Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QhA9fvqkfu9P9sNyzreY8UNk-eY.roa
File: QhA9fvqkfu9P9sNyzreY8UNk-eY.roa (raw, json)
Hash identifier: 29lRoEybftHJgEdbwf1OAZQYMG8qQOVp7Dwn2AkZx7Q=
Subject key identifier: 42:10:3D:7E:FA:A4:7E:EF:4F:F6:C3:72:CE:B7:98:F1:43:64:F9:E6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DD22E60F0DEF50B7FF1F26184773DFEB9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QhA9fvqkfu9P9sNyzreY8UNk-eY.roa
Signing time: Tue 28 Apr 2026 03:42:27 +0000
ROA not before: Tue 28 Apr 2026 03:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 151.242.143.0/24 maxlen: 24
151.243.178.0/23 maxlen: 24
151.247.137.0/24 maxlen: 24
151.247.161.0/24 maxlen: 24
151.247.165.0/24 maxlen: 24
151.247.177.0/24 maxlen: 24
151.247.182.0/23 maxlen: 24
151.247.250.0/24 maxlen: 24
151.247.253.0/24 maxlen: 24
151.247.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d2:2e:60:f0:de:f5:0b:7f:f1:f2:61:84:77:3d:fe:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 28 03:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42103d7efaa47eef4ff6c372ceb798f14364f9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:c0:f4:96:72:03:bb:25:61:49:d7:c9:e5:
f6:bb:39:fb:74:a1:69:63:39:4f:64:8c:a6:c8:d2:
26:cb:33:12:6b:f0:d4:39:ff:1e:90:0b:e1:08:e1:
d7:4b:0a:a3:44:f2:6e:8f:f0:07:99:37:b1:26:f7:
8f:62:ea:75:41:2c:cc:21:ba:cf:b1:06:e5:98:d4:
cc:e1:e6:fe:9d:36:72:21:e7:da:74:de:8a:1d:f9:
85:aa:fb:0c:e4:5a:e1:8d:56:ef:3f:33:68:a3:d6:
c8:4e:a3:de:8d:42:4a:ab:d4:e6:39:ba:f1:2c:b9:
a4:5f:20:1e:ba:92:47:5e:cb:92:d2:42:c8:00:85:
e9:3f:44:a9:e1:46:ea:18:1e:f3:8a:33:fd:fe:7f:
cb:89:ef:e9:24:fe:70:88:a6:cd:a9:ef:82:fa:84:
0b:63:5b:52:2d:ed:e6:bd:93:2c:47:10:f4:64:06:
9a:1c:f8:ee:cf:35:0e:49:29:0d:14:30:ba:f7:93:
9f:c5:51:8d:f7:bb:63:07:53:aa:68:12:a2:f1:fc:
be:54:f7:4d:2e:62:d8:83:c0:f9:c2:7d:1d:1e:e4:
34:4b:06:4a:47:2b:18:17:8c:bd:3c:78:b0:fc:e7:
85:39:34:ef:4b:0f:47:d0:a6:ce:8e:a1:a9:3c:1a:
73:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:10:3D:7E:FA:A4:7E:EF:4F:F6:C3:72:CE:B7:98:F1:43:64:F9:E6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QhA9fvqkfu9P9sNyzreY8UNk-eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.143.0/24
151.243.178.0/23
151.247.137.0/24
151.247.161.0/24
151.247.165.0/24
151.247.177.0/24
151.247.182.0/23
151.247.250.0/24
151.247.253.0-151.247.254.255
Signature Algorithm: sha256WithRSAEncryption
1a:ba:33:85:1b:de:83:74:0c:cb:57:6b:38:e8:90:cb:a1:0d:
b6:0e:8b:d8:3c:69:b5:6b:ea:9b:00:f5:60:d4:fb:56:cb:b0:
8e:3c:fc:6d:64:61:cc:dc:f2:e0:a1:1b:3d:ba:33:d9:5a:47:
52:df:1a:0d:3c:ee:ef:b4:50:42:d4:c3:df:31:83:04:91:2b:
04:71:2a:72:c1:5f:42:ec:35:f0:f6:09:53:5c:ec:b1:b0:53:
49:3e:54:e7:5f:43:be:13:e7:23:e2:dd:f0:3f:f0:f8:97:11:
2e:de:ab:d6:b9:6d:04:95:7f:ba:31:28:35:8e:d3:cb:ea:1f:
7a:51:41:41:ac:36:95:b6:e1:39:24:51:cb:a0:19:86:c4:16:
22:96:27:9c:dc:97:7c:b4:80:47:74:d4:89:15:6f:5b:ab:22:
d3:ce:31:94:22:3f:30:9c:43:55:50:40:a8:8f:63:43:1b:3e:
fb:76:07:45:90:3a:b5:75:42:18:68:25:b9:83:f0:f7:6b:29:
e1:bf:07:4d:85:96:92:e4:89:2d:29:ea:56:ac:25:70:95:27:
fb:42:46:e8:e7:1b:64:51:71:31:0c:17:4b:f9:f5:52:8c:0b:
e9:49:5b:18:86:f8:37:4e:be:59:91:87:7b:d5:12:94:23:85:
90:1b:46:eb
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAZ3SLmDw3vULf/HyYYR3Pf65MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNDI4MDM0MjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjEwM2Q3ZWZhYTQ3ZWVmNGZmNmMzNzJjZWI3OThmMTQzNjRmOWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxk7A9JZyA7slYUnXyeX2uzn7dKFp
YzlPZIymyNImyzMSa/DUOf8ekAvhCOHXSwqjRPJuj/AHmTexJvePYup1QSzMIbrP
sQblmNTM4eb+nTZyIefadN6KHfmFqvsM5FrhjVbvPzNoo9bITqPejUJKq9TmObrx
LLmkXyAeupJHXsuS0kLIAIXpP0Sp4UbqGB7zijP9/n/Lie/pJP5wiKbNqe+C+oQL
Y1tSLe3mvZMsRxD0ZAaaHPjuzzUOSSkNFDC695OfxVGN97tjB1OqaBKi8fy+VPdN
LmLYg8D5wn0dHuQ0SwZKRysYF4y9PHiw/OeFOTTvSw9H0KbOjqGpPBpzBQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFEIQPX76pH7vT/bDcs63mPFDZPnmMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvUWhBOWZ2cWtmdTlQOXNOeXpyZVk4VU5rLWVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAl/KPAwQB
l/OyAwQAl/eJAwQAl/ehAwQAl/elAwQAl/exAwQBl/e2AwQAl/f6MAwDBACX9/0D
BACX9/4wDQYJKoZIhvcNAQELBQADggEBABq6M4Ub3oN0DMtXazjokMuhDbYOi9g8
abVr6psA9WDU+1bLsI48/G1kYczc8uChGz26M9laR1LfGg087u+0UELUw98xgwSR
KwRxKnLBX0LsNfD2CVNc7LGwU0k+VOdfQ74T5yPi3fA/8PiXES7eq9a5bQSVf7ox
KDWO08vqH3pRQUGsNpW24TkkUcugGYbEFiKWJ5zcl3y0gEd01IkVb1urItPOMZQi
PzCcQ1VQQKiPY0MbPvt2B0WQOrV1QhhoJbmD8PdrKeG/B02FlpLkiS0p6lasJXCV
J/tCRujnG2RRcTEMF0v59VKMC+lJWxiG+DdOvlmRh3vVEpQjhZAbRus=
-----END CERTIFICATE-----
Generated at Wed May 13 05:36:27 2026 by rpki-client