Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_0JdOxeQmqBLLo5PEpXhFFwUBQ4.roa
File: _0JdOxeQmqBLLo5PEpXhFFwUBQ4.roa (raw, json)
Hash identifier: LTp3H9XEPDy5W5kFyWLF9BDeKlXdcOJlKPIyrSNABh0=
Subject key identifier: FF:42:5D:3B:17:90:9A:A0:4B:2E:8E:4F:12:95:E1:14:5C:14:05:0E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F5F7CD4BDB4533B128E460308D7BB228F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_0JdOxeQmqBLLo5PEpXhFFwUBQ4.roa
Signing time: Tue 14 Jul 2026 07:17:24 +0000
ROA not before: Tue 14 Jul 2026 07:17:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149573
IP address blocks: 151.242.51.0/24 maxlen: 24
151.243.12.0/24 maxlen: 24
151.243.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:7c:d4:bd:b4:53:3b:12:8e:46:03:08:d7:bb:22:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 14 07:17:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff425d3b17909aa04b2e8e4f1295e1145c14050e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:91:69:98:59:12:10:af:fa:38:96:37:83:f8:
d5:2e:06:21:65:50:75:69:79:95:f7:90:6a:b9:3c:
2f:5f:99:1a:10:3d:a0:76:52:e1:05:4e:96:34:f0:
ca:9a:c0:87:22:09:7e:a6:62:1b:34:fa:e4:56:30:
d7:1b:f0:ff:13:de:8a:68:42:dd:d3:01:36:7c:44:
a8:16:cd:a6:83:5b:e1:67:22:36:d4:74:13:6d:ba:
cf:f8:9b:9a:e1:11:fe:f5:e5:cb:e7:25:d4:7f:e6:
4a:bd:a3:ae:e8:9c:af:3d:91:65:81:3c:9d:8f:05:
1b:ea:8f:ef:3b:ae:77:7c:1f:d1:90:2c:26:51:ae:
bb:ab:24:1d:d8:bc:15:0c:64:79:2e:6f:00:da:11:
22:fd:6c:7b:43:92:48:ff:dd:63:1f:79:46:0c:3b:
68:00:8f:ab:17:f1:49:58:f4:a3:b5:44:a8:96:42:
de:62:0b:03:3f:19:b9:77:e7:88:86:f6:6f:48:eb:
f8:c0:86:1f:ca:ed:2b:eb:a8:74:f9:e7:7d:af:b9:
2c:57:34:2b:4b:93:37:ec:a5:97:dc:26:a7:6a:a4:
9c:be:9b:c1:4d:2f:07:ff:82:35:09:5f:c5:74:ed:
61:9c:60:70:78:53:f7:a9:55:25:d1:d0:c8:4e:19:
f0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:42:5D:3B:17:90:9A:A0:4B:2E:8E:4F:12:95:E1:14:5C:14:05:0E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_0JdOxeQmqBLLo5PEpXhFFwUBQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.51.0/24
151.243.12.0/24
151.243.98.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:06:13:bb:b2:2e:c3:7d:ca:4c:48:b5:57:83:f8:c7:c5:ce:
af:11:d0:e6:6a:0f:cd:a3:da:be:99:3f:23:44:30:11:45:1a:
0f:b3:e6:17:54:a7:68:4e:0e:6a:7b:23:30:cf:0d:c3:43:4a:
3e:b3:f4:fc:d9:2e:91:06:c9:6c:39:39:72:c7:1a:2f:6c:4b:
d2:79:51:17:44:9a:54:15:c5:20:47:1a:17:ec:d6:3d:cd:47:
3d:08:8b:aa:57:37:55:6b:4a:1b:3a:f3:54:42:30:26:12:c8:
58:8b:dc:63:78:46:60:00:82:40:70:ce:0b:9d:30:af:84:e1:
e4:23:c9:6b:c6:5c:d3:eb:d2:41:99:54:3f:c8:d8:9b:c0:21:
17:e7:c0:a9:f4:96:d2:7b:3a:06:91:36:a7:31:9f:ea:da:70:
e3:7b:e9:86:6e:0d:cb:e0:8e:b1:0b:09:b2:bc:12:8a:3e:a4:
e7:d3:b3:9b:19:4b:7a:00:05:be:87:44:c1:cc:45:52:ee:59:
10:21:f6:10:49:fd:16:12:2f:cf:24:ec:09:22:fb:da:7a:d9:
fc:83:f7:86:bf:d8:2f:c4:ef:45:7a:58:53:00:70:ac:c4:a8:
36:ae:69:95:76:6a:36:61:c6:41:b3:27:83:52:dc:49:55:7e:
2b:3f:ec:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:56 2026 by rpki-client