Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/r0N_2qwi7XKr-rVdUsaIemSQH2A.roa
File: r0N_2qwi7XKr-rVdUsaIemSQH2A.roa (raw, json)
Hash identifier: VBGogipxapSLaAU/4qe5x0Q3Qh3HaiEeaqPAChqA52I=
Subject key identifier: AF:43:7F:DA:AC:22:ED:72:AB:FA:B5:5D:52:C6:88:7A:64:90:1F:60
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F45F0A09E69FD49DC6A3F9821AE92C7B4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/r0N_2qwi7XKr-rVdUsaIemSQH2A.roa
Signing time: Thu 09 Jul 2026 08:13:45 +0000
ROA not before: Thu 09 Jul 2026 08:13:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211484
IP address blocks: 151.246.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:f0:a0:9e:69:fd:49:dc:6a:3f:98:21:ae:92:c7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 9 08:13:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af437fdaac22ed72abfab55d52c6887a64901f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:38:d2:16:4d:30:70:ac:6c:46:04:f9:fd:
01:c2:5b:f2:de:a1:54:07:8b:14:14:a0:f1:ae:4a:
d0:da:b3:e9:2b:8a:01:65:9e:8f:82:11:47:27:6f:
ad:ac:da:74:12:93:16:e5:89:7a:e1:7e:42:7c:fb:
c8:6c:18:79:8f:46:1c:de:9f:a3:51:4c:0a:63:84:
75:82:39:58:37:2d:21:fd:74:fe:cf:66:0a:d1:9e:
97:c0:96:f1:1c:98:12:22:f5:13:15:b1:aa:41:f4:
f4:67:d6:8e:5d:00:9f:df:7a:b4:a6:ff:8c:5c:c1:
4e:2c:30:be:d0:c9:60:e7:11:b3:bd:3a:c8:16:b1:
c7:12:ab:36:14:96:30:1d:a4:b0:33:27:fe:23:c6:
89:cf:5f:7f:14:e5:aa:e6:6a:77:7c:b6:a1:82:8d:
91:74:78:d9:95:bd:bd:e9:ba:ca:64:a3:e2:ba:45:
0d:8b:86:8c:7a:f7:2d:ae:3f:15:38:28:73:28:8c:
ff:ab:58:f8:8e:5d:7f:f0:f3:52:e7:4d:84:1e:da:
49:e6:d0:aa:53:78:46:0b:10:33:ad:a6:e2:f3:bc:
73:a7:3e:57:6c:6e:a0:d6:86:7b:14:43:b4:87:b4:
53:59:29:2b:9e:fb:3d:06:73:99:94:33:1e:6a:d8:
57:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:43:7F:DA:AC:22:ED:72:AB:FA:B5:5D:52:C6:88:7A:64:90:1F:60
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/r0N_2qwi7XKr-rVdUsaIemSQH2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.128.0/17
Signature Algorithm: sha256WithRSAEncryption
56:d4:67:c3:4b:8b:71:b9:7c:19:ff:e4:df:ec:50:08:5d:63:
d4:be:5a:3a:a5:99:2f:cf:5c:f5:5e:f9:50:a4:48:88:37:9b:
62:f8:f3:4b:a9:f4:4c:66:75:cd:4a:65:a3:26:9a:63:2d:ce:
55:dd:78:02:66:96:ae:fd:f6:4f:57:27:08:50:d1:13:c9:ff:
27:ad:b7:f7:d2:99:78:d0:18:51:e1:ed:2a:63:52:8d:dd:29:
90:18:9b:0c:f8:cf:a9:16:2e:64:5e:29:10:13:b6:e4:2e:3b:
b0:18:f3:19:13:af:39:d2:15:c2:69:50:ae:da:a1:2d:be:11:
1e:25:0a:5f:ef:a4:a1:56:4a:55:fa:05:1f:76:81:51:96:7d:
a9:f8:49:93:51:9f:22:ec:3d:3f:30:60:33:cd:65:72:b3:1c:
86:82:e4:2a:36:73:6b:f1:c7:65:e4:f0:75:23:45:75:10:d8:
11:81:aa:77:8c:35:d8:23:3f:8d:43:01:4c:b0:e4:72:cd:b8:
82:72:d2:0b:7a:58:22:b8:ef:f4:7a:25:be:0c:27:75:7d:9a:
07:28:2c:71:d7:e6:ef:be:1d:f8:db:23:eb:49:cb:c5:a7:e1:
b6:91:ce:2d:04:81:ca:11:12:71:cf:1e:24:37:da:14:34:d2:
34:bd:f4:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9F8KCeaf1J3Go/mCGukse0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNzA5MDgxMzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjQzN2ZkYWFjMjJlZDcyYWJmYWI1NWQ1MmM2ODg3YTY0OTAxZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVU40hZNMHCsbEYE+f0Bwlvy3qFU
B4sUFKDxrkrQ2rPpK4oBZZ6PghFHJ2+trNp0EpMW5Yl64X5CfPvIbBh5j0Yc3p+j
UUwKY4R1gjlYNy0h/XT+z2YK0Z6XwJbxHJgSIvUTFbGqQfT0Z9aOXQCf33q0pv+M
XMFOLDC+0Mlg5xGzvTrIFrHHEqs2FJYwHaSwMyf+I8aJz19/FOWq5mp3fLahgo2R
dHjZlb296brKZKPiukUNi4aMevctrj8VOChzKIz/q1j4jl1/8PNS502EHtpJ5tCq
U3hGCxAzrabi87xzpz5XbG6g1oZ7FEO0h7RTWSkrnvs9BnOZlDMeathXXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK9Df9qsIu1yq/q1XVLGiHpkkB9gMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvcjBOXzJxd2k3WEtyLXJWZFVzYUllbVNRSDJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHl/aAMA0G
CSqGSIb3DQEBCwUAA4IBAQBW1GfDS4txuXwZ/+Tf7FAIXWPUvlo6pZkvz1z1XvlQ
pEiIN5ti+PNLqfRMZnXNSmWjJppjLc5V3XgCZpau/fZPVycIUNETyf8nrbf30pl4
0BhR4e0qY1KN3SmQGJsM+M+pFi5kXikQE7bkLjuwGPMZE6850hXCaVCu2qEtvhEe
JQpf76ShVkpV+gUfdoFRln2p+EmTUZ8i7D0/MGAzzWVysxyGguQqNnNr8cdl5PB1
I0V1ENgRgap3jDXYIz+NQwFMsORyzbiCctILelgiuO/0eiW+DCd1fZoHKCxx1+bv
vh342yPrScvFp+G2kc4tBIHKERJxzx4kN9oUNNI0vfR7
-----END CERTIFICATE-----
Generated at Mon Jul 20 23:50:18 2026 by rpki-client