Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/__h9IIrnOF5LrZA-8fET7OhTxrk.roa
File: __h9IIrnOF5LrZA-8fET7OhTxrk.roa (raw, json)
Hash identifier: uKrNvKMyDggDrG+7egjplNwBbzexB+6UeQGruPGJ9Y4=
Subject key identifier: FF:F8:7D:20:8A:E7:38:5E:4B:AD:90:3E:F1:F1:13:EC:E8:53:C6:B9
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FE0540E309BA5A9D70890565F43D26A64
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/__h9IIrnOF5LrZA-8fET7OhTxrk.roa
Signing time: Sat 08 Aug 2026 07:43:52 +0000
ROA not before: Sat 08 Aug 2026 07:43:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210542
IP address blocks: 151.240.13.0/24 maxlen: 24
151.246.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e0:54:0e:30:9b:a5:a9:d7:08:90:56:5f:43:d2:6a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 8 07:43:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fff87d208ae7385e4bad903ef1f113ece853c6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7c:99:f5:a8:c8:84:64:d5:bc:b4:be:f9:ef:
45:c6:53:c1:25:9c:c1:31:c2:5b:52:ec:c2:85:76:
56:f7:df:62:11:46:1a:52:7b:49:71:99:ec:27:ff:
46:0a:e2:ba:c0:87:f1:df:bc:0a:67:1c:68:44:ec:
08:94:58:db:bc:c9:36:ca:84:80:8b:fe:f7:9f:76:
be:76:9d:72:d0:7c:34:33:9a:13:98:f6:6b:60:a8:
3b:65:3a:74:14:7e:fa:44:68:8c:d0:4a:59:73:aa:
6d:eb:b1:d6:d2:c2:37:81:c2:7f:0c:4a:a0:0c:c2:
a2:4f:ee:e3:24:45:35:9d:7a:1a:8c:9d:65:a7:5f:
2a:b6:4a:04:8f:8f:03:87:e6:f7:14:93:74:a3:36:
3f:59:ed:f0:c8:52:6e:47:19:30:f0:38:81:40:73:
3e:29:4b:c0:92:62:18:04:a5:51:88:98:10:7e:09:
57:8c:8a:74:3f:64:61:4b:06:05:4d:90:74:a8:0e:
5c:9d:36:3c:1f:a9:aa:f8:df:9b:d6:27:69:59:d7:
48:f9:88:d7:64:68:b7:20:49:2c:e1:32:82:54:7a:
91:7c:7e:e4:e1:2f:e9:49:ee:fe:fd:7c:1f:cc:8a:
33:64:0d:d0:bd:10:06:8c:f9:8c:21:f4:85:6a:e7:
71:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F8:7D:20:8A:E7:38:5E:4B:AD:90:3E:F1:F1:13:EC:E8:53:C6:B9
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/__h9IIrnOF5LrZA-8fET7OhTxrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.13.0/24
151.246.159.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:80:2c:9a:dd:bf:c1:07:63:17:5d:b3:03:a9:42:dc:80:db:
91:8b:a1:89:bf:10:2a:64:fb:9c:fb:83:2f:a5:db:2a:20:73:
20:b2:e2:38:a6:23:b6:86:89:44:38:be:78:dd:cc:65:56:c1:
bd:ea:da:61:d9:d0:67:8c:46:88:88:e3:22:14:6e:45:bb:70:
aa:ce:ad:1c:0e:8f:bb:5d:29:c5:dc:ee:e6:a0:ae:4e:0e:e4:
f4:ca:04:56:5f:c7:c5:ae:43:f8:a4:13:ec:ae:bb:b4:65:d9:
d8:5a:a5:4c:73:a2:5e:c9:40:71:5b:f6:94:09:b6:00:c2:d5:
d9:93:c7:3e:98:8c:c3:eb:8e:65:87:b0:0d:e9:b9:93:d3:7d:
40:26:34:c4:81:71:eb:aa:f9:1d:52:5e:d1:73:9a:7d:90:fb:
54:ea:61:f8:55:c5:d1:26:20:aa:42:a2:e9:81:50:ff:5f:63:
cd:7a:bc:07:fb:b4:7f:f1:67:b0:ec:b2:58:6c:24:83:10:2e:
4a:a3:1d:1c:2e:09:c3:52:20:f7:da:d8:a4:ab:9e:12:b2:44:
07:84:b3:b0:45:70:8a:21:2e:73:93:eb:b9:a6:dc:6b:38:75:
5b:8f:fc:8f:92:5e:6c:3e:42:5c:ad:b8:f4:ff:69:46:de:88:
cf:bc:2f:16
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/gVA4wm6Wp1wiQVl9D0mpkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwODA4MDc0MzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmY4N2QyMDhhZTczODVlNGJhZDkwM2VmMWYxMTNlY2U4NTNjNmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23yZ9ajIhGTVvLS++e9FxlPBJZzB
McJbUuzChXZW999iEUYaUntJcZnsJ/9GCuK6wIfx37wKZxxoROwIlFjbvMk2yoSA
i/73n3a+dp1y0Hw0M5oTmPZrYKg7ZTp0FH76RGiM0EpZc6pt67HW0sI3gcJ/DEqg
DMKiT+7jJEU1nXoajJ1lp18qtkoEj48Dh+b3FJN0ozY/We3wyFJuRxkw8DiBQHM+
KUvAkmIYBKVRiJgQfglXjIp0P2RhSwYFTZB0qA5cnTY8H6mq+N+b1idpWddI+YjX
ZGi3IEks4TKCVHqRfH7k4S/pSe7+/XwfzIozZA3QvRAGjPmMIfSFaudxIwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP/4fSCK5zheS62QPvHxE+zoU8a5MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvX19oOUlJcm5PRjVMclpBLThmRVQ3T2hUeHJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/ANAwQA
l/afMA0GCSqGSIb3DQEBCwUAA4IBAQAegCya3b/BB2MXXbMDqULcgNuRi6GJvxAq
ZPuc+4MvpdsqIHMgsuI4piO2holEOL543cxlVsG96tph2dBnjEaIiOMiFG5Fu3Cq
zq0cDo+7XSnF3O7moK5ODuT0ygRWX8fFrkP4pBPsrru0ZdnYWqVMc6JeyUBxW/aU
CbYAwtXZk8c+mIzD645lh7AN6bmT031AJjTEgXHrqvkdUl7Rc5p9kPtU6mH4VcXR
JiCqQqLpgVD/X2PNerwH+7R/8Wew7LJYbCSDEC5Kox0cLgnDUiD32tikq54SskQH
hLOwRXCKIS5zk+u5ptxrOHVbj/yPkl5sPkJcrbj0/2lG3ojPvC8W
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:27 2026 by rpki-client