Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cKiYtt2exnE6Ec6mYbLqvmF0OU4.roa
File: cKiYtt2exnE6Ec6mYbLqvmF0OU4.roa (raw, json)
Hash identifier: gjY1ts9MCZBt71X9iY05RlPAOPpqoLJXVNp8Pd9uGZ4=
Subject key identifier: 70:A8:98:B6:DD:9E:C6:71:3A:11:CE:A6:61:B2:EA:BE:61:74:39:4E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A04492433E2F008EF39D22D6EB103BF3D6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cKiYtt2exnE6Ec6mYbLqvmF0OU4.roa
Signing time: Thu 27 Aug 2026 18:53:51 +0000
ROA not before: Thu 27 Aug 2026 18:53:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 151.240.118.0/24 maxlen: 24
151.243.87.0/24 maxlen: 24
151.243.174.0/24 maxlen: 24
151.247.36.0/24 maxlen: 24
151.247.50.0/23 maxlen: 24
151.247.52.0/23 maxlen: 24
151.247.184.0/23 maxlen: 24
151.247.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:13:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:44:92:43:3e:2f:00:8e:f3:9d:22:d6:eb:10:3b:f3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 27 18:53:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70a898b6dd9ec6713a11cea661b2eabe6174394e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:de:9c:45:91:61:2c:b7:ff:e4:bf:41:82:9e:
ad:3d:73:cc:b6:b1:a7:e4:b3:2d:fd:67:a3:e2:13:
c8:49:1c:5d:f6:aa:2d:c8:c0:d9:a0:ef:b0:75:c1:
aa:df:4b:15:c9:b0:80:1c:ca:fb:fc:06:9d:c0:c7:
f5:9f:c4:c3:aa:92:6a:73:c3:7d:e5:f1:c3:e9:b4:
3d:7d:a5:09:1d:7d:f8:69:93:54:29:9a:e1:4d:0f:
73:4b:c0:c1:6c:81:77:23:67:47:9c:28:ec:d8:7d:
65:1c:5a:22:66:31:74:5b:e4:85:7d:59:72:45:8a:
d4:22:4e:b7:9d:f0:1d:18:74:b6:70:45:cb:bb:e3:
a7:4e:62:d2:93:f0:1f:ee:92:d2:91:eb:1f:4e:1b:
e9:8c:85:47:b0:84:fc:8b:ff:18:fb:4b:8a:cb:85:
b6:0f:ca:62:24:7f:7c:2f:b9:57:d2:e2:e9:59:4a:
61:80:15:d4:7f:6a:24:f5:3c:07:d2:e7:94:b3:1e:
5b:a9:c2:35:39:7f:b2:9b:9d:03:1c:ea:3f:95:cd:
36:c3:83:fb:a9:6f:df:18:ab:48:91:44:34:8a:91:
eb:36:9f:4f:fa:9e:b5:1a:00:27:e8:0f:5f:a3:ad:
0c:45:49:35:26:c2:cd:19:09:95:e6:0a:c6:76:c6:
51:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A8:98:B6:DD:9E:C6:71:3A:11:CE:A6:61:B2:EA:BE:61:74:39:4E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cKiYtt2exnE6Ec6mYbLqvmF0OU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.118.0/24
151.243.87.0/24
151.243.174.0/24
151.247.36.0/24
151.247.50.0-151.247.53.255
151.247.184.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:b8:07:6c:74:4b:cd:bd:48:42:b7:44:a2:94:2e:b7:b2:0f:
91:31:29:8a:16:08:6e:9e:c1:61:b1:b1:35:3c:c5:19:76:82:
95:79:c6:bd:7a:cb:e1:1f:39:cb:b3:91:88:f5:d6:df:32:0a:
bc:81:f1:f1:3e:53:e1:87:bf:c0:48:7c:22:96:7a:b3:99:dd:
1f:9c:ad:ef:0a:94:7c:82:83:bb:27:88:40:f5:8c:8e:8c:c3:
f5:d0:f5:94:40:ff:5c:94:a8:da:2b:41:48:75:45:08:84:63:
e1:9e:cd:6c:53:68:65:c1:a5:b1:5d:31:15:dd:24:71:b2:78:
35:a8:94:85:fe:3d:ca:9a:c8:32:05:41:39:83:7a:81:d1:07:
80:78:72:e8:5e:10:fc:f0:de:cc:30:68:33:17:85:9a:99:c2:
91:75:ef:73:ba:d0:9f:e4:4c:62:20:c7:25:42:3e:e0:67:89:
05:f9:fb:a2:19:2a:9a:a9:d3:0b:29:d5:62:40:f5:fc:26:c7:
f3:09:9a:8c:a1:9f:07:85:a5:1f:07:e6:6c:46:79:42:65:11:
e9:e2:06:02:39:15:c5:ff:bb:dc:6e:9e:ec:d1:27:31:7a:8f:
a4:c3:ec:84:d2:15:f2:f2:e0:37:43:61:6a:a5:1d:a0:73:41:
ac:60:2c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:43:01 2026 by rpki-client