Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/C-T-OIf0yIfcrFdcSmZUtXmdxiQ.roa
File: C-T-OIf0yIfcrFdcSmZUtXmdxiQ.roa (raw, json)
Hash identifier: TKje/jEsSSfb10DH4X0hxkD6JbmXKtqH6/BeQr3GQY0=
Subject key identifier: 0B:E4:FE:38:87:F4:C8:87:DC:AC:57:5C:4A:66:54:B5:79:9D:C6:24
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A1CF6B795D5AB9A1CD5C0F5647AB9C02F9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/C-T-OIf0yIfcrFdcSmZUtXmdxiQ.roa
Signing time: Thu 12 Nov 2026 11:01:29 +0000
ROA not before: Thu 12 Nov 2026 11:01:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 151.240.4.0/24 maxlen: 24
151.241.8.0/24 maxlen: 24
151.241.18.0/24 maxlen: 24
151.241.22.0/24 maxlen: 24
151.242.143.0/24 maxlen: 24
151.242.193.0/24 maxlen: 24
151.245.18.0/24 maxlen: 24
151.245.167.0/24 maxlen: 24
151.246.134.0/24 maxlen: 24
151.247.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:6b:79:5d:5a:b9:a1:cd:5c:0f:56:47:ab:9c:02:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 12 11:01:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0be4fe3887f4c887dcac575c4a6654b5799dc624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:12:2c:83:49:e8:54:e4:c3:a4:d0:5d:f6:3d:
01:e6:33:db:74:c2:fc:6c:9e:eb:11:6a:4a:a5:bf:
f2:65:8f:99:94:44:cc:bc:f5:76:e6:79:c0:6a:4b:
7d:61:48:be:c7:38:21:fd:cc:82:c1:11:82:8d:98:
58:83:58:25:5b:87:38:57:a7:b4:6d:90:aa:a5:35:
a9:bb:17:cc:9b:b7:88:db:6d:d1:0a:31:5d:5f:b9:
3b:9c:8f:c5:36:4b:02:7d:29:f1:da:d8:85:96:8d:
0f:07:3c:6b:c5:29:1b:d4:9f:4b:3d:c3:a4:d5:1e:
09:b4:2d:6b:89:bc:ca:46:f0:23:fe:46:bd:27:d5:
c5:b5:e5:0a:b3:55:1d:a0:99:52:e9:89:39:bc:0e:
e2:09:d3:81:1a:6b:36:85:1d:08:c9:5f:b9:6b:3f:
cb:d4:02:72:82:c0:aa:78:46:28:4f:1b:6d:62:8e:
07:3e:48:fd:74:3b:31:e8:54:0a:13:8c:75:cf:50:
14:06:cb:7f:74:be:38:d4:aa:7c:7a:02:ec:4d:1d:
07:8a:c4:f1:a0:5a:be:60:c7:c6:18:f5:df:b1:2d:
1b:7f:83:dc:b7:73:eb:f7:26:8b:02:d2:8a:3d:51:
be:3f:1d:11:c8:25:92:e3:af:aa:45:26:ed:f1:d4:
26:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E4:FE:38:87:F4:C8:87:DC:AC:57:5C:4A:66:54:B5:79:9D:C6:24
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/C-T-OIf0yIfcrFdcSmZUtXmdxiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.4.0/24
151.241.8.0/24
151.241.18.0/24
151.241.22.0/24
151.242.143.0/24
151.242.193.0/24
151.245.18.0/24
151.245.167.0/24
151.246.134.0/24
151.247.16.0/24
Signature Algorithm: sha256WithRSAEncryption
77:94:52:58:d7:65:66:ce:5d:3f:53:01:b5:c5:c3:11:23:ce:
d7:22:f9:6d:d4:a5:b5:67:aa:d5:7f:97:3f:44:9c:c8:72:95:
e9:29:59:5a:c9:ed:bf:4c:02:14:6c:de:71:50:a9:c7:f7:47:
08:06:ab:7d:dd:d0:19:7f:d3:ca:d1:ba:fb:ed:6f:42:45:64:
8a:6d:af:5a:7a:55:69:5f:6b:b4:3e:4c:d8:53:93:18:93:cb:
3b:cd:e3:c9:8c:f0:0d:55:ac:9c:28:a0:52:60:23:47:c5:34:
dc:be:02:70:3c:3f:dd:f6:2a:77:28:f0:2c:56:57:89:ee:4b:
61:19:31:3f:1e:1a:3f:d5:c1:1d:c5:ea:bf:bc:d2:ae:5d:d0:
22:30:b7:a2:06:3d:cf:09:1a:db:cc:01:b6:24:a1:da:dc:0d:
63:b2:3b:e0:ad:91:26:27:6d:60:9b:33:62:5d:9a:ee:85:5e:
f2:06:b0:d6:9d:a7:cf:8e:29:4a:42:8d:ad:b2:ea:45:65:47:
d9:02:9b:a4:ed:11:72:34:97:4c:80:52:31:bd:db:e9:aa:57:
de:48:24:27:35:03:dd:e5:84:cf:c5:63:19:8f:73:88:1e:7d:
84:0d:03:63:45:70:3b:c9:9e:52:8e:f9:79:d4:03:30:3f:bc:
43:be:2d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:04:53 2026 by rpki-client