Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qOxyIyquqEnCbr7wHQv5TAscKUA.roa
File: qOxyIyquqEnCbr7wHQv5TAscKUA.roa (raw, json)
Hash identifier: jvl5+d+ImbNYmQTGarpQDDHKrsFrEWKHmFjg8Ggr2qk=
Subject key identifier: A8:EC:72:23:2A:AE:A8:49:C2:6E:BE:F0:1D:0B:F9:4C:0B:1C:29:40
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F3748CC0D9CF76E2BCFF2A8C963C89358
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qOxyIyquqEnCbr7wHQv5TAscKUA.roa
Signing time: Mon 06 Jul 2026 11:55:45 +0000
ROA not before: Mon 06 Jul 2026 11:55:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4766
IP address blocks: 151.245.190.0/24 maxlen: 24
151.245.196.0/24 maxlen: 24
151.245.240.0/24 maxlen: 24
151.246.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:48:cc:0d:9c:f7:6e:2b:cf:f2:a8:c9:63:c8:93:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 6 11:55:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8ec72232aaea849c26ebef01d0bf94c0b1c2940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d6:80:9b:d2:f7:38:35:78:eb:8b:e8:4d:ce:
2a:27:e3:c9:2d:0b:47:c4:a7:8d:09:09:a5:0f:98:
77:1b:54:9b:63:6f:0a:b9:9a:63:3f:38:f9:39:da:
f4:ad:30:45:05:a3:09:f0:35:a2:e9:fc:cf:76:9f:
6d:9b:3e:d6:b8:c3:b6:a8:56:a0:26:e2:73:56:c0:
b1:f1:71:c6:08:cf:c5:a3:9f:f3:4c:34:1f:7e:9c:
0d:c2:8e:8b:68:40:ca:d6:a5:0f:40:83:d7:8a:dc:
46:b0:c4:28:cd:75:e6:f6:73:77:b0:37:af:c6:df:
b5:0a:05:ff:a7:d2:81:58:4a:6e:db:e9:e5:ad:52:
d8:7a:ac:68:55:36:bb:16:e4:ab:5b:c0:c4:d5:05:
93:9d:ab:45:e7:15:33:10:94:e5:69:5a:a0:c5:0c:
b6:53:8e:dc:4a:5d:13:e8:37:1a:2e:d1:ab:de:e1:
be:71:f3:6e:ad:d4:d7:0b:f6:26:65:53:59:d8:5d:
b0:e5:dc:17:20:92:db:1d:f8:bd:1e:38:31:dd:df:
66:4d:ef:a8:36:0a:20:4d:f8:3b:21:7c:a3:6b:8a:
c6:a1:c7:c4:23:91:83:ad:2f:33:6d:8a:8f:13:21:
63:5d:71:de:f9:b1:f3:2e:23:72:48:99:2f:89:e9:
a2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EC:72:23:2A:AE:A8:49:C2:6E:BE:F0:1D:0B:F9:4C:0B:1C:29:40
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qOxyIyquqEnCbr7wHQv5TAscKUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.190.0/24
151.245.196.0/24
151.245.240.0/24
151.246.254.0/24
Signature Algorithm: sha256WithRSAEncryption
74:42:f1:46:f3:1f:c5:c8:dc:d0:98:6b:dd:e9:49:33:18:2f:
78:c6:ac:34:c4:b9:3c:8f:4b:75:8c:61:e3:38:58:d0:cc:c2:
c8:a2:52:4b:87:7a:3b:83:5a:f4:94:e3:7b:64:04:be:7a:32:
70:af:12:e1:2d:58:d6:a6:e5:bc:fa:0a:b4:1a:9b:5c:f9:0f:
9e:1f:fb:a1:40:2d:e4:68:44:34:d6:b9:8e:da:44:cd:e5:0d:
38:c4:4e:91:51:74:c2:37:08:c5:a6:f4:3f:0d:a4:b5:24:75:
9b:18:80:f7:80:e3:cf:bd:2f:a8:e9:16:7c:d5:ef:16:5b:31:
8e:ab:b9:0d:ea:be:28:11:f1:9d:c6:26:5c:04:54:f8:b4:c7:
4f:c7:de:bd:15:e0:64:99:f4:23:58:95:f4:be:b7:91:14:67:
03:e6:c9:a2:b9:73:1e:45:12:6d:12:e4:cd:1d:d6:65:00:60:
55:f6:cb:51:7e:aa:98:de:74:13:1e:92:32:62:19:c4:fc:5f:
a7:3f:ef:42:a7:78:75:55:51:f5:33:c7:60:b7:82:1b:37:d6:
d8:e9:72:5f:ca:d2:54:38:96:12:83:ca:76:06:cb:32:52:60:
c8:84:82:04:fb:52:3b:63:fe:0d:e7:1f:4e:07:76:22:bb:6b:
61:a8:d2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:46 2026 by rpki-client