Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/C1pFY7Lww4U59SJazMIE_JocMWE.roa
File: C1pFY7Lww4U59SJazMIE_JocMWE.roa (raw, json)
Hash identifier: nvlrx0MbBlfNt9oeAX89PG9JT91qjSEWznmOgH/BMWE=
Subject key identifier: 0B:5A:45:63:B2:F0:C3:85:39:F5:22:5A:CC:C2:04:FC:9A:1C:31:61
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D241337202C1E0BB153434B5501F1D607
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/C1pFY7Lww4U59SJazMIE_JocMWE.roa
Signing time: Wed 25 Mar 2026 08:18:52 +0000
ROA not before: Wed 25 Mar 2026 08:18:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 151.242.101.0/24 maxlen: 24
151.242.105.0/24 maxlen: 24
151.242.143.0/24 maxlen: 24
151.243.178.0/23 maxlen: 24
151.243.223.0/24 maxlen: 24
151.247.137.0/24 maxlen: 24
151.247.161.0/24 maxlen: 24
151.247.165.0/24 maxlen: 24
151.247.177.0/24 maxlen: 24
151.247.182.0/23 maxlen: 24
151.247.250.0/24 maxlen: 24
151.247.253.0/24 maxlen: 24
151.247.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:13:37:20:2c:1e:0b:b1:53:43:4b:55:01:f1:d6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 25 08:18:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b5a4563b2f0c38539f5225accc204fc9a1c3161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:ce:cb:82:a0:0f:a8:b0:da:6a:c4:37:70:
ac:1d:95:fa:e3:01:95:2c:8e:2b:d5:f4:82:92:0c:
93:b1:80:77:de:64:a6:05:8c:af:3d:23:e3:c1:5f:
39:b8:06:0f:1f:25:ee:6c:93:7e:10:f6:79:16:e9:
80:4b:79:18:74:a2:2d:01:b6:4f:cb:02:78:d3:5e:
2e:cb:6b:7b:05:2c:51:93:73:a0:e8:c5:1f:95:d4:
2d:bd:54:b9:3f:2d:a9:a4:35:92:55:40:0f:f8:14:
3f:f1:76:e2:29:21:39:80:68:8b:1a:91:a4:ec:fc:
a8:6f:f4:7f:35:3e:d8:66:4c:3c:d0:f8:37:81:81:
18:f1:df:cc:69:19:ea:10:2c:d3:ce:9a:f9:f2:d7:
a0:8b:11:b1:4e:40:4e:ca:55:ba:34:6a:aa:28:20:
92:65:70:47:d2:f4:f0:9e:33:c9:12:45:fb:64:b3:
1b:ab:12:4a:20:b5:c8:56:43:1d:6a:75:7e:19:9d:
9b:46:e3:48:9a:38:d2:43:5c:61:66:5e:c6:70:ad:
e1:4d:bf:cc:3b:b9:c9:e2:ad:51:e2:2a:27:23:36:
b4:52:3b:08:c1:6f:29:c0:d2:07:f1:a6:64:34:c0:
e2:04:d4:f6:be:e1:d1:34:96:d0:fd:d5:27:6a:9a:
ba:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5A:45:63:B2:F0:C3:85:39:F5:22:5A:CC:C2:04:FC:9A:1C:31:61
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/C1pFY7Lww4U59SJazMIE_JocMWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.101.0/24
151.242.105.0/24
151.242.143.0/24
151.243.178.0/23
151.243.223.0/24
151.247.137.0/24
151.247.161.0/24
151.247.165.0/24
151.247.177.0/24
151.247.182.0/23
151.247.250.0/24
151.247.253.0-151.247.254.255
Signature Algorithm: sha256WithRSAEncryption
b1:85:9d:a4:2f:b9:dc:fe:c4:6c:2e:80:1e:d2:cc:a1:d1:e8:
84:9b:ca:d0:0e:b3:29:2a:e7:fe:d5:63:b0:2e:9e:d5:74:5c:
3b:26:9e:99:18:b2:67:28:73:72:f1:fc:ca:cc:f8:0d:c1:5f:
05:12:a4:0f:a2:59:94:93:64:e3:61:f7:90:0c:8f:9c:94:ab:
d9:4a:b0:ad:a7:fe:13:de:85:82:d9:20:2a:ff:a9:6d:3c:17:
96:69:e2:c9:95:b6:87:65:b4:0b:20:48:6a:17:79:67:f9:04:
84:08:43:49:2c:f1:64:a5:c3:73:a4:94:b9:03:b9:be:2c:f9:
fa:a0:6e:47:9b:93:60:02:85:f4:1f:a3:91:16:b6:97:bc:bb:
a6:c2:f0:33:c0:7d:cc:d8:26:1b:f7:9c:e3:d3:36:3d:4d:1b:
12:f0:5b:5b:49:4c:89:57:b5:45:36:8f:46:55:71:83:b6:f7:
e8:7f:67:b1:45:35:05:7a:cf:c9:16:c4:c4:82:86:0a:ae:a1:
8e:f9:78:a9:b0:83:65:55:81:04:87:9e:df:af:b1:af:72:36:
1b:f8:6f:b6:28:0d:6d:f2:83:a4:36:3b:56:de:5d:bc:e5:a9:
ab:fa:01:d8:1b:31:4b:e2:16:e8:48:51:34:da:31:4e:4e:1a:
60:3f:02:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:36:19 2026 by rpki-client