Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ogNHA6zI1W4FY5IF3W1MzL-Mzhk.roa
File: ogNHA6zI1W4FY5IF3W1MzL-Mzhk.roa (raw, json)
Hash identifier: fw0zrCj8eFwcvaSedqM8XMwuDExVbWT0EpLCGeLrqiE=
Subject key identifier: A2:03:47:03:AC:C8:D5:6E:05:63:92:05:DD:6D:4C:CC:BF:8C:CE:19
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019ECA712631248216CC8C2B52C31094E5FF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ogNHA6zI1W4FY5IF3W1MzL-Mzhk.roa
Signing time: Mon 15 Jun 2026 08:41:13 +0000
ROA not before: Mon 15 Jun 2026 08:41:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54252
IP address blocks: 151.240.2.0/24 maxlen: 24
151.241.33.0/24 maxlen: 24
151.241.43.0/24 maxlen: 24
151.241.48.0/24 maxlen: 24
151.242.26.0/24 maxlen: 24
151.243.26.0/24 maxlen: 24
151.244.42.0/24 maxlen: 24
151.245.69.0/24 maxlen: 24
151.246.224.0/24 maxlen: 24
151.246.230.0/24 maxlen: 24
151.246.234.0/24 maxlen: 24
151.247.89.0/24 maxlen: 24
151.247.109.0/24 maxlen: 24
151.247.110.0/24 maxlen: 24
151.247.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:71:26:31:24:82:16:cc:8c:2b:52:c3:10:94:e5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 15 08:41:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2034703acc8d56e05639205dd6d4cccbf8cce19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:86:96:97:a3:03:2f:e8:fe:11:54:a0:50:
10:65:a5:b1:2d:e9:f0:93:67:57:4f:5e:af:22:af:
09:e5:8c:92:29:7f:4b:87:a6:16:bb:df:18:23:97:
64:db:01:8e:22:a8:fb:1d:33:b2:a7:50:ca:4b:ce:
90:6a:35:c0:f7:10:8c:53:a7:63:bb:1c:ac:ab:48:
13:3f:f5:77:6d:47:06:ea:df:80:3d:9f:d6:23:c9:
70:45:da:24:f9:8c:71:6d:13:72:fa:b1:b2:36:92:
de:e9:45:e5:af:e9:a5:30:94:a4:3c:d7:ad:dd:bb:
ac:df:c4:77:f4:34:c7:b0:2a:5c:87:97:d0:87:b6:
6d:7f:12:20:62:a5:44:4a:08:a5:41:45:85:21:d9:
2c:db:a4:7b:50:4f:d5:ce:03:0c:ca:45:63:39:0f:
24:49:82:e0:81:4a:8c:7a:5a:60:96:9a:e4:67:3c:
b2:3b:88:28:97:77:0e:7b:4d:90:8e:18:86:0c:dd:
e2:67:b4:eb:f2:79:be:ce:e2:5e:ee:48:4b:11:0f:
1b:cd:ed:e6:d6:b9:71:5d:8c:dc:12:b7:60:a4:2f:
d8:96:1b:ab:d7:29:d3:ef:fd:46:bd:01:66:82:78:
27:98:b0:4b:9e:1a:dc:ec:34:f4:37:46:75:cf:0c:
fe:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:03:47:03:AC:C8:D5:6E:05:63:92:05:DD:6D:4C:CC:BF:8C:CE:19
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ogNHA6zI1W4FY5IF3W1MzL-Mzhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.2.0/24
151.241.33.0/24
151.241.43.0/24
151.241.48.0/24
151.242.26.0/24
151.243.26.0/24
151.244.42.0/24
151.245.69.0/24
151.246.224.0/24
151.246.230.0/24
151.246.234.0/24
151.247.89.0/24
151.247.109.0-151.247.110.255
151.247.246.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:f0:62:94:12:b4:5b:38:98:41:10:3c:63:d3:07:1d:c2:93:
5a:a9:b8:87:b3:d2:02:08:5b:e0:6b:2d:a1:37:d3:49:96:da:
a2:2e:41:66:ea:d0:ab:11:d9:9f:8f:ea:d8:0a:42:14:ad:2f:
82:89:01:53:84:81:e2:1d:14:eb:21:20:81:13:24:52:19:43:
04:48:70:88:e5:6e:61:21:c6:0b:48:45:ce:4d:f3:2f:19:e6:
b0:72:c5:5c:2a:0d:bd:e2:1f:1b:51:cf:5c:e2:03:97:4c:d8:
05:bf:3c:d3:a9:db:01:64:3b:e2:68:89:ed:75:6d:e9:89:1e:
e5:5e:63:91:85:91:7e:d5:52:6d:1c:ad:e8:ac:1a:09:8f:c0:
29:56:a1:af:25:f8:5e:c4:ad:c7:4e:7f:83:46:ef:ca:da:ea:
e8:77:b5:4b:99:44:e8:52:0f:f7:bb:60:92:fd:3f:52:79:e8:
dc:4a:f3:04:8f:41:ab:72:9a:f4:b6:f3:74:a1:63:ee:7d:87:
25:28:c1:94:34:e0:61:90:16:1f:65:0f:bd:ec:d6:6a:a3:95:
dc:47:a1:47:d4:54:82:78:00:fe:ff:4a:ba:49:cb:f1:4a:aa:
ba:91:18:3d:7c:20:4a:5c:11:df:14:39:08:72:61:ed:f1:65:
6f:15:a7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 01:11:29 2026 by rpki-client