Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eQLAOFVoA44mLUdrOqs_sBUSfDs.roa
File: eQLAOFVoA44mLUdrOqs_sBUSfDs.roa (raw, json)
Hash identifier: 4WVGIvi9Yw6Izio2EhfeMVYQktpxQkuuS+LumPC6gRw=
Subject key identifier: 79:02:C0:38:55:68:03:8E:26:2D:47:6B:3A:AB:3F:B0:15:12:7C:3B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F8487BB6685724C286DEE025A51E70685
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eQLAOFVoA44mLUdrOqs_sBUSfDs.roa
Signing time: Tue 21 Jul 2026 11:55:15 +0000
ROA not before: Tue 21 Jul 2026 11:55:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54004
IP address blocks: 151.240.155.0/24 maxlen: 24
151.247.202.0/24 maxlen: 24
151.247.203.0/24 maxlen: 24
151.247.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:55:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:87:bb:66:85:72:4c:28:6d:ee:02:5a:51:e7:06:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 21 11:55:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7902c0385568038e262d476b3aab3fb015127c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:85:4d:9d:ec:73:b8:d9:ab:ea:68:44:1c:5b:
ae:6b:9b:26:7d:aa:94:07:74:72:b2:c4:54:61:01:
bd:8f:e3:a7:f1:fd:30:d4:37:5b:20:c1:5b:89:c7:
08:97:bc:54:24:3e:86:fc:6e:9f:2e:b2:92:d8:e7:
98:36:ce:6b:96:e1:4f:2b:7f:98:2f:c3:bb:1c:db:
98:b9:b8:ed:e7:f5:d6:ea:53:71:18:a7:c7:34:7e:
13:52:cd:62:9b:58:11:fa:3a:51:28:7d:1a:20:b6:
cc:a6:6d:96:85:05:f0:35:74:2b:50:17:44:7c:be:
4f:b4:15:2b:e1:d4:a7:22:24:bb:89:06:3b:40:be:
21:7e:a6:7b:24:32:bf:e4:fb:51:2b:1d:bb:b0:f4:
64:57:63:41:d0:ec:71:17:c2:d1:b5:aa:91:f9:48:
92:23:75:fc:e5:4d:54:77:81:59:c6:cb:f1:3b:93:
df:09:a3:a1:40:c7:f7:a5:1e:df:e9:48:5e:46:c8:
5f:52:1a:8a:4d:28:06:7f:15:8b:d9:b1:11:07:5d:
32:ed:ba:af:e7:cf:34:97:ea:28:f7:34:29:ac:b0:
00:73:8e:47:a4:5f:14:9d:a2:c3:04:83:04:78:11:
53:02:87:8f:9f:9d:cd:01:83:bc:f8:2f:0f:e3:1d:
35:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:02:C0:38:55:68:03:8E:26:2D:47:6B:3A:AB:3F:B0:15:12:7C:3B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eQLAOFVoA44mLUdrOqs_sBUSfDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.155.0/24
151.247.202.0-151.247.204.255
Signature Algorithm: sha256WithRSAEncryption
77:3e:68:5d:c3:de:dd:0a:95:9b:e1:8a:ad:a5:e3:40:48:87:
43:60:c1:b5:64:d7:85:a0:1a:4c:70:9d:9c:7f:1d:3d:4a:39:
4b:b4:92:c2:21:b9:30:ea:d7:76:2e:44:58:fd:47:53:9d:b2:
5e:58:9b:42:1f:d7:67:18:81:84:66:05:84:03:d0:c7:14:e2:
1c:cc:50:e7:0a:f7:6f:1e:c9:a4:7b:21:ee:35:54:78:15:0c:
ac:65:a3:c0:6d:37:5f:8f:25:09:bb:68:20:4e:76:48:7e:ae:
8f:ae:b1:d0:e6:5b:56:01:59:ce:9c:4e:1e:f1:62:fa:b2:3f:
bd:23:10:0e:97:15:c2:fe:a1:7d:47:d0:15:d2:39:65:87:7e:
36:ce:92:41:e5:9b:b9:c0:36:af:e3:3e:22:34:8f:3b:f5:94:
80:ff:d9:a4:4f:31:50:7f:df:60:12:19:9b:03:7c:45:8e:3a:
af:89:65:fa:05:31:8e:6a:a9:65:69:0e:26:bd:2d:ce:ce:f6:
af:a1:c6:fc:ec:66:a1:f8:a6:fd:aa:94:c2:60:9f:ef:ad:12:
48:5f:35:ba:f3:9d:4e:99:04:21:63:6c:98:1d:fc:8c:91:11:
51:5a:4c:7b:69:3f:e3:dc:53:eb:bd:e3:2a:d9:9c:16:96:6f:
e1:50:99:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:48 2026 by rpki-client