0/24 maxlen: 24
151.240.62.0/24 maxlen: 24
151.240.63.0/24 maxlen: 24
151.240.64.0/24 maxlen: 24
151.240.65.0/24 maxlen: 24
151.240.66.0/24 maxlen: 24
151.240.67.0/24 maxlen: 24
151.240.91.0/24 maxlen: 24
151.240.92.0/24 maxlen: 24
151.240.93.0/24 maxlen: 24
151.240.94.0/24 maxlen: 24
151.240.95.0/24 maxlen: 24
151.240.101.0/24 maxlen: 24
151.240.102.0/24 maxlen: 24
151.240.103.0/24 maxlen: 24
151.240.104.0/24 maxlen: 24
151.240.105.0/24 maxlen: 24
151.240.106.0/24 maxlen: 24
151.240.107.0/24 maxlen: 24
151.240.108.0/24 maxlen: 24
151.240.109.0/24 maxlen: 24
151.240.111.0/24 maxlen: 24
151.242.129.0/24 maxlen: 24
151.243.186.0/24 maxlen: 24
151.243.187.0/24 maxlen: 24
151.244.58.0/24 maxlen: 24
151.247.119.0/24 maxlen: 24
151.247.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:53:e8:c3:0c:67:95:ba:2d:d2:cc:f4:d0:bc:54:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 28 12:24:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48e5ece4a5977677d7d576382918136b563543d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f2:40:d9:78:a4:60:13:7c:fa:6f:d9:94:cb:
57:99:5d:4d:9a:f0:23:07:ea:c3:80:9c:be:d0:97:
96:f1:f5:63:ec:55:58:7f:97:fb:a9:f2:89:cd:f8:
26:a8:6a:e5:0b:3e:69:a4:36:90:61:6c:4e:63:8a:
e6:73:e3:9f:ed:ee:c7:44:33:60:d0:62:02:5a:f1:
be:86:d5:32:47:47:e2:3f:03:ef:e8:94:3d:d0:fa:
b6:33:f5:96:10:64:9d:a8:fe:5b:26:62:cd:2e:eb:
88:33:be:f5:ea:3c:5a:34:7d:31:87:97:9e:fc:3e:
5f:83:d7:2a:02:7f:11:fd:a9:12:b9:0c:5c:9f:a8:
15:34:9c:5c:05:4c:d4:9e:fd:e6:46:20:62:b0:8d:
b8:50:4f:5d:46:da:b8:f3:c8:cf:da:d8:9b:8b:f3:
94:e3:7a:f1:ef:cb:a9:39:75:98:ff:cd:f5:2e:1e:
90:79:fe:c6:95:0a:0f:c3:48:9e:90:c7:0f:1e:de:
ed:ac:d0:f9:b9:38:19:c6:54:62:a4:f1:76:87:bc:
4d:c9:87:a5:cd:a7:43:cd:76:d2:a1:13:7e:55:79:
1a:9c:ff:b7:b7:3f:dc:fa:f3:7b:47:27:80:e0:4f:
20:de:22:72:bb:a0:ab:cb:35:45:d5:ec:1a:f7:89:
69:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E5:EC:E4:A5:97:76:77:D7:D5:76:38:29:18:13:6B:56:35:43:D1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SOXs5KWXdnfX1XY4KRgTa1Y1Q9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.43.0-151.240.44.255
151.240.46.0-151.240.59.255
151.240.62.0-151.240.67.255
151.240.91.0-151.240.95.255
151.240.101.0-151.240.109.255
151.240.111.0/24
151.242.129.0/24
151.243.186.0/23
151.244.58.0/24
151.247.119.0/24
151.247.167.0/24
Signature Algorithm: sha256WithRSAEncryption
52:43:dd:df:6f:f0:65:5c:8a:21:ba:a4:d1:00:ea:79:81:5e:
84:72:84:38:65:26:7a:ee:43:23:4f:87:b3:be:c3:9a:c6:fd:
87:fe:50:87:11:30:24:47:c6:08:61:bb:64:41:9b:62:3f:40:
69:c8:92:d2:58:bb:8a:44:34:f9:fc:a4:cf:b3:a4:fc:4d:d0:
03:80:a9:63:e9:16:5e:5d:e1:e8:28:3e:79:0f:9a:5c:1c:44:
97:5c:ab:aa:77:76:aa:60:48:3f:ff:8e:84:df:25:6d:59:1c:
54:08:10:70:de:e7:f0:20:5e:a3:f4:9b:81:62:0e:ef:cc:f6:
b0:f5:20:1d:3c:b6:47:4f:17:e3:ce:a2:6b:35:8e:fd:75:e6:
fb:3d:a9:50:4c:1c:65:40:d8:b6:50:c5:4a:48:ed:ee:6c:de:
09:38:7a:32:6b:7e:7c:63:e1:3d:25:79:3b:1c:95:38:4a:a0:
ae:bb:b6:bb:66:11:16:ba:b8:fd:99:1e:d3:b9:73:9f:58:c5:
db:22:ba:ce:e0:48:ff:1f:84:e2:f6:c9:04:2d:47:d8:18:c6:
ac:c3:3e:06:7f:35:86:b9:a9:e2:5e:40:4c:20:49:33:a4:cf:
f8:34:8d:56:b5:dc:3f:7a:4f:ee:cb:62:ea:b6:dd:b5:44:3b:
4e:ec:a0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:11 2026 by rpki-client