Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/e_SIQuGGD2oaDSGsZhE4a0ux9x0.roa
File: e_SIQuGGD2oaDSGsZhE4a0ux9x0.roa (raw, json)
Hash identifier: zTfhAftqMVtCHGbzWPBH4SsP71TZ4RJE59bLCqQFFYY=
Subject key identifier: 7B:F4:88:42:E1:86:0F:6A:1A:0D:21:AC:66:11:38:6B:4B:B1:F7:1D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E5D880F3F8C0123848803680B1804CF58
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/e_SIQuGGD2oaDSGsZhE4a0ux9x0.roa
Signing time: Mon 25 May 2026 05:07:38 +0000
ROA not before: Mon 25 May 2026 05:07:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205489
IP address blocks: 151.245.191.0/24 maxlen: 24
151.246.193.0/24 maxlen: 24
151.246.196.0/24 maxlen: 24
151.246.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5d:88:0f:3f:8c:01:23:84:88:03:68:0b:18:04:cf:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 25 05:07:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bf48842e1860f6a1a0d21ac6611386b4bb1f71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a4:f1:3e:bb:5e:73:1f:eb:96:66:5e:48:2f:
63:a1:16:a0:9c:56:7c:0a:e3:9b:88:5a:90:5a:31:
af:f3:a8:d0:ba:a6:af:1a:b0:98:14:ae:6e:c6:10:
b4:17:14:33:b7:aa:54:b6:d0:db:82:dc:9d:03:65:
e5:88:14:ad:b3:70:30:1d:27:da:f0:27:c2:57:f4:
a8:34:58:73:9a:5d:97:5b:3c:98:cf:71:99:a3:18:
e6:2a:61:f9:36:89:1c:66:c7:74:7c:d4:33:02:27:
45:f4:a3:ee:58:b3:68:51:ba:6c:31:70:9f:b2:0e:
ca:8a:54:ba:67:bc:93:b2:5a:f3:b2:b3:f3:92:b7:
e8:92:f5:6d:e8:e3:5a:b8:95:d4:0a:93:38:6c:32:
0c:2e:5f:a4:0c:08:60:bc:f8:72:4e:00:77:a2:62:
9c:b2:30:67:0b:1c:2f:05:df:52:e9:15:c1:53:cc:
e4:a3:94:e5:b0:0f:c5:27:d5:5f:57:f2:95:64:af:
c2:9f:9c:a8:88:dc:27:c6:0d:17:0d:5a:37:6c:2a:
06:5d:ae:6f:d4:8d:87:49:7c:27:cf:c3:79:38:84:
eb:e3:a1:35:3e:80:89:a3:55:eb:40:8e:2c:89:ab:
81:a7:39:fa:01:00:b8:22:60:68:40:2d:dc:a4:3c:
6d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F4:88:42:E1:86:0F:6A:1A:0D:21:AC:66:11:38:6B:4B:B1:F7:1D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/e_SIQuGGD2oaDSGsZhE4a0ux9x0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.191.0/24
151.246.193.0/24
151.246.196.0/24
151.246.199.0/24
Signature Algorithm: sha256WithRSAEncryption
00:5f:9f:9c:9b:c8:f7:3e:0d:99:59:1a:8c:f5:38:d0:10:25:
12:e6:c0:15:2a:df:2c:8e:eb:d5:93:c3:f5:e9:74:1f:20:e5:
0f:8c:ad:ce:a5:98:6a:b4:b1:3f:19:b9:8f:8b:d8:a8:11:9d:
ee:e6:68:61:81:e1:37:a7:9d:93:cb:65:f0:2c:63:56:45:c0:
fe:d7:17:c5:9b:14:e7:09:ab:85:26:f6:a7:b1:c0:4e:49:1f:
f9:c5:a1:ed:31:74:2c:c0:9d:10:05:d7:0c:48:34:cc:89:50:
20:82:5e:0f:cc:0f:b4:dd:94:c4:66:8d:41:78:96:fe:f7:50:
f5:6e:8c:ba:c8:9d:31:c4:c1:bf:52:02:6b:1b:77:8a:4f:1d:
2e:b8:c2:c8:c4:29:82:49:79:a0:74:6b:45:9b:3f:59:2f:2c:
7a:8f:62:86:e3:8b:1d:93:b6:76:6a:a2:d0:70:a8:fe:1c:7b:
15:3b:55:b5:6e:ce:bd:7f:69:c7:fd:54:be:a5:d4:02:91:42:
e1:25:3d:45:80:6c:c2:1a:eb:eb:6c:3f:30:a1:59:a9:0f:ad:
f3:ae:6d:93:26:ef:e3:5c:ee:98:0f:8b:13:cd:7b:3a:a6:da:
57:04:73:b0:2b:16:35:f7:5e:36:32:db:1a:33:d1:a7:0b:5e:
0f:15:29:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:26:13 2026 by rpki-client