Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-fi3OjC-TF-o4n7mQQtrcWsUV7A.roa
File: 1-fi3OjC-TF-o4n7mQQtrcWsUV7A.roa (raw, json)
Hash identifier: +M+3ikzI0Kot896i7zBrXjxaqsgEYHIoMkns4OC5oYw=
Subject key identifier: F9:F8:B7:3A:30:BE:4C:5F:A8:E2:7E:E6:41:0B:6B:71:6B:14:57:B0
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DE220CA867CA6D5AF6ACC93FFFDEF4D77
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-fi3OjC-TF-o4n7mQQtrcWsUV7A.roa
Signing time: Fri 01 May 2026 06:01:32 +0000
ROA not before: Fri 01 May 2026 06:01:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 151.242.17.0/24 maxlen: 24
151.242.29.0/24 maxlen: 24
151.242.44.0/24 maxlen: 24
151.242.79.0/24 maxlen: 24
151.242.90.0/24 maxlen: 24
151.242.93.0/24 maxlen: 24
151.242.94.0/24 maxlen: 24
151.242.98.0/24 maxlen: 24
151.242.100.0/24 maxlen: 24
151.242.107.0/24 maxlen: 24
151.242.109.0/24 maxlen: 24
151.242.113.0/24 maxlen: 24
151.242.115.0/24 maxlen: 24
151.242.118.0/24 maxlen: 24
151.242.196.0/22 maxlen: 22
151.243.164.0/24 maxlen: 24
151.243.185.0/24 maxlen: 24
151.245.128.0/24 maxlen: 24
151.245.129.0/24 maxlen: 24
151.245.130.0/24 maxlen: 24
151.245.131.0/24 maxlen: 24
151.245.145.0/24 maxlen: 24
151.245.150.0/24 maxlen: 24
151.245.169.0/24 maxlen: 24
151.246.153.0/24 maxlen: 24
151.246.243.0/24 maxlen: 24
151.246.247.0/24 maxlen: 24
151.246.250.0/24 maxlen: 24
151.247.178.0/24 maxlen: 24
151.247.218.0/24 maxlen: 24
151.247.222.0/24 maxlen: 24
151.247.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e2:20:ca:86:7c:a6:d5:af:6a:cc:93:ff:fd:ef:4d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 1 06:01:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9f8b73a30be4c5fa8e27ee6410b6b716b1457b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:90:86:2f:09:5c:b6:e1:bf:8d:a7:fe:19:51:
44:d7:4e:fd:c2:59:4d:2b:67:c3:18:fc:7b:af:ac:
cf:bd:46:1d:3b:a9:d9:26:41:10:02:71:e1:97:5b:
35:e8:a6:96:69:71:19:60:42:bc:36:2b:e5:5c:01:
2e:7e:a1:82:d5:b8:2c:69:99:e5:ea:46:35:01:0b:
98:be:8b:75:a6:4a:59:ca:54:60:3c:07:fd:f5:e2:
dc:c7:c3:d0:46:8f:1e:25:7e:52:f0:c3:03:26:92:
19:c8:13:d6:da:e9:b7:28:d3:1f:b0:d1:08:69:c7:
83:d4:8a:26:5e:53:17:76:4d:38:f7:bc:dc:e8:3c:
d4:23:f4:2a:da:ea:e7:9e:e8:88:86:63:bb:06:15:
11:96:97:14:b4:b3:8c:6f:69:dd:60:54:40:69:2b:
ff:25:74:3e:6f:d1:b1:27:4d:0d:f6:11:ff:0f:b8:
04:cc:ab:b6:b8:5f:ac:83:b8:01:03:b3:ae:2c:d1:
7b:ec:38:c5:f5:1c:a8:14:80:83:2d:96:66:b4:68:
f4:e9:6d:ab:98:aa:0f:e1:88:1b:e6:33:11:74:41:
17:63:99:bc:7f:58:13:58:65:dd:05:ae:54:34:33:
a7:f8:90:e1:98:f4:5e:54:ea:d9:d3:63:53:10:38:
f9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F8:B7:3A:30:BE:4C:5F:A8:E2:7E:E6:41:0B:6B:71:6B:14:57:B0
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-fi3OjC-TF-o4n7mQQtrcWsUV7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.17.0/24
151.242.29.0/24
151.242.44.0/24
151.242.79.0/24
151.242.90.0/24
151.242.93.0-151.242.94.255
151.242.98.0/24
151.242.100.0/24
151.242.107.0/24
151.242.109.0/24
151.242.113.0/24
151.242.115.0/24
151.242.118.0/24
151.242.196.0/22
151.243.164.0/24
151.243.185.0/24
151.245.128.0/22
151.245.145.0/24
151.245.150.0/24
151.245.169.0/24
151.246.153.0/24
151.246.243.0/24
151.246.247.0/24
151.246.250.0/24
151.247.178.0/24
151.247.218.0/24
151.247.222.0/24
151.247.255.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:71:18:af:1f:9d:45:13:92:ba:6b:5a:c6:2a:2f:76:04:63:
f6:80:f8:43:85:b1:9a:38:39:08:c7:47:74:ea:a8:a2:0f:9c:
27:e4:28:4f:fb:5a:7e:ad:f6:29:4d:1e:65:52:2e:b5:0d:0f:
d1:cd:a6:29:18:3c:97:26:ab:c8:62:b5:16:c5:ad:4c:00:81:
bc:c2:72:0c:6a:c5:b9:e8:40:61:f5:0f:aa:62:b8:14:e6:ec:
b3:e9:fc:de:a7:69:21:2d:b6:1a:50:52:fc:2e:1e:20:3c:a5:
84:07:20:3f:ac:61:44:6c:54:b9:06:48:ba:35:d5:f3:ad:68:
03:50:b2:08:a2:24:24:5b:95:55:16:bc:1a:5a:1b:d3:de:25:
24:68:86:1f:17:2b:f1:1d:03:45:07:d0:21:63:ae:db:6a:a4:
72:bc:0f:6d:9d:94:ea:e9:18:f5:ea:71:0f:df:ed:ca:3a:9d:
20:d3:c5:a2:ac:10:b2:58:ab:91:23:7e:43:ee:11:51:d3:dc:
e6:22:60:75:29:84:84:24:70:ee:ae:28:04:1d:bd:b1:6c:b8:
13:62:6e:b0:fc:aa:c2:83:5a:30:2e:5b:15:dd:9c:2e:e1:8c:
f1:42:aa:0d:11:a6:b4:e8:d9:36:52:5c:5a:48:a5:dc:09:18:
a5:3b:e8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:59:39 2026 by rpki-client