Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/c6RC2ik1R-EYAvSwN0-PMsx4A7s.roa
File: c6RC2ik1R-EYAvSwN0-PMsx4A7s.roa (raw, json)
Hash identifier: f4JWcAJ0PgQZK/8i9DpNMZ8g0AgW5KLpTrpLGEHYq8U=
Subject key identifier: 73:A4:42:DA:29:35:47:E1:18:02:F4:B0:37:4F:8F:32:CC:78:03:BB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0200BA44A5160650726D6684EFF78EB12
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/c6RC2ik1R-EYAvSwN0-PMsx4A7s.roa
Signing time: Thu 20 Aug 2026 16:40:28 +0000
ROA not before: Thu 20 Aug 2026 16:40:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211373
IP address blocks: 151.240.117.0/24 maxlen: 24
151.242.21.0/24 maxlen: 24
151.243.248.0/24 maxlen: 24
151.243.251.0/24 maxlen: 24
151.245.134.0/24 maxlen: 24
151.245.194.0/24 maxlen: 24
151.245.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 21:41:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:0b:a4:4a:51:60:65:07:26:d6:68:4e:ff:78:eb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 20 16:40:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73a442da293547e11802f4b0374f8f32cc7803bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6d:31:ad:30:0b:39:17:04:9c:92:c8:e3:fc:
71:5d:ce:97:1e:48:69:1e:0b:94:ef:0c:de:be:3b:
2c:ec:ad:a0:b8:dd:be:c9:ad:84:72:90:5e:80:69:
68:eb:05:11:de:8b:60:a5:ac:07:1e:9b:09:ed:ed:
41:f0:8b:f7:96:c1:be:b6:5e:79:2c:13:25:0b:79:
3d:75:77:1c:65:64:84:e2:70:e7:40:90:af:78:5c:
35:f9:00:46:2c:11:04:19:01:33:ff:66:7d:7b:70:
36:27:6f:ac:df:7a:cc:96:5f:a7:45:46:4d:64:34:
0d:b9:a3:0a:51:98:c4:ce:17:49:d2:d2:6f:4c:ed:
3c:9a:97:28:18:28:61:79:c7:d9:88:ed:55:7c:6a:
1d:08:bd:f5:1d:27:15:e8:e8:54:5b:12:56:42:ee:
0c:71:9d:3c:52:04:12:9b:47:11:bc:09:8e:02:a8:
bf:42:6a:f2:3f:0f:5c:3c:41:e1:a9:ef:45:57:a9:
3f:cf:ca:86:cb:7a:c3:de:e3:bd:ea:bd:c3:1b:a1:
59:b5:c2:ee:bb:ad:75:95:1d:ac:5f:5b:c4:3f:12:
78:0f:df:b9:54:62:f9:ff:5c:6a:cb:2a:ff:c5:3b:
c5:59:19:fa:80:5e:7e:f1:91:81:96:78:2d:3e:a1:
d5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A4:42:DA:29:35:47:E1:18:02:F4:B0:37:4F:8F:32:CC:78:03:BB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/c6RC2ik1R-EYAvSwN0-PMsx4A7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.117.0/24
151.242.21.0/24
151.243.248.0/24
151.243.251.0/24
151.245.134.0/24
151.245.194.0/24
151.245.201.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:e4:e5:c0:49:e8:7d:4a:72:85:f6:15:c7:47:39:4e:cf:68:
59:ff:4b:56:5a:bb:ca:0b:42:e2:22:d3:4b:1f:55:24:69:4b:
68:b1:d1:11:4e:22:87:6b:1f:fc:e3:bc:1d:b5:e1:81:6f:ce:
ae:4d:43:23:9a:04:99:76:31:8e:11:73:59:1b:55:d1:9f:18:
a6:0a:c2:9e:dd:31:71:8f:dc:6f:e4:3f:1a:af:e3:25:30:77:
6b:44:4e:d2:40:2d:8f:40:e8:89:bb:a3:db:ba:57:e8:fc:1f:
8b:8d:9f:09:a1:df:88:5e:cc:56:82:8f:eb:16:76:4f:f5:fa:
bb:dc:eb:75:a0:b5:ec:45:70:7f:88:d7:de:ce:c3:c6:85:f3:
e9:90:dc:5c:75:90:23:3d:bb:7c:11:50:c9:57:a4:8d:62:a3:
9d:e4:3e:4d:db:be:b5:69:f2:ad:7e:00:b3:e5:e6:90:ed:4f:
9a:c4:6a:b2:c9:b5:ca:e8:98:56:b7:2e:68:70:08:5d:8c:c7:
5f:9c:72:2f:89:c5:86:7c:79:fd:33:42:4e:6d:ad:fc:1e:95:
d5:56:97:ba:3e:41:69:fb:a3:31:d7:db:41:d1:31:f7:5e:17:
fc:bc:71:8c:c3:a8:ea:89:22:0d:48:a6:74:48:14:36:b8:42:
eb:eb:a8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 00:56:13 2026 by rpki-client