Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EJa6ivdjPbLQwFprRaYXys9nseA.roa
File: EJa6ivdjPbLQwFprRaYXys9nseA.roa (raw, json)
Hash identifier: 88u0TDrG5X+XQnmlT/4s0ctrG79PDdiDpEjXmWM9C8w=
Subject key identifier: 10:96:BA:8A:F7:63:3D:B2:D0:C0:5A:6B:45:A6:17:CA:CF:67:B1:E0
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CF1AC5E76EBDDD88AC258C155C341CF79
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EJa6ivdjPbLQwFprRaYXys9nseA.roa
Signing time: Sun 15 Mar 2026 13:25:31 +0000
ROA not before: Sun 15 Mar 2026 13:25:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397423
IP address blocks: 151.242.97.0/24 maxlen: 24
151.243.215.0/24 maxlen: 24
151.244.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f1:ac:5e:76:eb:dd:d8:8a:c2:58:c1:55:c3:41:cf:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 15 13:25:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1096ba8af7633db2d0c05a6b45a617cacf67b1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a8:38:37:89:b6:08:1f:27:aa:61:ab:43:67:
fc:d5:ee:27:c2:aa:cf:d7:7d:d4:6c:a8:8f:c3:21:
d3:08:7c:e5:06:50:1b:20:29:d2:31:14:bf:93:cd:
7e:d4:ba:1d:8d:75:e4:b9:0c:47:c9:a1:1f:f2:24:
6e:f3:82:0e:3f:ec:49:cd:5b:db:23:9d:5a:d8:e3:
6e:97:8d:d0:a2:1b:97:e5:1a:e6:7f:3d:dc:f6:3d:
e4:40:ca:46:28:8e:92:0a:4c:c4:e1:3b:dd:25:6e:
d6:cf:09:ab:f2:d6:71:c7:5d:a7:7e:9b:32:24:ba:
f5:75:4a:95:71:4b:b6:92:04:60:db:51:05:02:21:
a8:dd:f9:70:e9:ea:e5:7d:5d:33:1c:07:27:1b:70:
02:c4:83:e7:6d:88:9f:8e:ba:00:d5:26:20:a5:58:
5d:fa:82:ae:53:c2:3a:63:46:0f:46:57:ef:a1:8e:
3f:97:d9:a8:05:cf:8e:62:ba:a4:e1:4e:61:02:59:
08:59:63:6c:98:82:a7:7f:cb:6a:54:73:0a:3c:e8:
8c:0b:e5:b1:d3:33:30:b6:5b:c8:e3:d9:29:eb:a2:
a2:2f:e1:41:6f:ad:65:d1:36:ba:76:5f:4a:47:5a:
ea:1f:ae:9e:db:c9:e3:70:af:57:67:d5:d1:c7:88:
d9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:96:BA:8A:F7:63:3D:B2:D0:C0:5A:6B:45:A6:17:CA:CF:67:B1:E0
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EJa6ivdjPbLQwFprRaYXys9nseA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.97.0/24
151.243.215.0/24
151.244.99.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:ef:79:6a:11:66:12:33:c9:43:44:fe:3a:a7:20:3e:7e:74:
53:3f:87:bd:f2:95:0f:e3:af:cf:97:9a:1d:f7:1d:92:36:75:
eb:4e:c3:06:f3:da:dc:a7:17:8c:5d:27:7c:44:2d:bd:ca:c5:
17:66:df:96:90:bc:df:d5:bb:5a:ee:27:66:73:af:9e:49:aa:
b2:c0:49:29:f2:94:b3:e1:f6:53:ff:d9:91:9f:02:3c:71:e6:
be:f4:61:87:ab:8a:c6:06:0b:3f:7c:38:ae:67:06:a5:7c:81:
41:a1:ca:65:14:5f:7a:d6:be:9e:d1:ef:02:b1:4c:6b:d2:82:
1d:6f:1a:40:99:3e:bd:d9:85:7b:30:a2:ae:b4:31:0f:5e:76:
25:0c:47:63:3e:8a:e5:94:b9:23:f2:2d:e7:8b:8d:ed:61:8f:
43:44:57:2e:85:fc:b3:cd:26:b0:31:a5:1a:78:e7:69:33:00:
21:51:59:e3:40:d6:a8:0c:14:50:67:86:a8:af:eb:f0:64:4f:
b6:16:12:ec:67:53:44:d3:91:a1:9b:4b:f3:ea:3c:13:87:a4:
c6:3d:29:00:9b:c3:17:00:dd:68:36:65:72:a2:98:7d:8d:ce:
b8:98:e4:fb:1f:7d:fd:b1:81:89:57:db:a1:b4:3e:97:24:61:
a4:ef:59:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:17:27 2026 by rpki-client