Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/b44nzxy2dnRjl00FpcX4LI1pQxg.roa
File: b44nzxy2dnRjl00FpcX4LI1pQxg.roa (raw, json)
Hash identifier: cMrXEwYJrg8GCxo/D6O/THSlpkdmvr6IE45wH+OpnbY=
Subject key identifier: 6F:8E:27:CF:1C:B6:76:74:63:97:4D:05:A5:C5:F8:2C:8D:69:43:18
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E700619CCFD4241B6898380C562A4E69A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/b44nzxy2dnRjl00FpcX4LI1pQxg.roa
Signing time: Thu 28 May 2026 19:18:28 +0000
ROA not before: Thu 28 May 2026 19:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 151.242.143.0/24 maxlen: 24
151.242.236.0/22 maxlen: 24
151.243.195.0/24 maxlen: 24
151.243.223.0/24 maxlen: 24
151.244.162.0/23 maxlen: 24
151.245.241.0/24 maxlen: 24
151.245.254.0/24 maxlen: 24
151.246.189.0/24 maxlen: 24
151.247.44.0/23 maxlen: 24
151.247.137.0/24 maxlen: 24
151.247.161.0/24 maxlen: 24
151.247.165.0/24 maxlen: 24
151.247.177.0/24 maxlen: 24
151.247.182.0/23 maxlen: 24
151.247.250.0/24 maxlen: 24
151.247.253.0/24 maxlen: 24
151.247.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:70:06:19:cc:fd:42:41:b6:89:83:80:c5:62:a4:e6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 28 19:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f8e27cf1cb6767463974d05a5c5f82c8d694318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ec:ea:aa:a1:92:3a:98:72:6b:af:45:b9:08:
d0:75:5d:26:91:29:a3:ea:1a:25:f7:8b:e3:4f:43:
f0:7b:ce:83:0a:aa:a5:58:aa:a3:8e:6f:91:33:91:
ec:70:00:6f:73:fa:90:ad:86:3e:12:8e:e0:bc:cb:
4b:aa:32:13:3e:3b:08:53:fa:e1:58:11:5d:83:a6:
a6:d5:46:ea:d5:1e:61:50:80:ca:de:5d:26:39:2a:
d1:8c:97:f6:e7:e2:61:f3:ee:74:38:49:2b:6f:e4:
61:65:bb:37:0e:de:1a:07:f7:36:e4:6c:a9:2f:c9:
9c:48:37:f4:94:49:68:29:9a:d0:4c:71:b6:6a:a5:
d3:d1:35:30:4e:a4:2c:0c:41:6f:36:71:d3:6c:e7:
72:7a:1e:fb:d1:cb:b8:6f:03:44:98:d0:03:ed:43:
78:ee:0a:97:a6:06:2d:3f:a9:3a:3e:e0:97:29:85:
1d:8a:4b:b9:28:a5:db:07:db:29:a0:c5:d4:d4:1d:
49:16:1c:51:63:1c:1d:07:55:f1:26:1b:70:5b:45:
fe:3c:bf:63:23:0f:68:f8:8f:da:0d:c0:c2:bb:15:
04:80:74:5f:2a:c9:93:a0:e1:77:c2:6e:5a:e0:c7:
ee:99:5f:a8:21:c1:9e:20:ce:ac:7c:44:07:46:a9:
af:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8E:27:CF:1C:B6:76:74:63:97:4D:05:A5:C5:F8:2C:8D:69:43:18
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/b44nzxy2dnRjl00FpcX4LI1pQxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.143.0/24
151.242.236.0/22
151.243.195.0/24
151.243.223.0/24
151.244.162.0/23
151.245.241.0/24
