Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hr9KW-oUrIAaGuT23xANjUWAUwM.roa
File: hr9KW-oUrIAaGuT23xANjUWAUwM.roa (raw, json)
Hash identifier: C0kAHAIMmwYEaLqqY8OnqgJAxZ0fuhdwGv7bxbcpWJo=
Subject key identifier: 86:BF:4A:5B:EA:14:AC:80:1A:1A:E4:F6:DF:10:0D:8D:45:80:53:03
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DC2FD3ADA2954B57FB59547F58C3E5B03
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hr9KW-oUrIAaGuT23xANjUWAUwM.roa
Signing time: Sat 25 Apr 2026 04:54:28 +0000
ROA not before: Sat 25 Apr 2026 04:54:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214024
IP address blocks: 151.241.128.0/22 maxlen: 24
151.246.184.0/24 maxlen: 24
151.246.185.0/24 maxlen: 24
151.247.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:37:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c2:fd:3a:da:29:54:b5:7f:b5:95:47:f5:8c:3e:5b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 25 04:54:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86bf4a5bea14ac801a1ae4f6df100d8d45805303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:44:c8:1d:88:2b:d4:f2:fa:aa:d4:cd:c1:
03:42:8c:0b:15:97:38:9a:0a:07:1f:1e:0e:6e:3a:
90:80:c0:d5:88:ee:18:59:c7:82:86:ed:c2:61:50:
3c:84:8b:5c:44:48:ca:68:45:25:9b:c3:9e:5e:48:
85:09:bc:6e:d5:0d:b1:95:28:34:2a:cb:01:26:62:
81:84:8c:21:37:9e:c0:3b:60:e4:b3:b0:84:b2:e1:
0d:26:bd:a4:d8:dc:d1:ae:01:c2:48:48:b3:89:0b:
67:13:3f:ef:28:3d:46:be:d1:13:95:a7:08:9b:86:
b9:c3:4a:46:51:55:fb:c7:2f:73:81:3b:25:82:1d:
43:56:50:b2:ec:c9:b1:21:00:d0:0f:22:59:b5:40:
e0:a4:f5:02:37:7c:7b:23:e4:04:4c:be:dd:20:96:
2c:26:31:dd:aa:68:69:cf:ba:11:e7:db:f7:87:d3:
20:7b:b3:2b:70:2a:ad:08:c2:62:c1:a3:28:6f:8b:
c2:f5:22:0c:6c:d9:bd:12:8c:c3:82:35:8f:06:6b:
cc:c1:05:80:d1:a2:eb:55:21:76:23:1a:4b:db:e8:
2b:c4:ab:ff:37:d0:94:a8:f8:06:be:b9:01:83:8e:
a9:60:46:a5:42:a1:6b:be:04:3b:12:73:11:6a:bc:
e8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BF:4A:5B:EA:14:AC:80:1A:1A:E4:F6:DF:10:0D:8D:45:80:53:03
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hr9KW-oUrIAaGuT23xANjUWAUwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
151.246.184.0/23
151.247.162.0/24
Signature Algorithm: sha256WithRSAEncryption
10:48:a4:1b:5a:24:61:64:8f:47:ff:03:53:d1:9d:39:c8:32:
ad:43:25:8d:95:4c:0c:82:d4:29:ff:25:6c:3e:59:90:36:f7:
73:99:21:34:19:01:6d:b3:d0:37:08:38:00:cc:01:ce:48:af:
02:59:e8:ac:a3:16:5c:e6:09:3b:64:63:7a:03:4e:1c:4f:7a:
e4:ce:db:57:f3:7e:d4:7b:34:67:a8:d4:ba:1e:c3:96:27:4c:
36:12:d1:5d:bf:bb:40:24:be:97:d2:68:1d:78:b9:22:9e:6b:
79:b9:a9:8c:04:94:38:c3:fc:18:09:4d:0d:a3:2c:b5:81:7f:
98:a8:7e:ce:c4:d3:b2:d1:c9:40:c2:b9:7c:de:c8:cc:6b:31:
f9:14:02:70:e0:d2:f6:8b:0d:f6:6b:81:4b:20:63:1f:b9:ed:
07:e2:0c:e0:45:1b:38:be:79:c2:c0:fd:c4:94:5d:42:ed:ba:
2f:39:5f:48:dc:a6:7f:29:f4:ca:f0:dc:1d:ab:50:95:b5:0b:
b8:62:56:01:4b:f8:17:31:ca:e6:e5:9f:5f:cb:39:f5:8c:44:
a5:05:7a:de:47:3a:ac:cf:d3:fe:66:d7:69:72:d7:b1:ca:af:
1f:ae:6c:7b:01:eb:be:4d:e9:78:65:3f:3d:04:2a:5f:7e:5a:
e6:8c:1c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:15:45 2026 by rpki-client