Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xsWe333pR8ZmQPWmG5qPhOYROns.roa
File: xsWe333pR8ZmQPWmG5qPhOYROns.roa (raw, json)
Hash identifier: MtNkU7FKcUURzBx7kL2kxBGn8NARF6KZHVYgb4JPkfo=
Subject key identifier: C6:C5:9E:DF:7D:E9:47:C6:66:40:F5:A6:1B:9A:8F:84:E6:11:3A:7B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0F77697A464AB9F091BAAC7AF2BE4C743
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xsWe333pR8ZmQPWmG5qPhOYROns.roa
Signing time: Thu 01 Oct 2026 12:35:39 +0000
ROA not before: Thu 01 Oct 2026 12:35:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214208
IP address blocks: 151.242.23.0/24 maxlen: 24
151.242.84.0/24 maxlen: 24
151.242.171.0/24 maxlen: 24
151.243.124.0/24 maxlen: 24
151.245.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:76:97:a4:64:ab:9f:09:1b:aa:c7:af:2b:e4:c7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 1 12:35:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6c59edf7de947c66640f5a61b9a8f84e6113a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d6:f4:97:8d:06:a0:74:e3:f4:7e:52:40:a7:
b9:59:2c:2d:85:8a:b3:bd:d7:8f:8d:68:59:51:c7:
74:47:d1:00:2e:eb:cc:79:6d:07:50:ed:e0:15:0f:
76:6f:19:57:7c:21:fe:d9:ff:5e:05:c3:01:0e:b2:
9c:3e:d6:d6:f8:dd:99:29:15:c0:aa:75:69:f6:52:
82:fa:f6:ff:9e:23:d5:59:bd:08:34:92:87:b7:7b:
34:b4:e7:69:86:44:6b:99:95:61:c4:be:8b:a0:95:
28:25:5f:21:34:ae:ee:19:00:4a:77:03:19:f5:0e:
f6:ff:26:e8:d6:bf:6d:8c:bc:05:d9:40:ee:cb:0f:
70:ad:06:f5:41:21:43:6f:4a:b2:58:74:2a:c6:a4:
4f:2c:00:29:2d:91:4f:08:dc:36:bd:13:de:1a:7a:
c4:6f:1d:b2:a4:14:24:e1:e6:b6:0e:16:5e:07:39:
98:aa:25:44:dd:98:10:ed:69:27:97:0a:3e:e3:d4:
64:27:30:0d:6b:ed:b2:25:f6:a4:73:34:8a:51:18:
ef:4b:cd:7e:27:1e:93:12:cb:2a:4f:60:49:87:9d:
f9:d4:5c:b5:0a:87:63:31:81:3d:65:f1:ca:71:47:
25:05:03:6a:06:0a:e1:61:2f:d2:b4:f3:6a:86:df:
9d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C5:9E:DF:7D:E9:47:C6:66:40:F5:A6:1B:9A:8F:84:E6:11:3A:7B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xsWe333pR8ZmQPWmG5qPhOYROns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.23.0/24
151.242.84.0/24
151.242.171.0/24
151.243.124.0/24
151.245.201.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ae:1c:f9:a6:39:7d:6f:4a:f7:c5:4c:4a:4a:4d:89:15:0f:
df:0d:b9:2c:73:c9:31:9a:6d:ba:80:b4:6e:a1:a3:c0:4f:6d:
d2:ba:23:d0:62:dd:fb:2b:95:16:ac:cf:cb:9e:a1:08:18:a2:
11:b4:10:ec:c6:8d:c3:de:27:07:0a:be:a3:df:ec:f4:be:bb:
d3:46:11:bf:70:1e:6d:98:cb:a8:e8:62:94:b5:cf:d7:51:84:
8c:08:aa:fa:e7:e9:94:28:5a:8a:fb:30:57:11:4d:da:d7:33:
d9:70:7b:16:5c:36:a2:c4:b3:93:1e:e7:b1:fa:f2:84:e6:84:
3b:45:8b:0f:4c:e5:7f:ba:de:18:9d:51:71:4b:1b:0c:e2:a6:
5d:8c:80:5c:85:64:13:a4:b0:e7:2a:77:ee:19:64:90:9a:c4:
5c:d3:f2:72:60:3b:36:cb:98:c1:28:bb:97:d4:dc:38:50:2b:
ce:a6:3f:3e:34:bf:b4:10:06:cf:4d:6f:f3:0b:cf:02:e3:d6:
b9:4d:2e:2a:6f:56:ff:57:00:ea:a4:66:89:a8:e3:45:67:5a:
10:be:ac:f3:6a:2a:c2:11:0c:c7:56:e4:a7:93:0f:dd:87:a9:
31:15:4c:a9:2a:6f:74:16:61:fc:df:fe:5b:de:63:ef:5a:c5:
ee:c0:02:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 14:56:08 2026 by rpki-client