Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/s_BS7bDbbwdfVx4HMqsEHtKKRsQ.roa
File: s_BS7bDbbwdfVx4HMqsEHtKKRsQ.roa (raw, json)
Hash identifier: gWwX7czSMOzZuNolm1r++xORm1RBJMhpbehFB3yEfMY=
Subject key identifier: B3:F0:52:ED:B0:DB:6F:07:5F:57:1E:07:32:AB:04:1E:D2:8A:46:C4
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E26CCD628F76AD7B5457C0E8B03DF4A9E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/s_BS7bDbbwdfVx4HMqsEHtKKRsQ.roa
Signing time: Thu 14 May 2026 14:03:38 +0000
ROA not before: Thu 14 May 2026 14:03:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401783
IP address blocks: 151.245.189.0/24 maxlen: 24
151.245.199.0/24 maxlen: 24
151.245.220.0/24 maxlen: 24
151.245.224.0/24 maxlen: 24
151.245.225.0/24 maxlen: 24
151.245.228.0/24 maxlen: 24
151.245.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:26:cc:d6:28:f7:6a:d7:b5:45:7c:0e:8b:03:df:4a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 14 14:03:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3f052edb0db6f075f571e0732ab041ed28a46c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:28:1e:9b:e6:93:8a:6f:d8:6f:2b:80:ec:bf:
a0:c2:d4:4d:a0:c2:07:c2:22:02:62:e3:71:29:b8:
c5:15:6a:fa:d9:4e:71:ff:84:c7:5e:f9:70:e4:16:
2c:15:ab:f0:f6:d3:97:6a:d9:48:31:c8:32:7c:ad:
97:f7:7a:52:f5:fa:c5:99:5a:83:7f:dd:40:d9:bd:
93:fc:3b:f6:ae:73:f0:5c:81:f2:c9:4c:1e:96:af:
cb:46:ed:e4:db:df:a5:e4:4a:9c:24:b4:68:6d:c3:
27:b3:72:8a:72:62:75:6a:9c:6a:e9:a6:6b:b9:65:
57:03:a7:ca:ae:93:d9:4c:86:64:7b:b6:40:ac:64:
2d:73:9a:76:f3:aa:3d:7f:bf:25:c5:fa:97:58:15:
51:5e:8f:e3:50:4b:4b:c1:96:b8:9c:e7:4f:75:c4:
c6:0a:74:12:aa:c7:5c:86:32:ad:1e:91:67:3c:90:
47:fc:b6:29:3e:bc:a6:b5:b7:5e:4d:13:74:34:65:
e8:58:ff:5c:48:1e:76:d3:fd:7f:02:17:2d:31:9c:
da:df:3d:04:a5:ba:9f:3c:ce:94:fd:cf:f8:8e:57:
6d:ee:a6:0b:fa:09:35:fa:7b:ce:cb:39:60:44:76:
79:3d:59:57:ed:34:b1:c5:44:58:12:c3:e5:93:9d:
58:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F0:52:ED:B0:DB:6F:07:5F:57:1E:07:32:AB:04:1E:D2:8A:46:C4
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/s_BS7bDbbwdfVx4HMqsEHtKKRsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.189.0/24
151.245.199.0/24
151.245.220.0/24
151.245.224.0/23
151.245.228.0/24
151.245.247.0/24
Signature Algorithm: sha256WithRSAEncryption
53:d4:41:00:90:63:41:c0:d5:6c:50:21:c1:aa:d7:d6:e8:a0:
b7:b7:46:84:87:40:83:42:18:55:5a:09:56:3e:a6:45:20:82:
b3:32:8b:fb:d5:0b:3a:00:0f:27:81:c0:06:cc:b6:04:13:aa:
37:00:63:02:a1:0a:35:45:63:5f:7b:83:16:43:f7:bc:eb:eb:
c3:cb:02:ff:e1:aa:7f:b0:59:1a:ac:e4:b9:cf:07:e3:8e:a0:
4a:aa:70:27:ad:40:03:3d:51:13:19:2a:0b:20:f9:ae:ca:b1:
3e:3c:35:bf:7f:27:b6:65:01:e0:e1:f1:06:e8:53:94:24:b5:
3c:4b:32:88:60:ac:e9:8d:c9:7c:e1:7b:3f:bd:05:34:4b:a2:
b6:e7:ab:26:51:15:dc:8a:2d:35:28:ea:e3:94:9e:ed:0c:d4:
67:e4:35:a4:a0:a0:f2:5e:76:2a:bf:33:4a:1d:37:f7:c5:0b:
1b:18:77:97:9d:bf:f0:ac:50:5f:90:9a:f6:89:5a:ad:34:9e:
32:60:90:2f:68:4c:0f:51:48:a3:6a:ba:05:b8:1d:6a:97:e3:
f2:68:07:eb:09:48:7c:18:a5:e9:15:97:8e:ec:92:8c:c4:5b:
a0:f0:0a:01:ef:37:22:9e:9a:25:2b:44:8b:08:27:f2:46:93:
6c:e1:bc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:14:33 2026 by rpki-client