Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jeNAcbqwfYFAlRaNWC5omO6yau4.roa
File: jeNAcbqwfYFAlRaNWC5omO6yau4.roa (raw, json)
Hash identifier: 9RIk+l7M5Yp/+EkC2ljZdWE3AqkwPr0R2ABuY2HXMgc=
Subject key identifier: 8D:E3:40:71:BA:B0:7D:81:40:95:16:8D:58:2E:68:98:EE:B2:6A:EE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FD741B5C5806ADACEAE10D4A41A58FFB9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jeNAcbqwfYFAlRaNWC5omO6yau4.roa
Signing time: Thu 06 Aug 2026 13:27:15 +0000
ROA not before: Thu 06 Aug 2026 13:27:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212980
IP address blocks: 151.244.142.0/24 maxlen: 24
151.244.240.0/24 maxlen: 24
151.245.214.0/23 maxlen: 23
151.246.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:41:b5:c5:80:6a:da:ce:ae:10:d4:a4:1a:58:ff:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 6 13:27:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8de34071bab07d814095168d582e6898eeb26aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:f4:ab:26:9e:c6:b7:33:3e:c0:d1:e5:ed:
e5:ec:21:c0:60:d0:4e:e1:c9:cd:42:cc:bb:06:91:
e6:e1:e3:f9:29:3f:c0:4c:a1:0e:30:1e:64:aa:d2:
28:a5:5d:5a:0e:3b:72:6b:fd:89:11:84:f3:a9:a7:
16:f5:e3:bf:d2:f7:54:0e:42:61:82:f9:f3:7f:8a:
a9:be:01:62:41:62:00:0d:28:68:83:42:24:09:ca:
ef:df:85:ef:75:be:88:9a:0e:b1:77:2e:c2:b2:8c:
2b:c9:57:03:8d:0d:51:99:38:ba:d6:b2:88:1c:7b:
c5:4e:86:2b:93:3f:d4:bf:f1:c7:5c:2b:dd:a5:ff:
42:58:66:51:05:09:45:b1:7c:eb:3a:3b:19:6e:a7:
a3:a2:87:d9:fe:4c:fe:04:96:80:ee:48:16:c5:50:
54:67:2c:8a:91:2d:a2:ad:c2:c2:a3:12:4b:ac:54:
39:8d:5d:ff:ac:72:3c:f9:9c:4f:77:ef:6a:3b:12:
d5:e4:a5:a6:7f:f6:ea:44:52:61:3c:82:f3:01:0a:
c1:3d:76:77:83:59:d5:20:6f:9d:bd:f4:ec:ab:69:
25:6b:fa:1b:7c:16:b8:37:7a:ac:f3:40:66:c8:c9:
18:ec:d2:53:f1:fa:cb:cd:6f:2e:b9:15:9d:b3:af:
26:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E3:40:71:BA:B0:7D:81:40:95:16:8D:58:2E:68:98:EE:B2:6A:EE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jeNAcbqwfYFAlRaNWC5omO6yau4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.142.0/24
151.244.240.0/24
151.245.214.0/23
151.246.32.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:c2:29:f9:7b:b3:20:0f:00:57:b1:59:93:36:da:32:01:ad:
c0:35:a6:ef:61:9f:19:fe:50:f2:36:df:ab:c5:2c:8a:47:52:
ea:99:8c:63:d6:be:7a:a7:a9:45:f2:37:fb:e4:22:31:58:60:
36:65:10:87:52:e7:79:43:d2:97:93:54:52:86:57:ec:cb:3c:
b7:12:d0:98:4e:9e:78:3a:e8:22:de:5c:be:7d:be:0a:83:49:
79:b4:d4:b5:52:9c:e6:41:2f:49:14:d2:6b:24:29:27:a1:ea:
ff:13:a4:c0:8f:14:11:e1:1a:ee:10:c7:19:5d:b8:db:ed:12:
48:f0:ed:f8:cd:08:06:6f:e0:4a:94:b8:8a:f7:ad:ef:9b:08:
48:92:4e:2a:a7:d2:a9:a5:6b:9e:ec:b2:66:6f:e5:53:39:2a:
d8:30:0b:bf:74:62:24:a1:38:49:d0:45:c1:78:05:54:3c:a7:
87:ab:b0:49:4c:37:ae:80:a5:83:19:cd:f3:cb:fd:8f:6f:1a:
72:95:4c:c4:52:f0:b5:dc:38:e6:1f:f1:75:ec:a8:ee:16:99:
06:de:87:3f:78:b7:5f:1d:55:58:20:19:36:46:b8:e4:93:fd:
37:58:1b:2b:c6:bc:5b:db:6b:85:91:49:c0:75:55:04:d8:f8:
ca:b9:91:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 10:06:06 2026 by rpki-client