Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_izBvlXIyoMNJ6nFyiyffxaId7I.roa
File: _izBvlXIyoMNJ6nFyiyffxaId7I.roa (raw, json)
Hash identifier: RQPyTh5PqbUSmcNJgsB0njvZL+ijLE/HRsit26lVrTk=
Subject key identifier: FE:2C:C1:BE:55:C8:CA:83:0D:27:A9:C5:CA:2C:9F:7F:16:88:77:B2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A1398B518039A298637A0A39D486B67E80
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_izBvlXIyoMNJ6nFyiyffxaId7I.roa
Signing time: Wed 14 Oct 2026 08:33:13 +0000
ROA not before: Wed 14 Oct 2026 08:33:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 151.240.126.0/23 maxlen: 24
151.243.16.0/24 maxlen: 24
151.243.17.0/24 maxlen: 24
151.243.60.0/24 maxlen: 24
151.243.61.0/24 maxlen: 24
151.243.114.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.245.88.0/24 maxlen: 24
151.246.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:8b:51:80:39:a2:98:63:7a:0a:39:d4:86:b6:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 14 08:33:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fe2cc1be55c8ca830d27a9c5ca2c9f7f168877b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:25:1a:01:a4:bd:70:20:41:e1:fc:b2:4c:04:
3a:f8:01:01:e6:e6:20:46:b9:31:c8:63:ef:42:59:
81:d9:0f:82:c6:b5:e1:9d:88:fa:b3:60:e1:a9:d0:
13:7b:4a:1d:80:c2:6a:f3:a4:c4:90:ff:87:ed:be:
20:ca:40:a1:a4:1d:a8:46:13:ac:e0:9c:af:36:b7:
76:d1:3c:7b:32:30:c8:ff:7c:21:83:e4:4d:f7:d1:
e3:e6:a0:ee:41:20:a0:af:bc:d3:6d:55:11:b5:17:
70:bd:3a:e6:6c:34:c5:9e:f3:79:8c:7d:87:4b:5e:
54:cf:a5:fc:56:42:40:cd:c5:f3:01:3e:3f:86:5b:
23:a0:0d:83:78:ce:df:fd:9f:30:96:96:d3:0c:b2:
aa:d0:cd:57:2d:ec:6d:02:92:76:52:9f:ef:a4:df:
07:b2:55:d4:b4:a4:d5:63:4f:4c:87:2b:93:d0:1a:
28:4d:00:ea:86:83:8d:02:41:e4:04:8e:c4:e4:a7:
1c:f2:da:de:2c:bd:3e:7e:8d:5f:92:e1:b1:4a:1e:
7e:20:2d:38:90:58:49:c6:fa:ef:16:8c:70:8a:f7:
d6:d6:3d:d7:71:be:1d:9b:1f:8e:4d:59:09:b5:54:
ed:46:97:6a:a0:09:e2:47:2f:44:90:3d:36:f7:73:
47:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2C:C1:BE:55:C8:CA:83:0D:27:A9:C5:CA:2C:9F:7F:16:88:77:B2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_izBvlXIyoMNJ6nFyiyffxaId7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.126.0/23
151.243.16.0/23
151.243.60.0/23
151.243.114.0/23
151.245.88.0/24
151.246.156.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:e4:26:3c:b8:78:4b:46:9a:06:01:2b:74:5b:5b:ff:b6:06:
f8:ba:0f:a5:a8:fb:b7:ba:14:1d:64:6f:9e:e6:84:c8:6e:89:
fe:2a:fa:c1:d2:d7:ff:6e:cc:96:00:a0:01:cd:8f:86:23:04:
29:16:e3:88:fa:9a:7e:0e:bd:3f:d8:6c:c0:f5:f4:0b:db:d4:
c0:9a:05:7d:31:ea:01:e7:05:4c:a1:cc:30:d3:95:05:6a:2a:
d2:d6:62:87:32:57:6a:6e:61:96:b2:41:8f:c3:a6:bb:7b:b5:
9f:6c:ee:8e:00:85:a7:a7:ff:a3:10:b2:87:ab:0b:3b:88:cd:
be:55:c6:9f:02:85:39:77:c7:14:32:fc:99:2d:d4:8e:30:9e:
71:53:0a:a6:4c:a4:94:1f:25:be:54:d0:76:42:54:e2:62:04:
02:cd:07:1b:10:a7:b5:30:da:28:d7:90:21:12:bc:a3:89:f0:
8f:f8:62:1e:be:25:df:73:18:5b:a3:ef:e4:ea:c6:ab:17:b9:
7c:94:73:59:84:d5:b8:48:72:db:31:46:cd:00:78:38:bd:e5:
ce:88:c1:25:59:f3:77:11:26:7e:b7:8e:f2:6e:de:f9:c8:ae:
3e:f2:b5:86:d1:ce:e6:1d:6c:aa:58:cf:56:2d:36:e0:d9:ab:
8d:8c:c3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:40:25 2026 by rpki-client