Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Sh3i-mIbDRq-U4YthTosFHf6Rto.roa
File: Sh3i-mIbDRq-U4YthTosFHf6Rto.roa (raw, json)
Hash identifier: MP0t85tElbtoELIJmUETZitk/Y/qNIid93/Qfj/Ss+k=
Subject key identifier: 4A:1D:E2:FA:62:1B:0D:1A:BE:53:86:2D:85:3A:2C:14:77:FA:46:DA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F8DF511F088FBF01DA7CC828923DD0712
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Sh3i-mIbDRq-U4YthTosFHf6Rto.roa
Signing time: Thu 23 Jul 2026 07:51:16 +0000
ROA not before: Thu 23 Jul 2026 07:51:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399359
IP address blocks: 151.247.96.0/24 maxlen: 24
151.247.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:f5:11:f0:88:fb:f0:1d:a7:cc:82:89:23:dd:07:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 23 07:51:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a1de2fa621b0d1abe53862d853a2c1477fa46da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:5d:40:be:63:95:5a:14:43:46:7b:30:16:80:
5f:fa:6e:ba:42:fe:a2:ad:4f:54:a2:41:d1:bd:b3:
c8:ce:6e:3e:ef:04:36:e9:f2:73:f1:6a:bb:5b:37:
c4:c5:9c:8a:34:4e:96:e7:05:4d:73:45:af:9d:ed:
6c:7e:d9:ed:cd:2d:9e:d6:3d:2c:ea:67:48:5c:7d:
0e:bb:9e:28:7b:78:39:a5:96:58:a0:f4:8b:9e:8d:
10:9b:14:03:96:61:56:c6:83:56:96:e7:e2:24:cd:
0f:c5:9f:5b:ec:69:11:1d:93:8f:82:f1:d5:96:35:
19:f4:80:4c:8b:f2:9b:17:4e:66:13:50:31:1d:75:
c5:4d:80:85:35:e1:e3:2b:cc:91:4e:45:06:d1:25:
f1:04:9a:a7:db:8d:e8:1f:a5:50:ec:ed:93:1c:c1:
d0:0f:29:09:e5:20:1a:69:55:39:12:60:a1:aa:b2:
28:52:9c:7e:d3:ea:5c:99:a5:0e:22:32:f4:d9:eb:
16:2f:67:0b:12:88:36:49:f3:ae:fa:e4:40:46:4b:
fe:b1:57:84:73:d6:a6:d3:c9:68:53:4b:97:04:8d:
e6:f8:b6:83:01:1a:1d:af:02:e3:48:3f:08:ee:d1:
90:01:d6:6c:c2:80:d1:4c:4e:ff:5d:2d:a5:6f:78:
d8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1D:E2:FA:62:1B:0D:1A:BE:53:86:2D:85:3A:2C:14:77:FA:46:DA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Sh3i-mIbDRq-U4YthTosFHf6Rto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.96.0/24
151.247.98.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:26:ed:46:2b:01:9f:15:da:09:bc:eb:9e:23:c3:25:a2:22:
5c:1d:cd:12:39:f5:af:3f:8f:f4:08:30:4f:65:4e:cc:cf:c5:
85:77:b7:71:86:c0:0f:30:f3:21:c0:8e:eb:58:b4:97:da:ad:
5a:bb:2a:7c:24:78:d4:dc:2d:11:a8:02:7c:ac:2b:05:7f:33:
1f:7d:0a:0f:71:d5:48:0d:f7:28:69:2d:f7:27:99:af:bd:c9:
de:74:5d:5a:78:95:a6:1b:28:50:a0:50:37:09:b7:dd:13:c9:
6a:34:a0:dd:a7:96:df:f4:19:78:a8:b9:96:36:de:64:57:20:
ed:40:da:98:4a:a4:88:bb:07:84:d8:ff:23:f7:32:5d:d4:40:
58:01:6c:ec:7b:a7:ea:30:1c:5a:96:13:c3:44:cc:fd:c5:a7:
69:8c:8f:27:82:05:41:ef:b4:85:90:91:68:36:7c:a9:4d:16:
b4:c0:a3:99:a7:ad:f5:3e:d9:8d:d9:dd:c3:33:a0:4e:c1:8f:
2e:80:46:88:a0:74:1b:27:58:9f:eb:c2:aa:5f:a7:7d:37:39:
1e:a9:56:14:47:10:6a:9e:54:7d:ad:ff:86:5a:75:36:51:82:
7f:95:ac:da:c6:0c:51:2f:f1:4d:56:8d:cd:fe:97:18:8f:cb:
68:d8:20:07
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ+N9RHwiPvwHafMgokj3QcSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNzIzMDc1MTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTFkZTJmYTYyMWIwZDFhYmU1Mzg2MmQ4NTNhMmMxNDc3ZmE0NmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9l1AvmOVWhRDRnswFoBf+m66Qv6i
rU9UokHRvbPIzm4+7wQ26fJz8Wq7WzfExZyKNE6W5wVNc0Wvne1sftntzS2e1j0s
6mdIXH0Ou54oe3g5pZZYoPSLno0QmxQDlmFWxoNWlufiJM0PxZ9b7GkRHZOPgvHV
ljUZ9IBMi/KbF05mE1AxHXXFTYCFNeHjK8yRTkUG0SXxBJqn243oH6VQ7O2THMHQ
DykJ5SAaaVU5EmChqrIoUpx+0+pcmaUOIjL02esWL2cLEog2SfOu+uRARkv+sVeE
c9am08loU0uXBI3m+LaDARodrwLjSD8I7tGQAdZswoDRTE7/XS2lb3jYzwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEod4vpiGw0avlOGLYU6LBR3+kbaMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvU2gzaS1tSWJEUnEtVTRZdGhUb3NGSGY2UnRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/dgAwQA
l/diMA0GCSqGSIb3DQEBCwUAA4IBAQCNJu1GKwGfFdoJvOueI8MloiJcHc0SOfWv
P4/0CDBPZU7Mz8WFd7dxhsAPMPMhwI7rWLSX2q1auyp8JHjU3C0RqAJ8rCsFfzMf
fQoPcdVIDfcoaS33J5mvvcnedF1aeJWmGyhQoFA3CbfdE8lqNKDdp5bf9Bl4qLmW
Nt5kVyDtQNqYSqSIuweE2P8j9zJd1EBYAWzse6fqMBxalhPDRMz9xadpjI8nggVB
77SFkJFoNnypTRa0wKOZp631PtmN2d3DM6BOwY8ugEaIoHQbJ1if68KqX6d9Nzke
qVYURxBqnlR9rf+GWnU2UYJ/lazaxgxRL/FNVo3N/pcYj8to2CAH
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:32:04 2026 by rpki-client