Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ATSetRZLsr-hlybtd9iyxA-Cnnw.roa
File: ATSetRZLsr-hlybtd9iyxA-Cnnw.roa (raw, json)
Hash identifier: 3GD+ckS8IeghT2OFYPi2POyyaEFZ2i1LPJkViw+dekQ=
Subject key identifier: 01:34:9E:B5:16:4B:B2:BF:A1:97:26:ED:77:D8:B2:C4:0F:82:9E:7C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F8A0C691FAE195F43AED2D498328FAD21
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ATSetRZLsr-hlybtd9iyxA-Cnnw.roa
Signing time: Wed 22 Jul 2026 13:38:16 +0000
ROA not before: Wed 22 Jul 2026 13:38:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211440
IP address blocks: 151.240.113.0/24 maxlen: 24
151.240.117.0/24 maxlen: 24
151.241.0.0/24 maxlen: 24
151.241.143.0/24 maxlen: 24
151.241.147.0/24 maxlen: 24
151.244.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:0c:69:1f:ae:19:5f:43:ae:d2:d4:98:32:8f:ad:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 22 13:38:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01349eb5164bb2bfa19726ed77d8b2c40f829e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2e:ac:5f:03:db:cd:b9:1e:a7:db:1d:b9:0c:
ae:f2:eb:fe:57:ec:7b:4e:45:99:3f:9e:c8:d4:f8:
a1:f3:54:1f:f6:79:2e:05:91:88:6b:30:5e:04:28:
e4:f5:c5:b5:6b:13:f8:31:ac:a2:28:62:f9:55:90:
2b:ec:10:48:b4:8e:08:1b:d1:fd:dc:39:72:f5:5c:
2c:de:5f:0f:bb:0c:3a:64:43:ed:46:8c:7f:f5:77:
02:1e:9a:60:39:e5:35:fb:20:4f:c4:de:e9:d5:24:
81:dd:67:30:b1:ba:36:a5:c4:f9:38:e8:18:f1:69:
26:24:21:bf:a5:98:4d:d9:3b:00:c0:08:e5:3c:f2:
30:61:47:79:d1:16:dc:fa:44:19:44:80:85:ed:b9:
07:7c:ff:f1:e1:90:0f:b9:09:02:3f:96:ea:18:92:
bd:a1:ad:80:ff:54:98:47:04:53:92:68:f8:f7:14:
eb:d5:58:0f:9c:05:3b:29:ea:2a:d9:a6:62:2b:0b:
fd:de:c1:a8:bc:c1:b6:87:8d:e7:fb:84:81:68:59:
e3:dc:e3:68:d7:b5:03:63:d5:91:b8:07:0c:e7:61:
e4:fd:88:94:63:00:86:71:d8:d5:51:da:ed:f7:28:
ff:fb:fc:82:72:94:19:f3:25:49:b7:f2:83:23:60:
e7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:34:9E:B5:16:4B:B2:BF:A1:97:26:ED:77:D8:B2:C4:0F:82:9E:7C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ATSetRZLsr-hlybtd9iyxA-Cnnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.113.0/24
151.240.117.0/24
151.241.0.0/24
151.241.143.0/24
151.241.147.0/24
151.244.1.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:e7:e0:32:5c:ec:2c:6f:c6:e6:8d:3d:9b:fd:61:26:38:67:
5b:e6:5d:80:4a:cc:76:70:25:2b:cd:4c:44:71:52:87:28:da:
19:d0:c1:c2:a6:0c:d6:96:98:d0:00:06:79:ae:02:c5:15:2a:
cc:12:42:73:a8:4c:b9:1f:e0:f2:c8:a6:d6:5e:e9:65:3c:7c:
e3:4d:71:b4:04:b6:a0:c5:e7:87:cc:8d:83:39:c6:81:93:06:
a0:0b:bd:81:21:22:f9:58:e9:2c:8c:10:34:e8:3e:76:5f:a4:
04:c8:f1:3d:51:39:72:9a:38:82:38:bd:7c:06:7b:5a:c7:08:
23:fb:51:f9:da:09:d3:35:9d:55:9f:3b:49:a1:04:90:0e:a9:
b0:2a:ab:82:eb:b1:b1:ec:36:48:d2:e4:f5:65:6f:cc:53:f1:
c4:f2:1d:e9:f6:02:5d:ec:64:32:cc:36:0b:6b:79:73:a3:e6:
71:98:00:27:62:5a:14:35:50:51:93:77:4d:2e:c6:7b:4c:95:
18:6a:39:64:d9:5b:79:79:58:ce:23:50:c1:10:4d:7c:07:0e:
79:17:64:cc:e3:1f:3d:8f:76:7a:52:41:2e:56:5e:63:8b:a4:
5b:c3:16:34:fd:85:44:3d:8c:2d:08:43:61:b6:f3:87:86:15:
db:d6:d5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:18 2026 by rpki-client