Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HfhnVVvsv7KWyapcI9dhqEfVc34.roa
File: HfhnVVvsv7KWyapcI9dhqEfVc34.roa (raw, json)
Hash identifier: jMWj1xSmlaFoX5gt5d4CvV7neMf3Qqu2s2MlGCFy7lI=
Subject key identifier: 1D:F8:67:55:5B:EC:BF:B2:96:C9:AA:5C:23:D7:61:A8:47:D5:73:7E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F6539E1F932F1EDAD4A8CA2A55F17672E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HfhnVVvsv7KWyapcI9dhqEfVc34.roa
Signing time: Wed 15 Jul 2026 10:01:59 +0000
ROA not before: Wed 15 Jul 2026 10:01:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 151.240.150.0/24 maxlen: 24
151.241.24.0/24 maxlen: 24
151.243.167.0/24 maxlen: 24
151.244.38.0/24 maxlen: 24
151.244.52.0/24 maxlen: 24
151.244.66.0/24 maxlen: 24
151.244.67.0/24 maxlen: 24
151.244.118.0/24 maxlen: 24
151.244.221.0/24 maxlen: 24
151.245.108.0/24 maxlen: 24
151.246.226.0/24 maxlen: 24
151.246.249.0/24 maxlen: 24
151.247.27.0/24 maxlen: 24
151.247.92.0/24 maxlen: 24
151.247.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:39:e1:f9:32:f1:ed:ad:4a:8c:a2:a5:5f:17:67:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 15 10:01:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1df867555becbfb296c9aa5c23d761a847d5737e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:77:97:da:e1:01:11:95:de:e8:b4:26:21:86:
8f:0a:dd:b8:ea:94:d8:1e:fe:d3:3f:90:7a:3f:fa:
e0:52:f1:49:a2:81:05:7e:50:a0:16:66:2d:40:ca:
26:9e:0b:19:00:e7:52:7a:a1:fe:e8:4f:a8:f2:4e:
cc:7d:c3:8e:05:9d:85:df:fa:ee:fe:b4:d7:3b:35:
47:30:e0:86:ba:42:d6:7a:b9:f9:89:60:bb:0d:d9:
4a:1a:3f:9c:e9:89:f2:da:8a:d4:44:a1:de:0c:c7:
99:99:de:29:3a:60:be:a8:ed:b2:9a:e5:c4:8e:28:
22:44:b3:14:e5:e3:0c:97:23:f9:d4:2c:ec:76:66:
88:22:e1:d8:61:b0:dc:2f:c4:72:6c:e1:1b:7d:ac:
ef:11:b4:71:7c:30:ff:b4:e6:9e:ef:00:c6:7f:7b:
99:28:56:22:03:ac:bd:45:ad:9e:ba:e0:58:7c:62:
23:1c:64:df:4f:79:ce:61:b6:72:5a:d1:1d:1c:07:
27:e9:3e:81:18:c1:f0:99:27:27:4d:88:72:cc:2e:
a9:27:24:75:c3:86:9e:31:aa:16:e4:04:e4:a4:33:
a5:f5:ca:bb:64:2a:5f:19:17:97:58:7f:17:68:82:
47:ca:b1:5c:a4:61:c0:e4:2c:3d:c6:a5:25:e2:02:
d1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F8:67:55:5B:EC:BF:B2:96:C9:AA:5C:23:D7:61:A8:47:D5:73:7E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HfhnVVvsv7KWyapcI9dhqEfVc34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.150.0/24
151.241.24.0/24
151.243.167.0/24
151.244.38.0/24
151.244.52.0/24
151.244.66.0/23
151.244.118.0/24
151.244.221.0/24
151.245.108.0/24
151.246.226.0/24
151.246.249.0/24
151.247.27.0/24
151.247.92.0/24
151.247.151.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:13:72:1f:38:45:fc:5d:40:2c:78:48:09:ad:86:33:30:ca:
2b:c4:72:0e:47:8c:bf:10:71:2d:10:fa:b6:d0:d3:d2:41:52:
d8:ec:36:80:98:8e:c3:0c:49:da:b7:7c:e7:4b:f4:b4:9e:77:
95:39:0e:af:ad:ea:a0:64:94:92:d3:0d:00:d1:ed:e3:65:3e:
2b:9f:31:1c:a7:6d:4c:03:f5:ab:90:fb:46:86:f8:2c:d7:b9:
22:c8:47:74:c3:9f:f1:68:9e:c9:1a:d3:33:b3:ec:0b:2c:ef:
db:cd:e9:f5:6f:0b:9e:cb:32:55:a5:a3:94:07:e1:f4:9e:7b:
41:e9:1e:a6:15:94:2a:45:84:a9:5d:74:0c:45:95:d9:69:c2:
89:03:c7:9e:5b:f3:c1:4e:ff:a0:3b:f9:a8:c7:81:45:ce:8b:
22:74:4c:1b:b4:00:5e:ca:05:70:e2:92:04:6b:ce:66:21:be:
ab:ef:f5:59:9a:07:49:6c:ae:79:a2:b4:c7:19:18:20:f5:4e:
07:ee:9e:1e:ee:e5:84:a5:40:f6:f3:a1:ab:0d:58:9d:ea:cb:
d7:58:4a:d6:3f:11:39:55:ad:76:b8:73:b6:18:54:31:ce:05:
70:ab:e1:90:7b:6b:0d:41:78:da:f4:4f:7b:38:e0:00:35:3f:
57:66:09:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:14:36 2026 by rpki-client