Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tNiz0053_MVId52yIg7l8Si6GGU.roa
File: tNiz0053_MVId52yIg7l8Si6GGU.roa (raw, json)
Hash identifier: VMR+BNSZyhY1COMU/3YOAuDqFg88eC72kbdr1mFZwTs=
Subject key identifier: B4:D8:B3:D3:4E:77:FC:C5:48:77:9D:B2:22:0E:E5:F1:28:BA:18:65
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E8E65103067B6BAF1E916BC6DBDD8EBA2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tNiz0053_MVId52yIg7l8Si6GGU.roa
Signing time: Wed 03 Jun 2026 16:50:48 +0000
ROA not before: Wed 03 Jun 2026 16:50:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211373
IP address blocks: 151.242.21.0/24 maxlen: 24
151.243.248.0/24 maxlen: 24
151.243.251.0/24 maxlen: 24
151.244.184.0/24 maxlen: 24
151.244.185.0/24 maxlen: 24
151.245.134.0/24 maxlen: 24
151.245.194.0/24 maxlen: 24
151.245.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:65:10:30:67:b6:ba:f1:e9:16:bc:6d:bd:d8:eb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 3 16:50:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4d8b3d34e77fcc548779db2220ee5f128ba1865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2a:95:b3:eb:a7:b1:b5:65:81:a2:06:31:68:
f6:73:ff:c6:df:8b:ad:c6:7d:be:0e:07:f8:57:56:
24:09:67:83:50:57:06:39:94:d3:ee:12:23:2a:30:
a4:16:4c:a3:e9:b3:7b:cf:31:81:fa:29:f8:8a:51:
1c:66:79:b8:4b:fe:0e:1a:38:ea:34:59:9f:53:23:
9e:f0:41:bd:7f:19:f7:89:92:51:11:de:ac:2b:24:
47:d3:7a:bf:98:76:77:23:19:c4:7b:43:ad:fd:a4:
10:4a:79:d2:ed:2e:5b:78:3e:26:97:46:d0:34:2f:
b7:d1:08:55:ee:d9:97:b8:1e:50:6b:ef:cc:d6:03:
66:01:e4:df:13:db:c0:4f:b0:ac:b3:5b:dd:11:a0:
b3:9e:48:ba:8e:97:b4:d0:c1:b0:6f:4b:5b:16:cf:
f2:f5:f8:b1:6a:37:8a:71:31:5e:ac:92:e4:c4:db:
10:84:e6:4e:99:af:c3:58:75:c3:76:aa:15:e0:68:
76:91:af:37:8c:15:da:1d:8a:a7:fe:98:6d:42:74:
36:72:dd:a0:ff:1d:57:35:bb:91:d1:02:cf:11:33:
bf:33:72:06:5d:57:37:6f:26:7c:e3:ce:a0:b7:be:
30:5a:bd:d6:2d:a5:e7:7f:46:3f:94:45:37:da:ed:
cb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D8:B3:D3:4E:77:FC:C5:48:77:9D:B2:22:0E:E5:F1:28:BA:18:65
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tNiz0053_MVId52yIg7l8Si6GGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.21.0/24
151.243.248.0/24
151.243.251.0/24
151.244.184.0/23
151.245.134.0/24
151.245.194.0/24
151.245.201.0/24
Signature Algorithm: sha256WithRSAEncryption
29:66:e9:ee:5b:4c:79:2d:17:ba:6a:49:d9:a6:fb:ce:22:1a:
31:bf:fe:db:35:50:79:50:1d:b6:a7:d0:e7:42:f0:a4:f5:b5:
b6:9e:34:06:57:75:f0:e1:63:3c:e2:2d:dc:55:fa:82:ab:ca:
73:92:e8:c5:9c:9e:2f:9d:b9:1b:69:8b:23:6c:4b:ad:6f:5c:
00:ed:ba:c7:98:98:50:f6:ab:d3:d7:7c:ca:3c:fa:8c:e4:4a:
56:39:a7:d6:ca:c1:cc:4b:c9:be:e3:f9:f4:96:f9:a2:d5:fd:
6d:d3:70:a8:3b:f0:d7:47:f7:d1:82:8a:3d:82:e5:1c:49:a0:
ad:ef:34:0f:49:3b:a2:1a:59:bb:9d:65:a9:17:ba:1d:fd:94:
b9:08:b0:2e:50:9b:a4:74:bf:3d:1f:d8:45:58:77:03:f6:0b:
30:5d:36:8b:16:13:c3:91:d1:94:50:3b:22:ce:79:d5:d4:e7:
28:c5:02:e5:8a:15:fa:3d:08:18:0f:10:c1:d7:db:c2:5d:89:
49:a1:17:63:33:3c:56:6a:10:41:f4:9a:8c:76:d2:00:9c:93:
d4:56:eb:b7:fb:46:9b:3f:33:c8:88:cf:67:34:7e:bb:d3:3b:
fd:26:1f:d4:fc:43:6e:76:cf:9c:ac:df:ed:4d:1c:91:29:34:
6d:76:e3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:19:43 2026 by rpki-client