Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dL58RE2pus2tAZmSNi_Un4mixOk.roa
File: dL58RE2pus2tAZmSNi_Un4mixOk.roa (raw, json)
Hash identifier: Tmc1zz6s6j1AFP9Qv4mtGYwaUPq5dt7nLbgl9rNwKlc=
Subject key identifier: 74:BE:7C:44:4D:A9:BA:CD:AD:01:99:92:36:2F:D4:9F:89:A2:C4:E9
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A067F804592A229772ACEF134F27FFA8E0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dL58RE2pus2tAZmSNi_Un4mixOk.roa
Signing time: Thu 03 Sep 2026 15:51:42 +0000
ROA not before: Thu 03 Sep 2026 15:51:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 151.241.168.0/24 maxlen: 24
151.241.213.0/24 maxlen: 24
151.241.222.0/24 maxlen: 24
151.242.20.0/24 maxlen: 24
151.242.39.0/24 maxlen: 24
151.242.226.0/24 maxlen: 24
151.244.48.0/24 maxlen: 24
151.244.226.0/24 maxlen: 24
151.244.227.0/24 maxlen: 24
151.245.34.0/24 maxlen: 24
151.245.42.0/24 maxlen: 24
151.245.89.0/24 maxlen: 24
151.245.123.0/24 maxlen: 24
151.245.124.0/24 maxlen: 24
151.245.125.0/24 maxlen: 24
151.245.147.0/24 maxlen: 24
151.246.147.0/24 maxlen: 24
151.246.159.0/24 maxlen: 24
151.246.167.0/24 maxlen: 24
151.246.181.0/24 maxlen: 24
151.246.191.0/24 maxlen: 24
151.246.203.0/24 maxlen: 24
151.247.41.0/24 maxlen: 24
151.247.141.0/24 maxlen: 24
151.247.161.0/24 maxlen: 24
151.247.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:f8:04:59:2a:22:97:72:ac:ef:13:4f:27:ff:a8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 3 15:51:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74be7c444da9bacdad019992362fd49f89a2c4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:25:2b:b6:a2:86:6f:2a:d2:15:e9:c9:8c:15:
83:d7:49:9e:19:aa:67:91:0a:5e:b6:67:cf:e6:7c:
9d:02:1d:a6:77:5d:e1:08:f5:1d:b3:34:62:47:f5:
06:8b:0e:37:46:15:f7:af:19:dd:8d:13:6b:35:fe:
18:3b:bb:03:65:fe:4c:d4:1c:5c:38:60:3b:d1:c7:
b0:92:02:63:07:1e:e4:7a:05:63:f4:e6:2d:da:c7:
e7:b1:80:ae:fd:8c:24:c0:bd:11:fb:61:28:4a:96:
41:ac:08:16:77:71:f5:0b:1c:5e:b2:5c:82:82:9f:
03:f5:35:3e:05:52:9b:4b:61:48:f1:20:46:97:21:
7a:b5:7b:a5:d6:5c:d1:6a:45:a2:b5:f3:db:d5:b2:
7b:7b:94:2d:ff:26:19:40:e5:87:2a:eb:9f:11:1e:
b6:d7:3d:94:e1:79:de:5d:df:59:c9:4c:08:5b:23:
7b:f6:b5:9c:5b:85:68:cc:25:c2:cc:aa:39:18:ee:
75:38:14:a6:de:dc:37:23:35:e9:91:c2:e2:b2:3a:
bf:15:6b:23:f7:98:a6:42:8f:02:dd:0b:e2:65:82:
9a:15:45:0f:de:64:3f:fb:7b:4b:1e:93:3d:95:e3:
48:10:50:e8:36:c0:73:1c:3b:ac:f9:36:22:3c:61:
84:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BE:7C:44:4D:A9:BA:CD:AD:01:99:92:36:2F:D4:9F:89:A2:C4:E9
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dL58RE2pus2tAZmSNi_Un4mixOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.168.0/24
151.241.213.0/24
151.241.222.0/24
151.242.20.0/24
151.242.39.0/24
151.242.226.0/24
151.244.48.0/24
151.244.226.0/23
151.245.34.0/24
151.245.42.0/24
151.245.89.0/24
151.245.123.0-151.245.125.255
151.245.147.0/24
151.246.147.0/24
151.246.159.0/24
151.246.167.0/24
151.246.181.0/24
151.246.191.0/24
151.246.203.0/24
151.247.41.0/24
151.247.141.0/24
151.247.161.0/24
151.247.254.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:9e:1d:0c:82:9d:bc:d6:6d:7d:c1:2b:cd:4b:4c:95:00:a8:
7a:84:1f:27:2d:a9:c4:b2:46:ce:4c:c5:d2:d2:b6:de:9d:be:
8c:3e:fb:5b:e8:9d:d6:4f:f4:4c:7e:4c:e0:83:b5:c3:4e:f3:
64:d9:b3:7b:fb:01:80:23:ee:c0:a8:26:2e:09:e8:94:55:06:
4c:99:ea:70:88:0c:b1:e9:d5:26:4f:4a:f9:67:fb:62:b2:fe:
dc:57:71:47:f9:ff:b9:f8:8e:91:88:de:56:1e:6c:45:30:bb:
f6:64:c4:ea:e9:b6:7f:f0:9a:da:68:15:d7:fc:54:2a:ff:46:
68:26:3c:98:9f:66:17:c1:34:97:0a:de:af:a2:bc:2e:b2:5f:
30:ac:81:3d:c0:2e:49:2c:60:67:a9:dc:dd:83:ab:3d:ea:69:
00:57:b3:b1:f0:12:d1:db:f0:93:d7:3e:e6:49:f4:07:cb:9c:
92:e3:e8:a5:68:67:75:e4:95:66:5f:e6:d7:21:7a:56:3d:5b:
70:7f:36:01:ca:b5:21:41:7e:96:ac:ab:e2:53:f2:55:1f:b6:
78:43:0e:12:05:51:b9:78:d6:a5:5a:b6:a6:3e:64:20:b5:62:
a6:52:42:1f:6e:bc:b2:1d:48:47:5c:29:ec:67:cd:9e:4a:30:
be:9e:38:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:22 2026 by rpki-client