Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/L50StYETOE_CWHtTv0CpzYLNMLg.roa
File: L50StYETOE_CWHtTv0CpzYLNMLg.roa (raw, json)
Hash identifier: OBTN/cagnyU7woCHJZWI976kiOO6on6kmStQGfhpmy4=
Subject key identifier: 2F:9D:12:B5:81:13:38:4F:C2:58:7B:53:BF:40:A9:CD:82:CD:30:B8
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0C489EF5A741D31FC1636F182FF866AA9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/L50StYETOE_CWHtTv0CpzYLNMLg.roa
Signing time: Mon 21 Sep 2026 15:16:08 +0000
ROA not before: Mon 21 Sep 2026 15:16:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7346
IP address blocks: 151.246.7.0/24 maxlen: 24
151.246.183.0/24 maxlen: 24
151.247.113.0/24 maxlen: 24
151.247.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:89:ef:5a:74:1d:31:fc:16:36:f1:82:ff:86:6a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 21 15:16:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f9d12b58113384fc2587b53bf40a9cd82cd30b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:de:10:a7:ab:36:4e:dd:38:84:0c:34:3c:83:
37:ea:a0:8f:eb:54:d3:1b:23:df:cc:93:95:23:c2:
d4:24:f3:bc:06:16:29:b4:64:37:26:87:b8:d5:a1:
19:8c:19:e9:66:e0:8f:5c:3f:97:9a:05:75:34:1d:
32:56:dc:7f:ba:ee:e1:a3:59:78:6b:fc:db:46:35:
8f:87:e8:30:1e:11:28:52:21:c6:85:bf:46:e0:83:
f7:ab:29:dc:d7:45:29:56:9d:88:96:c0:fe:35:50:
ad:88:b1:1d:ab:7e:1d:b0:8c:61:8b:b5:33:38:ab:
77:ed:db:f5:73:6f:c4:a7:01:0c:17:04:b6:0a:2b:
ae:81:57:85:02:40:67:27:6f:62:9b:55:b6:0e:c3:
6c:99:b3:4d:35:f2:ef:1b:82:09:13:16:78:09:e2:
64:7b:58:e7:21:3a:6f:9c:5e:c1:d7:b0:51:17:a6:
c7:e6:49:05:55:43:f7:86:d4:2b:c4:5c:14:86:23:
a2:74:f5:80:74:80:49:64:1e:fd:31:c6:a8:d2:d7:
6e:37:bc:42:3b:62:ca:c7:0f:8c:09:28:ac:01:47:
37:ac:63:5f:69:f2:9a:c4:ac:fe:21:61:67:a1:7b:
cb:c5:dd:7c:25:08:b2:50:81:e2:29:ca:89:e6:62:
eb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9D:12:B5:81:13:38:4F:C2:58:7B:53:BF:40:A9:CD:82:CD:30:B8
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/L50StYETOE_CWHtTv0CpzYLNMLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.7.0/24
151.246.183.0/24
151.247.113.0-151.247.114.255
Signature Algorithm: sha256WithRSAEncryption
2d:47:31:8b:69:e4:df:fe:3d:5f:7f:bf:24:48:42:53:fb:4a:
4c:00:7f:06:0c:ad:c9:c7:fb:e9:49:e0:03:c9:34:b8:0f:b0:
bc:c7:54:b6:ac:09:c8:6a:8f:77:b0:13:7d:36:8a:81:2e:6f:
3f:c9:e6:f8:50:17:0a:69:a5:43:d7:fc:99:05:95:ca:6a:44:
7c:df:e0:ec:2c:f7:cf:2f:19:9e:04:91:2a:79:a9:63:7b:77:
41:98:48:a5:a0:a3:53:3a:58:ac:9c:ed:ad:21:ac:a0:ef:5f:
cf:87:0a:43:07:9e:39:8c:9a:5f:ab:d0:11:4d:8d:ed:cc:25:
0f:61:ff:a9:62:d6:ec:d2:1d:37:02:c4:da:a4:69:03:d6:f0:
87:db:48:f0:e6:30:75:e6:26:93:61:ac:96:fe:3b:4b:c6:21:
ee:5f:fe:6d:94:12:71:0e:b2:c5:99:60:bd:f9:cd:d2:99:45:
52:63:c4:8b:1d:d6:01:e2:6f:a7:9b:cb:17:4d:9f:c8:d2:8d:
d0:f6:cf:ef:64:72:e7:99:5d:10:c6:65:c3:16:95:4a:51:5d:
4a:b2:d8:e6:90:6c:fe:c0:9c:00:a4:9b:9c:a6:69:ad:37:08:
9f:24:a1:fe:ba:c5:79:80:51:23:a9:8b:60:6e:3d:c6:04:3e:
8d:59:2b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:40:30 2026 by rpki-client