Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4Lub8jLfSBOD5H3fkybROmQHea0.roa
File: 4Lub8jLfSBOD5H3fkybROmQHea0.roa (raw, json)
Hash identifier: IYLmfVNUuS67eosBgRcKPTqzu4hE2MWH0cnd5T/AkoI=
Subject key identifier: E0:BB:9B:F2:32:DF:48:13:83:E4:7D:DF:93:26:D1:3A:64:07:79:AD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F8A0D514CFF9E8082988EE548E79880A7
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4Lub8jLfSBOD5H3fkybROmQHea0.roa
Signing time: Wed 22 Jul 2026 13:39:16 +0000
ROA not before: Wed 22 Jul 2026 13:39:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200017
IP address blocks: 151.240.112.0/24 maxlen: 24
151.240.116.0/24 maxlen: 24
151.240.117.0/24 maxlen: 24
151.242.78.0/24 maxlen: 24
151.242.177.0/24 maxlen: 24
151.244.128.0/24 maxlen: 24
151.244.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:0d:51:4c:ff:9e:80:82:98:8e:e5:48:e7:98:80:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 22 13:39:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0bb9bf232df481383e47ddf9326d13a640779ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:28:3e:14:e8:ab:75:02:68:63:67:f4:cf:
09:63:d1:30:07:f0:c1:f9:a7:d3:cb:95:ee:90:bf:
12:29:34:78:ff:8c:e5:6a:8c:fa:1f:a7:1a:b4:e7:
26:6d:11:1e:d2:ff:32:57:7a:4b:8f:0c:40:54:5f:
29:20:52:9a:88:05:2d:0b:4c:6a:b1:fe:a7:b4:33:
ed:e5:90:66:a3:ba:57:cd:fa:c0:88:40:78:c1:a7:
8f:98:92:1e:ae:04:9b:89:18:c2:d8:b9:e0:1b:1e:
63:e8:df:84:7f:f1:35:20:86:5e:6a:91:65:c2:e9:
81:22:1b:84:ac:6e:88:d0:d7:0b:6c:fb:a4:71:43:
a9:df:fe:89:13:1e:8d:3b:2a:ef:ee:d1:b4:eb:46:
89:9d:2b:b7:16:e2:42:ee:b5:c3:6e:39:c5:8f:b9:
5e:fa:52:b2:fd:07:4b:4d:c6:69:a2:25:a2:87:c4:
68:9b:ad:73:63:b0:eb:87:70:68:c8:7d:fe:90:b8:
95:27:cf:d2:ee:40:60:bc:4a:0c:fd:dc:69:03:d4:
c7:31:23:86:10:e0:d3:c5:e3:f6:09:8b:90:01:20:
64:dc:53:1e:0c:4b:c9:8f:c8:03:12:a6:e9:0c:5a:
f6:6e:14:24:4a:1d:d2:a2:c1:b4:a6:3b:a1:0f:d7:
c4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BB:9B:F2:32:DF:48:13:83:E4:7D:DF:93:26:D1:3A:64:07:79:AD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4Lub8jLfSBOD5H3fkybROmQHea0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.112.0/24
151.240.116.0/23
151.242.78.0/24
151.242.177.0/24
151.244.128.0/24
151.244.130.0/24
Signature Algorithm: sha256WithRSAEncryption
35:67:fd:ca:93:36:5f:03:6f:c3:b3:80:9e:ca:b3:e3:00:3b:
fb:c1:6d:b7:3c:1a:f9:ba:7d:46:c3:6e:be:94:c0:8c:5e:27:
f7:3a:43:11:ad:8a:0b:ad:ee:3f:7b:e7:ef:49:1c:be:8a:a9:
a7:ba:c1:4d:fa:12:b0:20:29:3e:70:0a:d2:3c:f5:99:56:05:
de:56:cb:94:4f:0a:9f:f4:55:91:c9:e5:82:52:c4:e7:37:7b:
6e:1e:03:45:21:84:f5:21:97:77:f9:06:74:fa:b3:b9:2b:2d:
1b:b1:49:ea:ad:c2:fb:32:e0:05:46:72:99:ef:da:46:b6:2a:
3f:00:ab:67:49:d7:5c:4a:a8:4c:84:72:37:92:e8:fc:1c:4b:
dd:96:a1:41:d4:6a:48:04:a3:b2:19:80:d7:d9:b3:f2:92:93:
95:ca:95:70:7b:75:7d:10:95:2f:02:af:c7:cd:bd:fa:ad:b3:
88:4f:61:70:28:e8:e6:1c:f5:91:fa:69:b4:0c:b8:4e:09:bd:
84:22:a7:6d:7a:f7:0b:34:18:ef:19:fd:6d:ab:0e:d3:8d:1e:
c0:d2:9f:4e:ab:9f:ab:3e:94:f8:d2:c1:a9:13:e5:3f:b1:b5:
b9:bb:4b:78:10:e6:52:fa:6f:c8:6f:7e:ee:59:ac:8a:2f:d3:
b9:82:c3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:36 2026 by rpki-client