Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XB3R70GEXYM8mENLXTccl9LAZOU.roa
File: XB3R70GEXYM8mENLXTccl9LAZOU.roa (raw, json)
Hash identifier: E38nCpn7ZatqaPiE5Ksu+f1PDstOKlvVl2DR2YZLjb0=
Subject key identifier: 5C:1D:D1:EF:41:84:5D:83:3C:98:43:4B:5D:37:1C:97:D2:C0:64:E5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FC7BFB4DBEBBC02FFB44D852001DDBAE5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XB3R70GEXYM8mENLXTccl9LAZOU.roa
Signing time: Mon 03 Aug 2026 13:10:57 +0000
ROA not before: Mon 03 Aug 2026 13:10:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 151.240.3.0/24 maxlen: 24
151.242.227.0/24 maxlen: 24
151.243.113.0/24 maxlen: 24
151.243.133.0/24 maxlen: 24
151.245.127.0/24 maxlen: 24
151.246.216.0/23 maxlen: 24
151.247.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:13:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:bf:b4:db:eb:bc:02:ff:b4:4d:85:20:01:dd:ba:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 3 13:10:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c1dd1ef41845d833c98434b5d371c97d2c064e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c6:0a:dc:e9:70:8c:36:bc:24:01:a3:63:fa:
f4:56:b8:cd:4e:0e:16:7c:57:66:be:a4:6c:5a:48:
27:bc:00:c1:46:f1:1e:0d:5a:dc:02:84:a4:b7:aa:
76:a6:7d:cb:5c:50:53:b1:1c:48:46:fa:9b:cd:db:
3d:ff:fb:df:f4:7f:74:80:83:56:b4:ef:28:63:7f:
3a:33:1a:03:2c:a9:74:ca:d2:53:47:99:3c:26:aa:
40:c7:58:1d:8c:d9:19:7f:3c:23:7d:ac:c9:66:a3:
4d:a5:7a:8a:98:cb:b3:c5:c5:5a:04:68:bf:28:8e:
b1:14:6a:e1:fc:2b:8d:e6:51:5c:66:83:16:5f:71:
e1:68:22:f2:77:f3:ef:89:b3:0e:d5:67:fd:fa:59:
c0:ea:d8:a5:09:55:2b:fd:4a:e4:46:4b:a3:36:16:
fb:ae:f5:70:a9:48:a1:5a:b0:43:5c:64:74:48:4d:
4b:8a:57:9b:c9:8e:0c:ed:c6:2f:d8:c1:4a:86:d9:
e6:28:b0:3f:f2:cf:8f:35:5d:c0:a0:38:7b:29:3d:
21:7b:4e:cf:ea:07:85:72:17:26:d6:b9:f8:90:89:
8f:87:19:8c:07:d8:39:53:af:fb:e5:bb:b2:95:dc:
41:32:65:3e:22:1e:65:58:41:29:1a:a8:20:8c:5e:
5f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1D:D1:EF:41:84:5D:83:3C:98:43:4B:5D:37:1C:97:D2:C0:64:E5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XB3R70GEXYM8mENLXTccl9LAZOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.3.0/24
151.242.227.0/24
151.243.113.0/24
151.243.133.0/24
151.245.127.0/24
151.246.216.0/23
151.247.155.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:17:59:af:1f:9f:14:75:a9:f0:7c:a1:08:5e:1c:e4:e8:b1:
9f:2b:94:da:12:72:ec:ec:3d:1a:89:67:ef:a4:3c:42:e5:f6:
e7:6d:50:06:2f:5b:64:ef:24:2f:a7:f0:e0:25:aa:f5:9a:62:
94:a0:06:0e:0c:aa:36:c8:bf:1a:aa:f0:c1:02:87:85:a7:ff:
f2:64:0c:cd:a4:4e:a2:fc:a8:cb:10:6a:bc:ab:f8:75:f5:d8:
ea:e5:c2:d6:2a:05:29:ae:70:5d:b1:a9:68:07:f1:72:82:d6:
c0:11:f1:74:a6:cd:6b:3f:ef:c7:0d:af:7d:34:ec:ac:d1:6b:
66:84:d6:b8:c6:15:7e:e5:64:9b:a2:1e:d3:73:01:ef:59:85:
b5:a4:e6:a8:e1:1b:7c:88:5f:6d:7e:07:3a:7a:b6:b8:75:44:
bc:5c:42:21:73:82:51:cc:0a:5f:fb:c9:63:82:63:26:70:e6:
be:4e:a7:18:4f:ca:75:53:eb:c9:e1:19:c1:47:22:63:e8:bc:
12:80:38:1a:a7:3d:40:08:1d:70:e9:de:ca:54:62:11:0b:5c:
62:0a:6e:10:a8:df:38:9a:01:bd:e4:8e:92:a4:09:95:06:51:
bc:6b:c8:0e:5b:72:19:92:9d:57:3f:3b:76:d3:fd:0e:99:87:
98:ed:cf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:43:03 2026 by rpki-client