Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IeODiqxJ5KtB_lTdJmV6q8yWtDk.roa
File: IeODiqxJ5KtB_lTdJmV6q8yWtDk.roa (raw, json)
Hash identifier: hVcLX/u7XgHzkkeelh6MKI+YyPibA8LLo/s402YNY3s=
Subject key identifier: 21:E3:83:8A:AC:49:E4:AB:41:FE:54:DD:26:65:7A:AB:CC:96:B4:39
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F8DF6E8624C9478A71F82B9036561D7D8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IeODiqxJ5KtB_lTdJmV6q8yWtDk.roa
Signing time: Thu 23 Jul 2026 07:53:16 +0000
ROA not before: Thu 23 Jul 2026 07:53:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207043
IP address blocks: 151.243.18.0/24 maxlen: 24
151.243.28.0/24 maxlen: 24
151.243.113.0/24 maxlen: 24
151.243.150.0/24 maxlen: 24
151.247.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:f6:e8:62:4c:94:78:a7:1f:82:b9:03:65:61:d7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 23 07:53:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=21e3838aac49e4ab41fe54dd26657aabcc96b439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8a:57:1b:2c:fb:a9:86:d8:10:f7:df:be:2d:
73:dd:19:c4:4c:1f:21:84:3f:15:8d:96:18:d8:a6:
56:91:5c:cc:62:0e:25:ea:61:78:89:93:80:80:78:
02:a7:0c:16:1a:c1:1c:95:22:6f:d9:8b:bf:e5:95:
87:39:6e:77:5a:dd:23:8d:11:b9:8c:3e:65:17:ab:
50:ce:42:54:d2:69:34:3f:8b:ef:30:8d:36:13:b7:
88:b5:4a:0f:3e:b9:24:0f:52:81:ee:5f:3e:5a:71:
86:6a:ba:63:49:92:b3:53:71:26:58:33:a5:69:8e:
31:ad:06:93:e2:e0:49:90:81:4d:54:57:66:7b:df:
be:02:85:95:c8:8c:98:fb:e1:26:9d:5e:92:41:c8:
a2:79:be:26:c0:ca:5e:4a:54:4d:39:fc:d4:f3:88:
a1:12:eb:1d:b1:7f:4e:bd:87:72:da:21:a6:42:ea:
5c:68:1e:6b:fe:33:4f:dd:b8:4a:62:c6:3d:83:1e:
71:98:3d:1e:c4:10:77:c7:3c:94:7f:91:21:13:5f:
d3:1f:d1:d4:dd:71:41:25:24:bc:fd:c7:24:81:38:
8d:c9:3c:cb:48:1a:8b:d2:c4:01:47:3d:69:1c:de:
1c:59:33:3a:a7:16:45:b0:14:67:2a:19:2e:aa:59:
db:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E3:83:8A:AC:49:E4:AB:41:FE:54:DD:26:65:7A:AB:CC:96:B4:39
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IeODiqxJ5KtB_lTdJmV6q8yWtDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.18.0/24
151.243.28.0/24
151.243.113.0/24
151.243.150.0/24
151.247.228.0/24
Signature Algorithm: sha256WithRSAEncryption
00:5a:da:f0:1e:bb:23:4a:24:85:d2:da:dd:42:7d:3a:29:7e:
fc:ca:c0:29:0f:5e:0a:e3:b4:53:c9:9b:02:a5:f1:a5:ac:e1:
02:38:e3:ef:18:40:f1:a8:65:b3:14:93:5c:af:00:cd:23:ba:
54:d6:61:c8:aa:30:d0:ab:65:6a:0e:67:cc:52:f6:f8:50:80:
97:ac:65:6e:06:24:71:48:13:b1:a2:c6:c9:5d:29:fa:7b:e0:
d2:d3:1b:fd:d0:8b:57:76:83:4f:72:51:25:35:ae:49:ab:bd:
dd:61:0b:a1:e6:63:56:af:0c:f6:91:56:41:79:b7:5b:f3:54:
fb:da:06:9c:c5:e7:eb:e4:c1:74:62:65:b9:6e:a3:c3:e3:66:
29:bb:27:b4:21:b3:30:8b:60:1e:f4:6a:46:c5:45:56:15:57:
4b:48:83:ad:3f:1b:9e:fe:d9:a9:af:42:a9:b7:ef:7d:82:a8:
e7:ef:95:24:36:d1:5c:c5:76:79:97:10:a2:f7:26:55:98:31:
9c:28:c1:cf:62:52:c5:2a:9c:5b:56:3a:f0:59:e5:77:62:7e:
97:b3:cc:e4:7e:47:61:a5:41:54:6a:8a:ab:8f:f6:b6:e6:12:
e3:3a:01:c0:d2:bc:de:ba:2b:58:f0:01:b2:93:0a:c3:67:d1:
4b:98:cf:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:59:49 2026 by rpki-client