Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/iTXLjBozi6BDP2Scvaxjtw-3oR0.roa
File: iTXLjBozi6BDP2Scvaxjtw-3oR0.roa (raw, json)
Hash identifier: 1XcK04yX0icK4UTirfjqj9N4sytwNp0OMcKzz6HW9RI=
Subject key identifier: 89:35:CB:8C:1A:33:8B:A0:43:3F:64:9C:BD:AC:63:B7:0F:B7:A1:1D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F11F37C94EA29C6DBEF7A4BF0F365D021
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/iTXLjBozi6BDP2Scvaxjtw-3oR0.roa
Signing time: Mon 29 Jun 2026 05:56:37 +0000
ROA not before: Mon 29 Jun 2026 05:56:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 151.242.143.0/24 maxlen: 24
151.244.162.0/23 maxlen: 24
151.247.44.0/23 maxlen: 24
151.247.137.0/24 maxlen: 24
151.247.161.0/24 maxlen: 24
151.247.165.0/24 maxlen: 24
151.247.182.0/23 maxlen: 24
151.247.250.0/24 maxlen: 24
151.247.253.0/24 maxlen: 24
151.247.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f3:7c:94:ea:29:c6:db:ef:7a:4b:f0:f3:65:d0:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 29 05:56:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8935cb8c1a338ba0433f649cbdac63b70fb7a11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0a:4c:1b:29:1d:38:7d:9b:b4:81:a1:dc:58:
f2:17:51:94:59:0e:d5:cf:7d:c6:91:59:3f:76:07:
1e:a1:fb:32:20:89:ff:39:cf:8f:a2:b8:52:05:e5:
80:7f:0b:fa:e8:37:40:3d:ea:3a:d4:a9:ac:f5:ce:
5b:c8:bf:81:94:e5:d9:62:02:43:45:79:74:e1:95:
ff:78:fd:1b:1f:bd:15:6f:04:b9:74:4d:ab:fb:d6:
73:ae:d7:9a:6b:ac:1e:a1:e2:a4:9b:74:16:0e:97:
42:a8:15:fb:66:81:df:3f:22:7f:31:31:0c:89:ee:
3c:3f:f2:a3:16:04:98:32:26:1d:75:9e:5c:47:c7:
74:f0:dc:0e:05:7a:d2:ea:09:5d:77:f5:16:fb:e9:
a7:6e:d6:92:85:f2:b7:14:4b:ed:18:2a:7e:82:ba:
76:ac:3e:55:d7:70:22:1f:85:4e:20:c9:ec:08:9b:
b0:12:4c:41:b7:33:5d:69:89:e7:28:81:42:5a:ae:
2e:01:c9:ee:11:04:5a:d5:ff:b8:9e:25:96:90:29:
5e:26:8d:03:49:21:a4:6a:cf:51:16:f2:33:63:9f:
a5:50:a0:a2:c7:08:8d:9a:20:2a:95:ef:9c:58:33:
1b:9f:27:f4:cd:40:2a:df:0a:64:37:65:13:88:f3:
15:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:35:CB:8C:1A:33:8B:A0:43:3F:64:9C:BD:AC:63:B7:0F:B7:A1:1D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/iTXLjBozi6BDP2Scvaxjtw-3oR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.143.0/24
151.244.162.0/23
151.247.44.0/23
151.247.137.0/24
151.247.161.0/24
151.247.165.0/24
151.247.182.0/23
151.247.250.0/24
151.247.253.0-151.247.254.255
Signature Algorithm: sha256WithRSAEncryption
6f:c3:4c:dc:21:84:03:ef:0a:2d:8a:44:cb:95:64:d9:e9:cd:
bb:4a:2f:71:94:42:b0:94:43:02:fb:cf:5f:17:9a:1f:fa:33:
1e:80:f5:3f:82:48:d2:9e:56:f1:ee:2e:7a:e1:ce:c3:70:7e:
d8:de:dc:fb:69:cc:32:d5:b3:11:fe:fc:9e:6d:5f:ea:e7:4e:
72:01:31:54:1f:e7:16:48:cf:cd:e2:aa:f4:97:f1:16:03:b3:
86:10:73:6b:5d:ed:56:7f:cd:70:42:34:b5:f2:83:1f:31:63:
e1:e0:50:20:e6:12:17:ce:56:af:7e:3d:a5:8c:6e:17:ce:ed:
eb:f9:2f:8e:29:88:f8:ea:20:20:93:9a:90:fe:c8:84:42:35:
6f:56:81:50:86:2c:0f:4f:e0:70:b7:5c:7e:9b:f4:3d:4a:36:
83:c8:14:e9:55:52:89:89:cf:34:0f:b5:e8:c1:83:1e:f3:67:
1a:1a:e3:14:b8:69:45:6d:7d:19:de:64:8e:d2:78:ca:23:06:
41:34:7b:05:d2:3a:9a:fb:8f:e8:83:6e:0f:d1:f4:93:cf:b0:
a4:62:de:68:30:4e:59:01:38:86:95:a8:70:00:ac:5f:47:23:
a7:c6:a5:3e:95:7e:4a:e9:f1:b4:4c:fd:40:5a:90:d9:5f:26:
9c:15:bd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:51 2026 by rpki-client