Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FEjJ-Y_liwO2JQ8DYxquoBHGHVo.roa
File: FEjJ-Y_liwO2JQ8DYxquoBHGHVo.roa (raw, json)
Hash identifier: Fg1UzanolB5uJ8R9aMDWxhQg+euDeXyobr785c6a0do=
Subject key identifier: 14:48:C9:F9:8F:E5:8B:03:B6:25:0F:03:63:1A:AE:A0:11:C6:1D:5A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F37460DBB35183C60DAF48977B9BE6C91
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FEjJ-Y_liwO2JQ8DYxquoBHGHVo.roa
Signing time: Mon 06 Jul 2026 11:52:45 +0000
ROA not before: Mon 06 Jul 2026 11:52:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203156
IP address blocks: 151.243.149.0/24 maxlen: 24
151.247.224.0/24 maxlen: 24
151.247.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:46:0d:bb:35:18:3c:60:da:f4:89:77:b9:be:6c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 6 11:52:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1448c9f98fe58b03b6250f03631aaea011c61d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b1:c8:f2:cd:2d:a9:92:67:7b:b1:85:24:a7:
63:9b:60:3f:f4:68:d9:0f:e2:8c:22:25:d9:b7:69:
db:02:0c:5d:e2:59:fd:29:a1:08:17:00:0b:33:50:
f3:6f:e9:50:ec:59:b7:e3:10:1e:9d:56:7e:66:33:
94:15:1a:e4:eb:52:53:0c:22:f3:ab:dc:44:0e:4e:
91:a2:de:1a:ca:37:cb:a1:ea:1b:f8:93:c3:97:97:
32:a1:1e:88:06:c6:ef:6e:bf:19:11:6e:f6:fe:7a:
5c:2e:90:bd:97:8a:10:96:cb:d8:6d:67:11:83:7d:
22:4a:8c:74:06:01:d3:0b:49:75:4f:81:d3:b3:2a:
23:1c:b9:86:86:86:bd:1e:30:ca:57:89:13:bf:e0:
f8:65:8f:09:72:4c:85:67:41:13:72:66:be:a4:dc:
3d:5e:d5:26:99:e6:e3:cb:1d:9a:57:64:7d:56:09:
43:03:82:1d:0f:9a:39:3d:c9:af:0f:e5:92:1b:9d:
3b:a5:84:0b:66:fe:ae:88:ed:17:66:29:b0:de:6a:
1c:c3:56:59:e3:0f:0f:34:9b:5b:af:bd:83:73:a7:
2d:05:6d:ae:ed:5e:bb:e5:ee:b3:f3:4d:8b:1c:ff:
af:74:0e:e2:70:19:93:7e:ed:1d:e9:02:d2:c4:0f:
36:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:48:C9:F9:8F:E5:8B:03:B6:25:0F:03:63:1A:AE:A0:11:C6:1D:5A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FEjJ-Y_liwO2JQ8DYxquoBHGHVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.149.0/24
151.247.224.0/24
151.247.230.0/24
Signature Algorithm: sha256WithRSAEncryption
97:71:a1:98:8c:58:23:54:03:41:39:a2:1d:7c:6d:5d:54:ba:
a7:46:cc:10:f8:c6:bd:98:c8:b8:ba:bf:a2:5d:01:7d:23:c4:
e3:86:e5:ff:02:a9:b2:c3:65:43:ad:2e:7e:a5:b2:c8:15:89:
50:49:46:0f:59:eb:62:af:94:0b:7e:2b:39:9f:e7:3d:dd:08:
83:b4:2a:1e:97:f7:60:21:f0:21:c3:b9:64:b1:69:07:0e:84:
32:0c:a2:90:0f:0e:c9:46:92:7d:50:23:db:96:ae:cf:07:7d:
44:b8:8b:c5:a4:dc:c9:c8:f7:2e:b9:78:58:d0:65:43:f6:ab:
22:73:f7:3e:75:ed:b0:be:fc:7a:3a:90:83:67:95:1c:ce:95:
ae:96:b0:66:2d:c7:a7:fd:8a:13:20:8b:33:59:f0:51:4f:22:
4a:18:2b:35:37:0f:46:a5:68:93:5a:fd:42:2e:3c:80:72:60:
6f:6a:8b:c4:c7:8b:e5:10:dc:01:dc:67:a3:1a:02:c4:38:cc:
be:bb:23:6e:8d:c5:e1:29:cb:98:a8:53:ba:ad:ae:57:93:28:
78:f8:03:0d:32:74:b7:88:ee:a6:2b:ec:ea:a7:2d:8f:27:1c:
4e:57:6f:53:2c:2a:40:02:92:7c:7a:cd:ea:bc:2a:2d:94:ef:
36:bf:14:53
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ83Rg27NRg8YNr0iXe5vmyRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNzA2MTE1MjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDQ4YzlmOThmZTU4YjAzYjYyNTBmMDM2MzFhYWVhMDExYzYxZDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbHI8s0tqZJne7GFJKdjm2A/9GjZ
D+KMIiXZt2nbAgxd4ln9KaEIFwALM1Dzb+lQ7Fm34xAenVZ+ZjOUFRrk61JTDCLz
q9xEDk6Rot4ayjfLoeob+JPDl5cyoR6IBsbvbr8ZEW72/npcLpC9l4oQlsvYbWcR
g30iSox0BgHTC0l1T4HTsyojHLmGhoa9HjDKV4kTv+D4ZY8JckyFZ0ETcma+pNw9
XtUmmebjyx2aV2R9VglDA4IdD5o5PcmvD+WSG507pYQLZv6uiO0XZimw3mocw1ZZ
4w8PNJtbr72Dc6ctBW2u7V675e6z802LHP+vdA7icBmTfu0d6QLSxA82sQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBRIyfmP5YsDtiUPA2MarqARxh1aMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvRkVqSi1ZX2xpd08ySlE4RFl4cXVvQkhHSFZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/OVAwQA
l/fgAwQAl/fmMA0GCSqGSIb3DQEBCwUAA4IBAQCXcaGYjFgjVANBOaIdfG1dVLqn
RswQ+Ma9mMi4ur+iXQF9I8TjhuX/Aqmyw2VDrS5+pbLIFYlQSUYPWetir5QLfis5
n+c93QiDtCoel/dgIfAhw7lksWkHDoQyDKKQDw7JRpJ9UCPblq7PB31EuIvFpNzJ
yPcuuXhY0GVD9qsic/c+de2wvvx6OpCDZ5UczpWulrBmLcen/YoTIIszWfBRTyJK
GCs1Nw9GpWiTWv1CLjyAcmBvaovEx4vlENwB3GejGgLEOMy+uyNujcXhKcuYqFO6
ra5Xkyh4+AMNMnS3iO6mK+zqpy2PJxxOV29TLCpAApJ8es3qvCotlO82vxRT
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:43:38 2026 by rpki-client