Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jRFJ1Fau_Gr3c7bCC0K-uff1iBU.roa
File: jRFJ1Fau_Gr3c7bCC0K-uff1iBU.roa (raw, json)
Hash identifier: UJCqErCCyg0nyR0PDCqtOrIv/c8PnZ54iVDatEde8UY=
Subject key identifier: 8D:11:49:D4:56:AE:FC:6A:F7:73:B6:C2:0B:42:BE:B9:F7:F5:88:15
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A10134AA7261ADD7B78379699B0734BB3B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jRFJ1Fau_Gr3c7bCC0K-uff1iBU.roa
Signing time: Sat 03 Oct 2026 09:59:51 +0000
ROA not before: Sat 03 Oct 2026 09:59:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 149981
IP address blocks: 151.240.9.0/24 maxlen: 24
151.240.14.0/24 maxlen: 24
151.240.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:34:aa:72:61:ad:d7:b7:83:79:69:9b:07:34:bb:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 3 09:59:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d1149d456aefc6af773b6c20b42beb9f7f58815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:12:46:d8:32:05:40:92:99:52:ea:ca:d7:
ca:00:4b:29:27:39:08:fa:2a:0f:42:2f:db:89:ef:
e2:8c:1b:28:8a:53:18:5c:37:ba:35:37:6a:7b:d7:
ab:4e:88:5b:1f:8f:a0:92:e3:42:b0:83:7b:cf:ae:
7a:96:12:f1:a1:87:1d:19:ce:7f:13:9a:71:96:9d:
1f:16:19:49:8a:1e:49:3a:12:65:f7:f4:05:31:fa:
f1:f3:0d:b7:12:14:e2:e7:85:c2:6c:f2:c8:56:92:
01:f5:5d:9a:60:c2:6c:62:df:94:68:c2:ec:e8:d2:
6e:39:21:6b:c0:50:e0:06:65:cf:e6:aa:55:73:64:
be:aa:fe:f4:69:aa:92:b0:1b:cc:e9:74:6e:f9:5b:
65:36:a8:0f:ea:f1:e3:b2:3b:ee:0c:34:97:88:12:
f4:ee:4b:ac:f1:46:5b:a3:17:09:67:27:cc:3c:92:
4f:2a:da:02:2f:2a:00:2c:ba:a2:f6:99:76:71:50:
75:06:53:40:2c:ff:bc:55:15:4f:87:6f:98:ed:c6:
fa:e9:15:a3:be:79:1d:7b:55:46:cb:f9:12:fa:9a:
a5:a8:d6:0d:0f:d3:83:61:1d:32:d8:64:96:25:32:
5d:90:95:2f:8c:3b:22:28:07:d7:64:c6:aa:bc:16:
6b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:11:49:D4:56:AE:FC:6A:F7:73:B6:C2:0B:42:BE:B9:F7:F5:88:15
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jRFJ1Fau_Gr3c7bCC0K-uff1iBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.9.0/24
151.240.14.0/24
151.240.17.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a4:2c:7f:fa:06:9f:d8:40:83:b9:3c:dc:14:19:9e:d7:fc:
ff:81:18:36:49:d0:e7:c4:26:99:5b:a3:de:6d:f6:56:42:ed:
40:61:5d:17:48:c9:20:d4:40:2c:9a:db:1c:89:5c:9b:ff:7b:
75:c6:d3:65:1c:81:d7:e6:5a:63:94:1b:e7:3d:fc:8b:3f:ee:
b6:ae:e9:4d:8a:d1:82:e2:95:17:64:52:07:45:01:30:fc:00:
59:ae:83:a8:bd:bc:fd:66:88:a7:a6:55:52:fd:ae:8a:c6:8b:
cc:ee:92:76:bd:5e:93:11:e8:77:e2:55:02:96:f1:ab:c6:35:
91:c4:39:4e:29:11:3c:80:40:b5:cb:2c:a4:73:8e:e5:ec:24:
78:8d:a6:f4:4d:e5:19:9a:d8:3b:0f:f7:58:81:df:88:24:df:
85:ae:b3:6b:bf:52:bc:c7:72:05:7b:f1:05:4c:39:7d:62:4e:
37:ff:72:c0:31:99:13:43:81:b3:6e:3e:6e:13:f7:f6:b2:de:
c0:27:70:22:33:67:75:b9:a0:90:b5:52:20:55:95:2a:17:60:
d1:e5:95:0a:23:a4:81:ef:9f:c6:20:83:aa:8c:5d:d4:f9:b8:
cf:06:80:9e:a0:4c:38:a6:ed:5b:45:42:67:87:3f:a5:1a:64:
aa:78:f2:31
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaEBNKpyYa3Xt4N5aZsHNLs7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYxMDAzMDk1OTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDExNDlkNDU2YWVmYzZhZjc3M2I2YzIwYjQyYmViOWY3ZjU4ODE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHoSRtgyBUCSmVLqytfKAEspJzkI
+ioPQi/bie/ijBsoilMYXDe6NTdqe9erTohbH4+gkuNCsIN7z656lhLxoYcdGc5/
E5pxlp0fFhlJih5JOhJl9/QFMfrx8w23EhTi54XCbPLIVpIB9V2aYMJsYt+UaMLs
6NJuOSFrwFDgBmXP5qpVc2S+qv70aaqSsBvM6XRu+VtlNqgP6vHjsjvuDDSXiBL0
7kus8UZboxcJZyfMPJJPKtoCLyoALLqi9pl2cVB1BlNALP+8VRVPh2+Y7cb66RWj
vnkde1VGy/kS+pqlqNYND9ODYR0y2GSWJTJdkJUvjDsiKAfXZMaqvBZrMwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFI0RSdRWrvxq93O2wgtCvrn39YgVMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvalJGSjFGYXVfR3IzYzdiQ0MwSy11ZmYxaUJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/AJAwQA
l/AOAwQAl/ARMA0GCSqGSIb3DQEBCwUAA4IBAQB2pCx/+gaf2ECDuTzcFBme1/z/
gRg2SdDnxCaZW6PebfZWQu1AYV0XSMkg1EAsmtsciVyb/3t1xtNlHIHX5lpjlBvn
PfyLP+62rulNitGC4pUXZFIHRQEw/ABZroOovbz9ZoinplVS/a6KxovM7pJ2vV6T
Eeh34lUClvGrxjWRxDlOKRE8gEC1yyykc47l7CR4jab0TeUZmtg7D/dYgd+IJN+F
rrNrv1K8x3IFe/EFTDl9Yk43/3LAMZkTQ4Gzbj5uE/f2st7AJ3AiM2d1uaCQtVIg
VZUqF2DR5ZUKI6SB75/GIIOqjF3U+bjPBoCeoEw4pu1bRUJnhz+lGmSqePIx
-----END CERTIFICATE-----
Generated at Tue Oct 20 18:32:46 2026 by rpki-client