Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eRC5Z7P2oRSWBEv6exb3gT6mMtE.roa
File: eRC5Z7P2oRSWBEv6exb3gT6mMtE.roa (raw, json)
Hash identifier: GEpbTf6Vznh8gOeWSP5bHOv0mvLjlku3I5Qh1IpjYA0=
Subject key identifier: 79:10:B9:67:B3:F6:A1:14:96:04:4B:FA:7B:16:F7:81:3E:A6:32:D1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FAD8BEE242DDAF21CAD773742F5523D12
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eRC5Z7P2oRSWBEv6exb3gT6mMtE.roa
Signing time: Wed 29 Jul 2026 11:04:16 +0000
ROA not before: Wed 29 Jul 2026 11:04:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402343
IP address blocks: 151.242.153.0/24 maxlen: 24
151.242.251.0/24 maxlen: 24
151.243.128.0/24 maxlen: 24
151.243.131.0/24 maxlen: 24
151.244.93.0/24 maxlen: 24
151.244.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:8b:ee:24:2d:da:f2:1c:ad:77:37:42:f5:52:3d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 29 11:04:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7910b967b3f6a11496044bfa7b16f7813ea632d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:a9:e8:ad:52:6e:5a:e2:81:35:77:cf:c0:
c5:ae:26:ee:68:5a:a4:ca:60:28:16:4d:1e:f3:76:
77:dc:ef:94:d6:62:bb:f8:5f:30:ab:79:a2:23:56:
82:f7:45:6e:5a:3d:dd:b0:13:3b:6b:8e:6e:ed:64:
0d:b4:04:0f:5b:b4:6e:06:fc:de:69:62:67:ba:9b:
dc:ab:db:dd:89:f0:87:e5:7b:a9:31:b4:91:ad:fc:
82:22:30:6b:4a:17:20:b4:0e:f2:dc:2d:4a:86:42:
f6:de:6a:1c:43:90:f6:cf:f1:fa:be:67:17:36:35:
6f:a6:3b:28:b9:12:73:5c:a6:d1:65:9e:6c:fe:68:
b7:34:9a:71:a6:7e:be:6e:6b:24:ec:73:20:29:f7:
81:1f:6e:21:74:86:b9:00:c0:0b:ea:03:57:a6:bd:
c5:ba:40:10:1d:2d:a3:26:6c:65:05:23:4c:99:06:
30:42:ea:e2:39:cd:e4:6b:df:30:00:1c:7f:41:31:
c8:55:1d:b0:23:52:33:46:b9:2f:14:1b:72:4b:70:
28:47:c2:d0:f1:8a:19:4f:00:d5:42:4e:62:df:53:
9e:45:34:a6:f8:d5:10:3d:dc:a5:19:22:f6:90:85:
16:a9:0c:6d:e2:3c:49:5f:66:77:f0:e0:d8:5f:25:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:10:B9:67:B3:F6:A1:14:96:04:4B:FA:7B:16:F7:81:3E:A6:32:D1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eRC5Z7P2oRSWBEv6exb3gT6mMtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.153.0/24
151.242.251.0/24
151.243.128.0/24
151.243.131.0/24
151.244.93.0/24
151.244.173.0/24
Signature Algorithm: sha256WithRSAEncryption
08:1b:8e:04:88:28:e9:76:13:20:1a:72:b5:cd:e7:13:80:77:
c4:49:f4:09:b1:76:3b:aa:30:f0:f9:e1:6a:b0:21:ab:f2:22:
62:9e:9f:a3:7a:f9:01:a5:0b:4b:d5:92:62:6b:78:d4:8d:ea:
6f:4f:5d:b1:fa:be:8b:42:da:33:ca:b1:6f:0d:56:ac:91:03:
4f:92:ee:b1:f7:3f:3c:f6:e7:c8:27:f2:73:81:84:84:e1:38:
a4:f2:d2:9e:5a:de:28:84:66:e8:a6:58:30:48:37:78:ca:ed:
ec:ac:6c:93:7d:04:58:43:ec:06:5a:e0:ce:39:e0:73:15:ed:
6f:9d:0e:56:30:da:cc:5c:fe:81:f4:3c:c6:ae:06:61:0b:67:
30:f7:35:98:9a:2a:47:5e:da:07:ea:f3:8f:19:be:7e:fc:d6:
b9:b4:77:ad:74:e2:9e:89:09:29:14:69:46:e9:19:32:2e:1e:
b0:41:b7:6a:80:19:f7:46:18:12:5e:57:7d:25:d4:2c:c1:73:
ae:81:7a:a7:96:f3:3a:30:55:eb:70:b5:c6:eb:d9:41:8f:f2:
cf:18:3e:ba:d3:9b:ee:45:94:8c:13:60:63:13:5d:56:1b:8c:
df:9c:f1:d6:de:d9:e4:b2:49:d6:75:a2:5a:15:23:70:75:f1:
af:7a:97:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 00:41:15 2026 by rpki-client