Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fCjj9t5HCp3OHTGgmtwgqcF4AcA.roa
File: fCjj9t5HCp3OHTGgmtwgqcF4AcA.roa (raw, json)
Hash identifier: duAvANDemTi4UO1ASPLiMeN1vX7O7Xm6triBnffrzqg=
Subject key identifier: 7C:28:E3:F6:DE:47:0A:9D:CE:1D:31:A0:9A:DC:20:A9:C1:78:01:C0
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F3746F8228ECC37B118188661A1FC9E36
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fCjj9t5HCp3OHTGgmtwgqcF4AcA.roa
Signing time: Mon 06 Jul 2026 11:53:45 +0000
ROA not before: Mon 06 Jul 2026 11:53:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64267
IP address blocks: 151.240.2.0/24 maxlen: 24
151.241.33.0/24 maxlen: 24
151.241.43.0/24 maxlen: 24
151.241.48.0/24 maxlen: 24
151.242.26.0/24 maxlen: 24
151.242.114.0/24 maxlen: 24
151.243.26.0/24 maxlen: 24
151.244.42.0/24 maxlen: 24
151.244.69.0/24 maxlen: 24
151.245.69.0/24 maxlen: 24
151.246.224.0/24 maxlen: 24
151.246.230.0/24 maxlen: 24
151.246.234.0/24 maxlen: 24
151.247.35.0/24 maxlen: 24
151.247.101.0/24 maxlen: 24
151.247.108.0/24 maxlen: 24
151.247.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 11:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:46:f8:22:8e:cc:37:b1:18:18:86:61:a1:fc:9e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 6 11:53:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c28e3f6de470a9dce1d31a09adc20a9c17801c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:b8:14:c5:a8:13:81:98:1d:ce:84:05:fc:
5a:0a:53:43:82:b3:93:01:46:24:f1:13:93:c0:a4:
5f:f6:72:19:22:e2:6e:40:9f:11:60:47:99:3b:c3:
4d:cf:2f:f7:a1:d4:17:d9:d2:93:eb:2d:9f:ae:ab:
ee:9f:5c:0d:e8:85:47:6f:3a:9d:f7:67:18:6a:30:
bb:d7:aa:ac:d5:61:ff:40:86:ae:0d:d3:8d:c2:39:
35:ab:8d:3b:1f:15:2b:58:b5:51:d1:80:f7:ec:53:
ac:aa:1b:43:5d:3e:25:0e:16:5b:6a:be:fb:42:78:
bf:ac:d0:f8:45:32:1c:02:39:05:a5:b4:2b:86:0c:
3c:b4:f1:64:77:ad:e5:3c:67:a4:77:1f:eb:f7:cd:
3b:28:6f:b9:9c:29:97:48:15:02:7a:03:5d:8c:9d:
ce:00:37:dd:51:af:ad:10:96:43:bd:6d:33:1f:d1:
b5:67:c2:2b:19:4e:a5:1b:12:94:a6:91:54:fe:23:
08:f2:d1:18:b4:5d:83:fe:c8:2c:6a:c7:58:51:5c:
67:4c:23:f1:f9:95:09:9b:10:1a:96:98:48:fc:7a:
0a:29:6a:3d:4b:fb:b7:8e:58:70:f2:81:7e:47:a3:
e2:0f:ed:b6:70:51:16:b6:5b:3e:1d:d7:15:d5:23:
8e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:28:E3:F6:DE:47:0A:9D:CE:1D:31:A0:9A:DC:20:A9:C1:78:01:C0
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fCjj9t5HCp3OHTGgmtwgqcF4AcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.2.0/24
151.241.33.0/24
151.241.43.0/24
151.241.48.0/24
151.242.26.0/24
151.242.114.0/24
151.243.26.0/24
151.244.42.0/24
151.244.69.0/24
151.245.69.0/24
151.246.224.0/24
151.246.230.0/24
151.246.234.0/24
151.247.35.0/24
151.247.101.0/24
151.247.108.0/24
151.247.246.0/24
Signature Algorithm: sha256WithRSAEncryption
56:4e:0b:0a:af:02:5a:e8:8e:ab:ac:37:35:40:b8:76:f6:c5:
56:1f:68:63:e1:50:33:39:34:ca:61:77:b4:48:c2:75:1a:b1:
e9:94:cb:18:7f:12:35:38:7c:13:9a:6f:d8:3f:bd:54:f0:9c:
bb:d5:82:01:7b:f2:e6:4e:62:c6:79:c4:dd:9c:06:56:13:0c:
45:a9:d5:07:64:bc:e6:e9:28:d9:b4:ce:e4:9f:e5:20:28:95:
d5:5b:29:10:44:69:c9:e9:a5:ef:c7:01:7a:60:ea:e5:15:63:
1d:ef:7a:bc:ab:96:15:83:a7:08:37:9b:95:eb:d1:df:37:50:
6e:9d:b2:85:98:1c:84:02:4a:82:6b:90:06:86:d1:96:3c:40:
76:8b:9d:05:0c:97:76:85:b9:e1:60:94:8a:ac:c7:76:0a:60:
9e:e2:08:a5:cf:e0:b6:66:87:37:eb:31:88:1b:fd:30:85:fc:
7f:c7:0b:85:64:7e:85:ca:16:de:e7:0f:49:c5:ca:0c:5b:57:
4d:b6:d9:95:4e:bd:61:c0:eb:24:92:d1:35:92:81:49:97:78:
2e:61:a9:c0:ae:2e:c8:28:99:05:b9:d4:87:5a:1e:fb:94:4d:
52:46:18:bb:af:65:49:f8:26:bb:83:95:df:a6:d1:11:6c:33:
3f:6a:ff:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 16:09:37 2026 by rpki-client