Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lIDQqNtRJFTPX17hcX-FaI7cWgk.roa
File: lIDQqNtRJFTPX17hcX-FaI7cWgk.roa (raw, json)
Hash identifier: yRuN5YN7WiCbWS+sDZJOr7hqVYjK6AmLPVAjq4R0g8c=
Subject key identifier: 94:80:D0:A8:DB:51:24:54:CF:5F:5E:E1:71:7F:85:68:8E:DC:5A:09
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A02A40912F7715A3C856AE1889410E6BFC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lIDQqNtRJFTPX17hcX-FaI7cWgk.roa
Signing time: Sat 22 Aug 2026 16:14:29 +0000
ROA not before: Sat 22 Aug 2026 16:14:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402288
IP address blocks: 151.240.12.0/24 maxlen: 24
151.240.24.0/24 maxlen: 24
151.240.132.0/24 maxlen: 24
151.242.55.0/24 maxlen: 24
151.246.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2a:40:91:2f:77:15:a3:c8:56:ae:18:89:41:0e:6b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 22 16:14:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9480d0a8db512454cf5f5ee1717f85688edc5a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:0b:50:e5:af:e4:c7:ef:77:92:cf:d0:6a:
b1:9d:db:76:c5:d8:c1:4b:8b:07:c3:c5:a3:f7:69:
4d:d7:37:71:3d:95:e6:ba:34:23:bd:3f:d9:bf:17:
df:0c:cc:92:b7:70:39:f1:bb:1f:8f:c1:c3:90:c7:
10:be:d7:92:04:8b:4a:8b:92:cc:ac:16:09:e6:e4:
a8:92:92:6a:b5:0f:a4:c5:15:ca:30:64:b6:87:78:
da:17:c4:7d:f7:df:e3:17:7e:52:ac:fc:1d:e0:cc:
f8:7e:00:3f:bb:89:ec:1e:3d:9f:cd:e1:63:26:19:
d0:91:5a:fc:5f:87:75:ad:6b:e5:45:a2:88:77:30:
f3:8b:8d:1f:5f:74:e1:84:58:20:0f:c7:63:89:4c:
67:ce:18:db:96:5d:25:39:27:02:02:5b:23:d1:a6:
93:68:8c:2e:9e:b3:ad:2e:96:f0:86:2d:c3:92:c2:
b6:dc:94:c9:40:41:c6:38:44:b4:4f:3c:6a:f4:22:
06:27:b3:46:93:8a:3b:36:01:ff:09:89:2d:e8:ad:
73:76:3e:06:fc:82:be:79:b1:16:57:2a:f9:6c:0b:
6f:b2:05:92:d5:37:8e:38:80:03:5f:eb:82:eb:23:
a8:46:cc:c8:8e:c5:ec:a3:29:ae:94:f1:3b:e0:4a:
f4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:80:D0:A8:DB:51:24:54:CF:5F:5E:E1:71:7F:85:68:8E:DC:5A:09
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lIDQqNtRJFTPX17hcX-FaI7cWgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.12.0/24
151.240.24.0/24
151.240.132.0/24
151.242.55.0/24
151.246.228.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ef:63:b7:e7:82:0f:3e:aa:02:4b:07:cb:34:4f:1f:4a:5c:
2c:0f:c0:6f:a8:30:07:3a:55:e3:f9:3d:db:e2:03:2e:6c:2c:
f0:bf:e3:21:6b:1b:1f:7d:5d:52:4f:52:96:3c:fb:57:03:7f:
97:57:f8:3e:0e:24:30:f0:e1:30:c0:49:b4:4b:6b:f9:79:83:
b3:f3:55:7c:9f:25:15:05:3d:ab:aa:16:92:87:62:c2:46:6d:
5d:be:00:2e:c1:4a:77:1e:80:a2:1e:15:15:19:e4:36:ea:34:
fa:d8:c8:5b:39:00:c6:d5:73:88:2b:6d:a3:16:b4:2d:82:51:
dc:b0:7f:c3:39:ba:85:96:b4:7f:7f:ad:22:0f:2a:7d:05:ec:
a9:fe:36:bc:14:12:65:12:8f:22:8e:dc:99:7f:b2:8e:ae:b2:
35:3f:73:ab:13:c1:17:8b:c2:fb:43:96:34:62:55:9c:43:09:
84:e6:c9:14:00:51:71:13:2d:1b:e3:2e:8b:d0:89:f5:58:0f:
59:65:06:1d:a3:a7:1c:0b:10:90:29:6e:2c:c3:c1:e8:5a:26:
41:12:e5:ec:27:c9:cf:65:27:80:ac:43:65:69:36:67:18:ab:
12:8f:06:38:f9:5a:fa:0f:9b:d2:3f:72:b8:b7:85:26:17:4e:
d5:41:59:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:19 2026 by rpki-client