Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/k1JcagGMDkxZdB0fr4nmKjDC1ys.roa
File: k1JcagGMDkxZdB0fr4nmKjDC1ys.roa (raw, json)
Hash identifier: WsWc776AWTxJBewyAgeW6QUg6rcE4XsczYpvHDYaQCg=
Subject key identifier: 93:52:5C:6A:01:8C:0E:4C:59:74:1D:1F:AF:89:E6:2A:30:C2:D7:2B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E892784E3E57BE185BE0740CAA78D4547
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/k1JcagGMDkxZdB0fr4nmKjDC1ys.roa
Signing time: Tue 02 Jun 2026 16:25:28 +0000
ROA not before: Tue 02 Jun 2026 16:25:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 151.240.3.0/24 maxlen: 24
151.242.227.0/24 maxlen: 24
151.243.113.0/24 maxlen: 24
151.243.133.0/24 maxlen: 24
151.245.127.0/24 maxlen: 24
151.246.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:89:27:84:e3:e5:7b:e1:85:be:07:40:ca:a7:8d:45:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 2 16:25:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93525c6a018c0e4c59741d1faf89e62a30c2d72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:ab:aa:08:d9:0f:67:1e:bc:a6:3f:9f:34:
0f:3d:59:2f:bd:65:4f:c1:76:e7:cd:03:93:56:db:
b4:4c:f9:ff:f0:00:13:df:cb:73:e1:6d:41:9b:45:
0e:74:de:55:a2:32:c5:8d:82:5d:d9:7a:16:f5:1f:
3e:fa:49:fd:ce:61:8d:8a:ec:8c:fe:31:6d:7d:e7:
0a:d8:b8:b7:5d:41:f1:e1:52:79:36:8a:9e:8e:ee:
74:1d:fa:0f:f9:24:00:3f:2f:dc:18:55:7a:84:3e:
fc:4e:7f:cc:94:eb:14:f1:57:35:d6:34:85:a1:6d:
a9:af:ae:c0:44:ea:29:66:6c:72:e3:96:0d:8f:c6:
dc:53:92:c4:50:14:8e:5b:58:2c:30:cb:8d:3f:01:
f1:77:26:1f:da:34:ea:77:11:a8:44:e4:f6:85:7d:
fd:bc:d0:19:22:86:2d:6e:7f:f6:a6:56:ee:cf:f0:
20:a7:c7:7a:4c:2e:27:62:f6:0e:b7:20:09:4e:f3:
ef:93:19:56:9d:19:0f:52:ad:05:bd:7d:47:96:09:
8b:5e:fe:8c:01:08:a1:53:72:1e:d4:f1:5a:78:1a:
95:73:70:8b:0e:c4:22:a5:1d:ae:91:b7:d1:6d:ed:
91:89:83:66:0d:3b:8c:b2:6c:75:86:70:64:b8:a3:
e2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:52:5C:6A:01:8C:0E:4C:59:74:1D:1F:AF:89:E6:2A:30:C2:D7:2B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/k1JcagGMDkxZdB0fr4nmKjDC1ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.3.0/24
151.242.227.0/24
151.243.113.0/24
151.243.133.0/24
151.245.127.0/24
151.246.216.0/23
Signature Algorithm: sha256WithRSAEncryption
34:53:c7:0b:b5:ac:cf:12:0b:1d:02:23:4c:fd:31:31:cf:23:
c8:09:bd:61:2b:47:12:7e:1b:23:1c:e6:a1:81:a1:82:47:84:
e1:3d:d8:51:df:23:73:39:a6:0e:0c:f9:15:d8:a3:9c:d1:d3:
04:ea:00:af:5a:01:36:56:e7:8c:aa:d7:6a:73:5c:ca:a3:bd:
5b:63:f4:b1:18:0b:2f:ca:68:96:4e:d5:31:1b:f4:dc:7e:6a:
6d:14:0c:38:f8:1f:ca:6e:7d:59:6f:56:bd:e1:b2:dc:74:e6:
6d:69:69:77:2e:e2:5f:c0:b2:fe:bd:6b:f4:7f:ab:25:c7:0d:
23:db:fc:1d:1f:4e:78:97:7f:50:6a:b1:d3:91:bb:2d:26:e0:
2e:3d:78:29:aa:f5:51:19:9d:db:fc:20:08:ea:5b:7e:f8:f7:
ee:3a:c8:0f:15:2b:1b:8c:53:d7:48:89:cc:5b:c8:a1:a0:5b:
60:d0:50:66:ef:58:64:3e:77:74:c0:f9:60:db:78:1e:42:06:
03:c5:0a:1d:ec:76:fe:2a:cc:74:8f:d5:d4:ff:de:91:ee:8a:
63:06:84:e1:5f:2e:fa:91:af:29:43:30:7a:7b:c9:a2:49:c1:
8a:8d:4c:47:ed:15:a2:34:e6:90:73:b9:6e:0a:cc:e9:85:26:
2d:6e:f3:19
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ6JJ4Tj5Xvhhb4HQMqnjUVHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNjAyMTYyNTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzUyNWM2YTAxOGMwZTRjNTk3NDFkMWZhZjg5ZTYyYTMwYzJkNzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9mrqgjZD2cevKY/nzQPPVkvvWVP
wXbnzQOTVtu0TPn/8AAT38tz4W1Bm0UOdN5VojLFjYJd2XoW9R8++kn9zmGNiuyM
/jFtfecK2Li3XUHx4VJ5Noqeju50HfoP+SQAPy/cGFV6hD78Tn/MlOsU8Vc11jSF
oW2pr67AROopZmxy45YNj8bcU5LEUBSOW1gsMMuNPwHxdyYf2jTqdxGoROT2hX39
vNAZIoYtbn/2plbuz/Agp8d6TC4nYvYOtyAJTvPvkxlWnRkPUq0FvX1HlgmLXv6M
AQihU3Ie1PFaeBqVc3CLDsQipR2ukbfRbe2RiYNmDTuMsmx1hnBkuKPi/wIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFJNSXGoBjA5MWXQdH6+J5iowwtcrMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvazFKY2FnR01Ea3haZEIwZnI0bm1LakRDMXlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAl/ADAwQA
l/LjAwQAl/NxAwQAl/OFAwQAl/V/AwQBl/bYMA0GCSqGSIb3DQEBCwUAA4IBAQA0
U8cLtazPEgsdAiNM/TExzyPICb1hK0cSfhsjHOahgaGCR4ThPdhR3yNzOaYODPkV
2KOc0dME6gCvWgE2VueMqtdqc1zKo71bY/SxGAsvymiWTtUxG/TcfmptFAw4+B/K
bn1Zb1a94bLcdOZtaWl3LuJfwLL+vWv0f6slxw0j2/wdH054l39QarHTkbstJuAu
PXgpqvVRGZ3b/CAI6lt++PfuOsgPFSsbjFPXSInMW8ihoFtg0FBm71hkPnd0wPlg
23geQgYDxQod7Hb+Ksx0j9XU/96R7opjBoThXy76ka8pQzB6e8miScGKjUxH7RWi
NOaQc7luCszphSYtbvMZ
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:01 2026 by rpki-client