Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rEECrljl7JiXPh0fvMr4pecUOn0.roa
File: rEECrljl7JiXPh0fvMr4pecUOn0.roa (raw, json)
Hash identifier: 4cBlgajaeO5sJXSM+3Eak8qQWuPM57KK75OxYt5yA+c=
Subject key identifier: AC:41:02:AE:58:E5:EC:98:97:3E:1D:1F:BC:CA:F8:A5:E7:14:3A:7D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A04291F2CEB8B4C6A6B63778F2DBC48518
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rEECrljl7JiXPh0fvMr4pecUOn0.roa
Signing time: Thu 27 Aug 2026 09:34:16 +0000
ROA not before: Thu 27 Aug 2026 09:34:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213915
IP address blocks: 151.240.146.0/24 maxlen: 24
151.242.160.0/23 maxlen: 24
151.242.162.0/24 maxlen: 24
151.242.163.0/24 maxlen: 24
151.242.236.0/24 maxlen: 24
151.247.87.0/24 maxlen: 24
151.247.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:91:f2:ce:b8:b4:c6:a6:b6:37:78:f2:db:c4:85:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 27 09:34:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac4102ae58e5ec98973e1d1fbccaf8a5e7143a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7d:be:d2:90:c8:fe:7d:87:f4:a0:e2:fc:ec:
f6:69:27:05:40:99:60:40:90:ea:ca:a0:89:de:97:
b2:74:8f:45:d2:74:6d:a4:bb:4b:08:b1:2a:aa:3a:
a3:41:ed:e0:1f:76:9b:56:17:9d:10:38:f0:3d:07:
cf:f8:dd:3e:c1:71:07:25:3b:c2:5f:fe:9e:21:da:
8b:88:20:c4:13:8e:8c:a9:b3:66:f0:9c:a0:53:c7:
fb:bb:56:e7:55:a8:ed:cd:3c:84:f9:a8:0b:de:9c:
6e:42:0d:e4:b9:38:87:59:44:d1:10:41:d7:4a:d9:
d7:25:e7:1e:53:35:e6:da:98:df:7b:32:3c:65:2c:
89:8d:af:66:e4:95:94:93:d7:50:99:ca:d0:a7:b7:
ab:09:7f:78:17:43:82:5d:62:8d:9e:7b:8f:8d:1c:
cd:34:84:8e:aa:68:5e:9d:44:6a:58:a9:33:13:2e:
2c:38:b7:74:ef:25:fa:1f:b8:3b:b1:3a:94:2e:f7:
93:2e:be:f7:92:c1:3b:46:99:89:95:05:f7:9d:1d:
7f:3b:4c:c1:cb:10:50:c2:da:19:a2:9d:58:0b:5e:
32:07:57:8a:2c:75:11:51:9b:d2:4a:ba:b9:6f:17:
c6:e2:42:89:99:78:54:ef:de:eb:2d:21:78:b2:12:
9f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:41:02:AE:58:E5:EC:98:97:3E:1D:1F:BC:CA:F8:A5:E7:14:3A:7D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rEECrljl7JiXPh0fvMr4pecUOn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.146.0/24
151.242.160.0/22
151.242.236.0/24
151.247.87.0/24
151.247.168.0/24
Signature Algorithm: sha256WithRSAEncryption
76:7e:77:dd:5b:38:df:74:06:ca:d5:b5:cf:5e:a1:6c:55:40:
59:f8:6a:2f:90:2e:c0:52:38:57:51:09:d2:5e:e8:d6:2a:05:
9a:8d:e9:29:cd:f2:8b:60:39:83:35:4c:41:5f:49:3b:2c:25:
d7:54:fc:ff:28:c7:77:19:3b:39:5a:0c:62:a4:2b:dd:d1:c2:
1c:a4:69:8b:b9:48:df:ac:26:e1:04:ba:d7:61:94:11:ff:1e:
72:7a:5d:f1:75:6c:07:86:d7:c0:27:19:f7:52:3e:df:4f:52:
cc:1c:90:0b:95:6e:75:5c:6d:d8:43:6e:7a:eb:6f:01:e3:89:
99:9e:e5:55:6a:4f:d2:a3:42:a4:77:c4:a8:6b:dc:da:c1:81:
59:26:23:b6:01:9b:58:2d:fb:f1:24:ac:05:2c:e7:91:2e:6e:
88:42:e3:8d:32:97:00:17:2c:ee:1b:9c:27:df:5e:52:ce:15:
c3:a4:3e:f7:de:72:eb:93:ef:24:49:d5:b4:99:51:4b:87:c2:
8d:78:52:29:d4:6b:3b:e8:b9:16:57:eb:70:1e:08:d0:a0:ac:
9b:7b:eb:98:98:29:93:6b:72:7d:b4:97:b3:6f:3f:93:c5:d5:
3f:84:1f:cd:71:ef:a7:f6:57:18:ac:f3:31:e9:37:94:4a:a0:
44:f1:49:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:47:17 2026 by rpki-client