Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JE5_aVpR-Eqyke2WGnl8tLO7j1E.roa
File: JE5_aVpR-Eqyke2WGnl8tLO7j1E.roa (raw, json)
Hash identifier: LjhDHyf5tYKkBbn9n0srJzRZ5IXR/AvG1orUA1gyPKE=
Subject key identifier: 24:4E:7F:69:5A:51:F8:4A:B2:91:ED:96:1A:79:7C:B4:B3:BB:8F:51
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0C41DE7594A4D013F5C9683986AF56079
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JE5_aVpR-Eqyke2WGnl8tLO7j1E.roa
Signing time: Mon 21 Sep 2026 13:18:09 +0000
ROA not before: Mon 21 Sep 2026 13:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 151.240.149.0/24 maxlen: 24
151.241.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:1d:e7:59:4a:4d:01:3f:5c:96:83:98:6a:f5:60:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 21 13:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=244e7f695a51f84ab291ed961a797cb4b3bb8f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fb:33:6c:0e:60:2c:72:49:00:76:9f:bd:62:
d5:9c:17:8a:54:fc:4b:24:53:d6:94:5f:8f:83:4f:
30:d3:ac:84:ba:54:2b:e8:5b:b8:cd:0d:e0:db:9a:
fc:a4:74:e3:c1:1b:87:04:e9:ae:db:a0:18:04:dd:
f7:18:39:c3:c1:06:89:9f:b0:ba:0b:8a:56:97:9b:
50:85:f6:af:d6:e5:76:ac:17:f5:1e:8e:11:bb:67:
13:3a:ae:65:52:a8:8d:84:85:65:0d:04:57:92:57:
c0:ac:21:8b:7e:5d:8d:2c:10:cb:d9:48:65:4e:d7:
ce:23:0d:48:49:c2:58:1c:af:ff:cf:e4:cc:2e:7b:
6d:a4:47:ea:f8:67:35:d9:f9:f4:1e:2b:86:88:47:
56:4a:23:03:1e:c1:3f:ee:56:00:24:37:93:3e:33:
24:a7:d8:eb:16:d2:5a:e6:b1:3a:9c:c7:43:49:da:
ed:37:2f:e5:b3:0c:55:39:c2:1f:ca:18:43:92:c3:
00:7c:c6:b8:fc:7c:79:17:41:a7:53:ce:44:76:cb:
b1:62:57:bc:d2:d6:d9:d9:48:9a:c3:ac:64:ec:e8:
d3:39:3e:f2:f7:f3:9b:d3:58:bc:bf:6b:5d:52:a3:
b3:1d:7c:1c:a8:49:ed:27:82:da:60:99:ef:c5:89:
f0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4E:7F:69:5A:51:F8:4A:B2:91:ED:96:1A:79:7C:B4:B3:BB:8F:51
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JE5_aVpR-Eqyke2WGnl8tLO7j1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.149.0/24
151.241.116.0/24
Signature Algorithm: sha256WithRSAEncryption
84:9f:3b:dc:89:c2:c1:39:d5:52:6e:0f:32:ea:fd:ab:fe:4b:
bf:d6:d7:d8:11:4a:0a:03:10:7e:f6:b8:b9:03:0a:b9:b6:69:
85:de:d7:7f:90:47:a9:7e:b0:95:35:1f:52:11:8d:cb:b4:d5:
ec:46:53:2a:c1:8e:45:eb:15:f2:94:1b:89:2c:2e:09:3b:b6:
26:ca:f2:c9:61:48:65:29:15:e5:20:49:f4:cf:dd:e0:7e:7b:
0f:de:e6:0f:fb:06:e8:6b:99:70:68:a0:61:57:89:f6:c3:4f:
b8:9d:47:21:47:c7:3d:6d:76:f9:c4:fd:9e:a0:5a:ec:ad:e8:
5f:2b:b4:67:34:2f:c4:17:1a:03:ef:0e:bb:bd:3b:d1:4d:4a:
b1:cd:a7:71:51:37:b6:72:2e:b5:70:a6:ea:35:7a:6a:56:6d:
1a:8d:d4:b5:f0:97:c4:00:f9:7f:2c:b5:64:79:4f:01:7f:e6:
f1:7f:2a:c5:3d:5c:9e:43:f4:66:cf:6b:b7:fa:01:9e:09:35:
0b:c4:72:e8:67:46:3c:9d:42:a0:b9:a5:76:35:8e:3a:4d:e4:
42:dd:9b:d4:5b:29:06:6b:d6:e8:90:12:9e:93:dd:3b:a0:25:
be:de:b3:60:c1:02:d6:a9:4f:35:a7:1c:66:09:9d:4d:84:a0:
16:3b:40:cc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaDEHedZSk0BP1yWg5hq9WB5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwOTIxMTMxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDRlN2Y2OTVhNTFmODRhYjI5MWVkOTYxYTc5N2NiNGIzYmI4ZjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfszbA5gLHJJAHafvWLVnBeKVPxL
JFPWlF+Pg08w06yEulQr6Fu4zQ3g25r8pHTjwRuHBOmu26AYBN33GDnDwQaJn7C6
C4pWl5tQhfav1uV2rBf1Ho4Ru2cTOq5lUqiNhIVlDQRXklfArCGLfl2NLBDL2Uhl
TtfOIw1IScJYHK//z+TMLnttpEfq+Gc12fn0HiuGiEdWSiMDHsE/7lYAJDeTPjMk
p9jrFtJa5rE6nMdDSdrtNy/lswxVOcIfyhhDksMAfMa4/Hx5F0GnU85EdsuxYle8
0tbZ2Uiaw6xk7OjTOT7y9/Ob01i8v2tdUqOzHXwcqEntJ4LaYJnvxYnwRQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCROf2laUfhKspHtlhp5fLSzu49RMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvSkU1X2FWcFItRXF5a2UyV0dubDh0TE83ajFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/CVAwQA
l/F0MA0GCSqGSIb3DQEBCwUAA4IBAQCEnzvcicLBOdVSbg8y6v2r/ku/1tfYEUoK
AxB+9ri5Awq5tmmF3td/kEepfrCVNR9SEY3LtNXsRlMqwY5F6xXylBuJLC4JO7Ym
yvLJYUhlKRXlIEn0z93gfnsP3uYP+wboa5lwaKBhV4n2w0+4nUchR8c9bXb5xP2e
oFrsrehfK7RnNC/EFxoD7w67vTvRTUqxzadxUTe2ci61cKbqNXpqVm0ajdS18JfE
APl/LLVkeU8Bf+bxfyrFPVyeQ/Rmz2u3+gGeCTULxHLoZ0Y8nUKguaV2NY46TeRC
3ZvUWykGa9bokBKek907oCW+3rNgwQLWqU81pxxmCZ1NhKAWO0DM
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:19:00 2026 by rpki-client