Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qYr7_yGZoNEXr5y4-ufAPgX96Hs.roa
File: qYr7_yGZoNEXr5y4-ufAPgX96Hs.roa (raw, json)
Hash identifier: JbZLyIUrtBXlBI1GlxTX5Y3xAXSweNE2iTnnlzGxDQY=
Subject key identifier: A9:8A:FB:FF:21:99:A0:D1:17:AF:9C:B8:FA:E7:C0:3E:05:FD:E8:7B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A05732AD90883D8EC457A455AD23CC3A96
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qYr7_yGZoNEXr5y4-ufAPgX96Hs.roa
Signing time: Mon 31 Aug 2026 09:42:13 +0000
ROA not before: Mon 31 Aug 2026 09:42:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152868
IP address blocks: 151.240.18.0/24 maxlen: 24
151.240.130.0/24 maxlen: 24
151.240.135.0/24 maxlen: 24
151.240.141.0/24 maxlen: 24
151.240.143.0/24 maxlen: 24
151.241.206.0/24 maxlen: 24
151.242.66.0/24 maxlen: 24
151.243.8.0/24 maxlen: 24
151.243.22.0/24 maxlen: 24
151.247.97.0/24 maxlen: 24
151.247.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:13:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:32:ad:90:88:3d:8e:c4:57:a4:55:ad:23:cc:3a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 31 09:42:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a98afbff2199a0d117af9cb8fae7c03e05fde87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0c:92:33:e1:c1:5f:28:64:00:d0:f6:a3:8c:
66:e3:b2:2f:d8:b7:a3:f8:ef:57:23:a5:6b:be:92:
3f:38:dc:1b:a8:02:d1:07:ac:88:3b:54:39:f4:ef:
ed:29:19:fe:19:f7:1b:1f:82:c3:7a:16:07:c5:70:
75:27:17:76:c8:ad:39:cd:8a:d9:65:16:0e:79:43:
06:22:89:8a:42:26:51:bd:01:e7:30:04:61:08:bc:
03:23:ed:95:4c:fe:eb:16:1f:39:13:c0:48:2f:84:
68:64:0c:9f:38:df:0c:d6:d0:ff:ca:63:99:2a:cb:
5b:a0:70:fd:34:b7:e8:1d:43:4d:41:12:bf:d1:c2:
57:39:41:51:46:a3:02:92:a1:ee:09:c0:af:1f:75:
a0:16:dd:4c:c0:f5:79:6c:ba:ca:b4:6a:08:03:78:
2f:a7:48:a9:1d:b3:90:db:36:fa:87:59:2e:02:e3:
73:ba:6f:d4:41:1f:ee:3f:9f:2f:5b:bd:e0:05:fb:
4f:1c:5e:43:33:91:4f:a6:4f:22:8a:90:27:e8:f2:
c3:0e:26:0c:5b:0e:25:c2:fd:2d:a7:59:60:59:54:
f2:5b:45:1d:b4:a5:3b:e1:33:6e:89:f0:47:d0:96:
6f:bc:ed:6a:66:e8:65:e0:55:88:f5:78:68:70:ad:
d2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8A:FB:FF:21:99:A0:D1:17:AF:9C:B8:FA:E7:C0:3E:05:FD:E8:7B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qYr7_yGZoNEXr5y4-ufAPgX96Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.18.0/24
151.240.130.0/24
151.240.135.0/24
151.240.141.0/24
151.240.143.0/24
151.241.206.0/24
151.242.66.0/24
151.243.8.0/24
151.243.22.0/24
151.247.97.0/24
151.247.106.0/24
Signature Algorithm: sha256WithRSAEncryption
84:31:82:cc:7a:e6:82:08:85:dd:dc:14:bd:de:75:2a:9f:56:
c5:5a:da:5b:d9:9c:6f:cc:7d:e3:ab:73:90:7c:45:a9:84:ef:
c0:6e:63:1a:99:8c:61:73:5f:35:9c:a8:0a:52:f5:94:9d:65:
57:95:45:e1:d9:5c:e6:a9:dc:f3:2c:d4:0f:77:6f:e0:77:77:
f1:1e:44:94:9b:72:0f:7c:0b:65:fa:d3:fd:b4:5f:1f:34:72:
18:2e:3b:39:53:3f:3d:91:55:f7:db:2c:08:4a:33:bb:57:eb:
63:49:96:5f:86:9d:ee:ce:50:50:96:75:44:28:37:b7:82:b6:
77:56:f9:99:23:ba:d1:3c:69:f0:d9:12:5e:b5:a4:26:ae:14:
1d:05:00:99:0b:14:0a:90:02:5c:a6:82:57:03:ef:ab:41:63:
7a:52:17:8e:eb:7d:75:fe:91:ca:10:dc:cc:f6:66:5c:b6:6f:
ed:56:5f:33:61:af:fd:cd:bc:82:77:d8:bf:11:e6:08:79:4c:
92:79:eb:d6:50:54:26:f4:6b:f5:f9:5f:c4:b8:77:01:3e:07:
57:55:dd:d1:7e:50:50:22:0c:92:58:b2:ba:c6:ff:da:81:33:
c7:d8:9f:fe:10:a3:4f:7b:57:2e:1c:28:6d:49:43:12:86:37:
0a:17:10:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:36 2026 by rpki-client