Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/B5t4LFCYxZPkI6J1fPJ_uS9L6FM.roa
File: B5t4LFCYxZPkI6J1fPJ_uS9L6FM.roa (raw, json)
Hash identifier: DSU0Ukb5gGSofiAUqD5gbBIW5dZ924JcU/G3F4MCu5o=
Subject key identifier: 07:9B:78:2C:50:98:C5:93:E4:23:A2:75:7C:F2:7F:B9:2F:4B:E8:53
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D062A57D93A738976EA8A1677A36E9F07
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/B5t4LFCYxZPkI6J1fPJ_uS9L6FM.roa
Signing time: Thu 19 Mar 2026 12:55:31 +0000
ROA not before: Thu 19 Mar 2026 12:55:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200074
IP address blocks: 151.245.70.0/24 maxlen: 24
151.247.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:2a:57:d9:3a:73:89:76:ea:8a:16:77:a3:6e:9f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 19 12:55:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=079b782c5098c593e423a2757cf27fb92f4be853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:22:55:f6:eb:29:6c:6d:f4:73:33:6b:9a:6a:
94:52:1d:57:3a:b4:28:ff:59:81:59:81:83:9f:4c:
ab:d0:a5:95:2b:b1:76:f4:b4:98:a5:be:ec:c5:e3:
f0:47:8c:91:aa:10:81:46:c9:1b:b7:af:95:46:bd:
d1:11:74:39:25:c8:a5:e2:67:bc:06:ee:63:ba:eb:
d0:17:1f:5b:c8:49:b1:f7:d7:e3:a4:99:49:0f:f9:
34:a3:ee:3c:8a:2d:db:36:42:61:c7:e2:f2:9a:0b:
33:57:d3:2e:6c:da:5e:af:91:a4:f7:c2:13:d4:2c:
30:89:5a:12:fa:24:be:8f:92:2a:f8:22:e9:3c:02:
62:1e:84:f0:ad:31:c4:c0:e2:61:63:95:de:04:c7:
05:0d:e7:b4:a0:6b:02:8c:5b:a1:76:99:27:f4:90:
3f:53:dc:41:b0:d8:e6:53:78:6a:36:d6:93:18:68:
3d:39:4e:43:0a:f8:a9:f7:4a:7a:f4:d5:ef:60:77:
b0:a9:ed:3d:61:26:4b:04:b4:c5:55:4d:86:d8:32:
63:50:6f:bf:ab:f4:d8:ee:09:8b:e1:40:3f:14:b1:
03:4a:8b:90:c2:97:86:14:e7:86:4a:62:c4:cd:57:
00:00:5c:e3:33:9b:7f:c0:d3:3b:8d:3c:ca:3f:de:
35:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9B:78:2C:50:98:C5:93:E4:23:A2:75:7C:F2:7F:B9:2F:4B:E8:53
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/B5t4LFCYxZPkI6J1fPJ_uS9L6FM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.70.0/24
151.247.138.0/24
Signature Algorithm: sha256WithRSAEncryption
66:23:82:34:aa:11:53:ce:48:db:66:e4:af:59:b0:c5:4b:4a:
b0:f3:36:13:13:cb:16:99:15:f7:84:31:09:b5:88:10:ab:4b:
7e:9a:63:d7:2a:7c:3a:fe:ec:87:ca:e3:ba:af:7d:95:54:8d:
09:bb:b0:c4:19:12:57:cc:5e:43:84:3c:27:50:82:f9:53:26:
0d:c2:e1:1d:5c:6e:5e:42:6d:bb:bd:1d:36:60:6b:4a:e3:a5:
b3:c7:fe:67:f2:42:03:ef:38:5a:4e:cc:b5:fc:e6:bf:94:4f:
70:52:db:7a:0b:58:57:b2:52:3c:dd:d9:85:09:c2:ae:9d:ee:
8d:9a:86:a4:c5:44:3f:3f:e7:2d:ba:a9:72:3f:10:f3:af:dd:
70:e9:53:01:75:89:7c:cc:2c:7e:3a:34:bf:e2:2b:25:7a:c5:
05:b6:3e:4c:5d:fe:66:ac:26:e2:b1:5e:ed:77:92:85:7d:63:
b3:98:bf:ff:38:be:4e:3f:d7:7a:a5:6d:f5:04:5e:2d:f8:4c:
a3:e7:29:f8:5e:7c:af:23:49:ca:76:6c:87:c1:fa:bf:9d:83:
b6:32:77:01:2b:a4:16:e9:47:34:91:eb:a2:d2:7c:7e:fb:0d:
2e:e7:0d:4e:1d:65:ca:c5:15:c3:e0:da:b7:99:81:a0:66:de:
2a:b5:1c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:18:03 2026 by rpki-client