151.245.254.0/24
151.246.189.0/24
151.247.44.0/23
151.247.137.0/24
151.247.161.0/24
151.247.165.0/24
151.247.177.0/24
151.247.182.0/23
151.247.250.0/24
151.247.253.0-151.247.254.255
Signature Algorithm: sha256WithRSAEncryption
aa:40:08:dd:d1:aa:a9:f4:be:f4:15:0c:9a:88:d2:5a:52:03:
30:72:4b:17:37:e2:3b:86:19:b4:1b:91:7e:b2:ae:34:a3:41:
44:fd:e8:88:dd:cf:d7:d8:e3:34:38:56:57:7f:18:39:53:dc:
d0:3c:2f:c5:21:6a:3a:ef:09:d6:18:f7:3b:30:12:cd:8f:b6:
ba:89:fb:c7:a3:74:62:7f:81:f1:87:5b:5a:60:ec:a0:ef:96:
dc:ac:e0:8e:55:90:7b:b6:c5:57:2d:8d:bb:7a:9e:ac:d5:fb:
09:5c:c9:6f:51:17:ce:f3:e4:54:65:71:3c:cc:a0:80:81:56:
e8:ee:93:68:94:93:c5:3c:5b:94:fd:a8:3d:0e:2e:44:de:66:
78:76:36:97:5a:33:14:b4:ed:be:87:a9:e5:b4:e8:f5:a7:12:
27:0a:b7:c3:97:09:ef:4d:0e:79:19:27:1d:83:99:2a:ab:ca:
75:25:c2:49:ed:b2:20:fe:1a:dc:d9:38:59:8c:fc:60:76:3d:
f4:1d:d1:16:b1:bb:fb:d2:a6:71:4a:ee:b5:9d:c2:c9:40:51:
f1:76:57:f2:0f:a5:30:3b:48:29:8a:8f:de:0f:c5:cb:89:79:
36:26:6b:ab:f6:13:84:34:ce:e5:2a:6f:46:9e:07:eb:60:de:
ab:00:66:7a
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgISAZ5wBhnM/UJBtomDgMVipOaaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNTI4MTkxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjhlMjdjZjFjYjY3Njc0NjM5NzRkMDVhNWM1ZjgyYzhkNjk0MzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuzqqqGSOphya69FuQjQdV0mkSmj
6hol94vjT0Pwe86DCqqlWKqjjm+RM5HscABvc/qQrYY+Eo7gvMtLqjITPjsIU/rh
WBFdg6am1Ubq1R5hUIDK3l0mOSrRjJf25+Jh8+50OEkrb+RhZbs3Dt4aB/c25Gyp
L8mcSDf0lEloKZrQTHG2aqXT0TUwTqQsDEFvNnHTbOdyeh770cu4bwNEmNAD7UN4
7gqXpgYtP6k6PuCXKYUdiku5KKXbB9spoMXU1B1JFhxRYxwdB1XxJhtwW0X+PL9j
Iw9o+I/aDcDCuxUEgHRfKsmToOF3wm5a4MfumV+oIcGeIM6sfEQHRqmvJQIDAQAB
o4ICbDCCAmgwHQYDVR0OBBYEFG+OJ88ctnZ0Y5dNBaXF+CyNaUMYMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvYjQ0bnp4eTJkblJqbDAwRnBjWDRMSTFwUXhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwbgQCAAEwaAMEAJfyjwME
Apfy7AMEAJfzwwMEAJfz3wMEAZf0ogMEAJf18QMEAJf1/gMEAJf2vQMEAZf3LAME
AJf3iQMEAJf3oQMEAJf3pQMEAJf3sQMEAZf3tgMEAJf3+jAMAwQAl/f9AwQAl/f+
MA0GCSqGSIb3DQEBCwUAA4IBAQCqQAjd0aqp9L70FQyaiNJaUgMwcksXN+I7hhm0
G5F+sq40o0FE/eiI3c/X2OM0OFZXfxg5U9zQPC/FIWo67wnWGPc7MBLNj7a6ifvH
o3Rif4Hxh1taYOyg75bcrOCOVZB7tsVXLY27ep6s1fsJXMlvURfO8+RUZXE8zKCA
gVbo7pNolJPFPFuU/ag9Di5E3mZ4djaXWjMUtO2+h6nltOj1pxInCrfDlwnvTQ55
GScdg5kqq8p1JcJJ7bIg/hrc2ThZjPxgdj30HdEWsbv70qZxSu61ncLJQFHxdlfy
D6UwO0gpio/eD8XLiXk2Jmur9hOENM7lKm9GngfrYN6rAGZ6
-----END CERTIFICATE-----
Generated at Tue Jun 2 20:50:37 2026 by rpki-client