Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uEiiMRAybr93-l2rtqeYRgiwaUE.roa
File: uEiiMRAybr93-l2rtqeYRgiwaUE.roa (raw, json)
Hash identifier: eBy+0GUuyq5/VntgWI5xNzldkQfiJhe/f9XPPpBQNYM=
Subject key identifier: B8:48:A2:31:10:32:6E:BF:77:FA:5D:AB:B6:A7:98:46:08:B0:69:41
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A153EC3DFED582BE9CB8DE2E20868FE0A1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uEiiMRAybr93-l2rtqeYRgiwaUE.roa
Signing time: Mon 19 Oct 2026 11:29:13 +0000
ROA not before: Mon 19 Oct 2026 11:29:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402390
IP address blocks: 151.240.253.0/24 maxlen: 24
151.241.40.0/24 maxlen: 24
151.244.166.0/24 maxlen: 24
151.244.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:ec:3d:fe:d5:82:be:9c:b8:de:2e:20:86:8f:e0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 19 11:29:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b848a23110326ebf77fa5dabb6a7984608b06941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:a8:70:0f:93:49:3f:9c:80:40:57:ef:17:
08:68:41:04:9b:fa:81:51:1a:cc:56:b9:77:79:51:
8f:f2:58:7c:7b:82:70:90:43:ab:90:1a:34:c8:3a:
8b:de:67:f2:55:ae:a1:ee:51:74:59:ea:8c:63:6c:
08:11:9d:0a:30:70:44:d7:90:0e:21:e9:2b:47:8d:
55:8c:f4:d3:d9:9b:fa:81:63:5d:d1:64:c0:15:02:
eb:12:b2:da:1d:73:69:27:42:87:22:56:ca:31:2b:
36:cd:33:0f:85:cd:c2:d3:45:21:27:c8:8f:f4:38:
45:9f:53:da:5f:e8:89:bc:5a:ae:19:c0:a3:74:10:
c7:2a:f2:dd:ba:e4:3e:36:14:06:a4:f4:cf:23:04:
13:87:f4:a0:af:47:74:35:23:99:29:ae:4f:b1:a2:
17:17:7c:02:ad:fd:75:c4:f9:f4:4b:d5:6e:3b:91:
b9:f1:eb:da:fa:ac:fb:1f:b4:64:60:9f:a1:ab:9e:
a5:42:47:b8:ae:6b:a2:da:38:9d:65:f9:24:4a:95:
ce:7f:0a:d4:09:bb:19:60:ca:53:85:a4:86:04:66:
5f:ea:c2:e5:30:15:6c:94:dd:4c:8e:31:af:c7:27:
53:74:94:a5:c0:fd:9d:5e:c7:78:dc:1c:4c:77:5c:
48:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:48:A2:31:10:32:6E:BF:77:FA:5D:AB:B6:A7:98:46:08:B0:69:41
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uEiiMRAybr93-l2rtqeYRgiwaUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.253.0/24
151.241.40.0/24
151.244.166.0/24
151.244.223.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:97:af:d8:c0:7d:59:e3:7b:45:7f:fc:ff:18:2e:56:ac:c7:
24:31:cc:64:3c:8e:e0:c3:90:2d:6a:50:41:f3:56:5a:0b:5d:
c6:3a:7e:74:4a:a0:ca:d5:25:94:9d:b3:66:a0:da:fe:05:4e:
c4:93:c6:c8:63:3a:c3:b1:6e:b4:7e:6d:52:70:09:9d:2f:c4:
cf:bd:38:d6:69:9e:93:a5:79:9d:d3:12:c6:59:a8:ae:88:50:
52:26:ec:06:85:8b:f7:4b:48:d7:bc:ae:9d:f2:98:db:b2:44:
57:c5:90:c9:67:5f:3a:79:c7:1f:37:b5:f1:1a:5d:4f:4b:5b:
16:34:07:b7:17:a2:87:df:c5:22:aa:ba:29:17:c3:7c:bf:a4:
c1:5f:d4:ab:ca:32:3d:38:10:7b:8f:64:24:79:b9:a9:fe:b9:
b2:76:ba:cb:21:63:01:c3:92:21:80:be:c7:84:26:84:0e:e2:
5d:38:3d:7c:05:3c:f7:95:62:0a:c2:5b:d6:de:a1:d5:04:d8:
71:da:0a:e7:50:83:61:c7:ab:76:ad:50:db:38:05:06:06:58:
bf:7b:39:68:f9:8f:fc:83:01:4c:75:18:a0:5e:a0:15:3b:7c:
5a:31:dd:c5:c5:6e:b2:9b:55:93:ca:54:84:a2:31:6f:59:86:
91:39:e5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 21:31:54 2026 by rpki-client