Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HIO_ovLvPvFJfST31V9vqBRfLic.roa
File: HIO_ovLvPvFJfST31V9vqBRfLic.roa (raw, json)
Hash identifier: 8yTs6RJwa7I3MWMPW1Gz3GoTi2o5CVMJFDw1dj/ks4s=
Subject key identifier: 1C:83:BF:A2:F2:EF:3E:F1:49:7D:24:F7:D5:5F:6F:A8:14:5F:2E:27
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DB07D316462E23425899BAFD3AA301963
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HIO_ovLvPvFJfST31V9vqBRfLic.roa
Signing time: Tue 21 Apr 2026 14:41:27 +0000
ROA not before: Tue 21 Apr 2026 14:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200017
IP address blocks: 151.240.112.0/24 maxlen: 24
151.240.116.0/24 maxlen: 24
151.240.117.0/24 maxlen: 24
151.242.177.0/24 maxlen: 24
151.244.128.0/24 maxlen: 24
151.244.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:04:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:7d:31:64:62:e2:34:25:89:9b:af:d3:aa:30:19:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 21 14:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c83bfa2f2ef3ef1497d24f7d55f6fa8145f2e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:83:fa:51:ca:48:67:82:22:2a:8e:bc:b0:9b:
5e:1c:27:a1:ea:b2:da:7e:d4:c4:b9:a5:e0:32:4a:
62:d7:5a:0c:c0:44:d0:cb:6a:43:96:3a:0a:94:98:
f7:12:82:11:a1:b7:3a:62:4e:e7:ab:93:73:e6:c7:
5d:ec:55:bf:80:f8:0e:f4:88:62:7c:f3:51:25:a2:
bf:93:69:6d:09:0f:7c:d0:88:27:35:d8:b2:56:40:
f7:9b:e8:6f:a2:5d:f5:a9:34:f7:f5:d1:56:cf:25:
4f:c0:73:48:a6:50:c9:89:e6:34:f4:de:2b:a1:83:
2c:5d:7a:62:93:57:dc:fc:28:09:1f:b4:e8:91:c6:
7a:ae:37:7b:19:1a:33:19:3f:eb:90:77:fe:ea:41:
ad:74:a4:65:00:fb:6f:f4:3b:60:07:98:a9:04:10:
5c:77:e3:a6:e0:d2:98:ba:7f:79:ef:41:3a:b2:60:
8a:20:3b:64:1a:32:64:d5:d1:f0:40:87:4b:9f:1c:
57:06:77:9b:f9:ae:29:b6:51:02:91:1d:be:3c:60:
71:23:8f:d2:c2:79:b3:39:86:2f:08:b9:1a:61:7a:
1b:19:f0:87:ad:8c:58:e3:73:9a:56:55:1a:a3:51:
38:6a:e3:96:5d:e7:46:ff:6e:62:62:74:b9:a9:70:
5e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:83:BF:A2:F2:EF:3E:F1:49:7D:24:F7:D5:5F:6F:A8:14:5F:2E:27
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HIO_ovLvPvFJfST31V9vqBRfLic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.112.0/24
151.240.116.0/23
151.242.177.0/24
151.244.128.0/24
151.244.130.0/24
Signature Algorithm: sha256WithRSAEncryption
06:46:6d:20:a9:db:85:68:4c:70:aa:4e:67:25:51:a7:ad:14:
3f:18:89:23:9d:88:21:6f:34:99:bd:ae:b7:80:03:f1:63:f7:
ed:05:24:79:a7:78:85:8a:7d:47:76:67:99:15:bd:be:f6:79:
23:ef:a5:b1:c3:81:2d:0a:3e:78:75:41:d3:f9:9d:a3:7c:ed:
54:a3:65:d0:88:7e:8f:9e:9c:6d:21:23:0e:4d:60:7a:fd:31:
35:07:95:7f:45:64:38:09:3a:14:56:69:ec:35:70:db:18:c2:
cc:ac:08:fc:e2:a3:55:e0:a2:60:98:65:35:0a:07:ab:34:3a:
2e:eb:f1:75:c7:5c:4b:d5:25:bc:cf:74:f6:af:41:66:cd:15:
9e:02:f0:c0:b5:d3:a9:a6:e5:bd:b3:57:84:7f:f2:37:f9:02:
3b:c3:78:03:f5:07:a4:04:11:bf:a4:10:51:cc:30:ae:80:c1:
00:cf:c8:d3:47:c2:7a:0c:e8:07:5e:26:0b:8f:8a:d0:34:24:
e8:6f:ff:b3:5d:22:04:df:90:53:28:73:5d:a8:f3:47:0c:91:
02:0f:30:d9:96:41:e0:c3:7c:c6:89:9f:eb:14:87:9c:16:5e:
fc:51:12:fe:67:32:98:05:81:9f:a9:20:9b:c1:58:35:06:1d:
19:b3:20:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:20:36 2026 by rpki-client