Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SrIXxxh6LkImEX72zyCu5GtF8Pk.roa
File: SrIXxxh6LkImEX72zyCu5GtF8Pk.roa (raw, json)
Hash identifier: w3zUZOpLMji00sZJVkU/0Lp0tXhVenC3DwWk97rO5Fw=
Subject key identifier: 4A:B2:17:C7:18:7A:2E:42:26:11:7E:F6:CF:20:AE:E4:6B:45:F0:F9
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F8A0D5080EF4C678077BC5BD946A48EF8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SrIXxxh6LkImEX72zyCu5GtF8Pk.roa
Signing time: Wed 22 Jul 2026 13:39:16 +0000
ROA not before: Wed 22 Jul 2026 13:39:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 151.240.118.0/24 maxlen: 24
151.243.87.0/24 maxlen: 24
151.243.174.0/24 maxlen: 24
151.247.50.0/23 maxlen: 24
151.247.52.0/23 maxlen: 24
151.247.184.0/23 maxlen: 24
151.247.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:0d:50:80:ef:4c:67:80:77:bc:5b:d9:46:a4:8e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 22 13:39:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ab217c7187a2e4226117ef6cf20aee46b45f0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9a:2a:7c:46:80:f5:3f:4d:77:c6:71:35:0d:
64:73:fb:dd:ff:93:0d:3e:ba:7e:b0:2b:0d:19:7b:
74:1d:37:f5:52:cc:2e:f7:b8:47:62:d5:1a:b7:e8:
02:68:46:b1:90:0c:c4:e4:e9:45:b7:d8:6b:c2:f8:
f6:99:21:fa:6b:be:f4:f6:8d:f7:26:98:ed:27:84:
72:71:48:c8:62:ca:8c:3d:de:6f:fa:47:02:37:bb:
f2:a1:64:33:f4:8e:ca:70:21:5f:22:80:57:50:3e:
e8:bb:9a:55:44:d8:96:03:6e:7e:17:16:28:d4:91:
e1:c6:72:c5:ae:12:58:5d:2a:3f:cc:f0:5a:df:4f:
cc:5b:aa:84:62:e8:36:11:11:93:d7:75:43:cd:48:
43:02:12:ec:99:03:2e:62:40:89:8d:b3:86:f3:e8:
9c:e2:6c:92:ed:bf:c4:f4:ec:df:75:d0:52:d5:1e:
9d:ba:f2:0b:36:02:64:be:3e:78:84:e6:37:46:b5:
3d:31:b1:0e:93:1c:13:38:bc:84:b2:43:ca:26:02:
18:2d:d5:3b:33:41:c4:5f:72:3d:0d:a9:b3:d8:ea:
57:ed:10:72:5a:cf:d6:ca:86:c4:e2:d6:7b:6b:f2:
35:d6:a6:c5:3e:00:6b:28:56:27:73:5d:c5:b2:54:
7c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B2:17:C7:18:7A:2E:42:26:11:7E:F6:CF:20:AE:E4:6B:45:F0:F9
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SrIXxxh6LkImEX72zyCu5GtF8Pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.118.0/24
151.243.87.0/24
151.243.174.0/24
151.247.50.0-151.247.53.255
151.247.184.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:7a:a0:14:10:e1:4c:90:02:95:4e:3f:b3:40:b3:97:41:40:
4d:27:ac:67:fd:e6:40:8a:c1:a9:d3:0e:31:05:11:11:63:e6:
f4:ce:f7:48:c5:e7:51:0b:d5:b6:1c:4a:81:aa:b8:ee:12:a3:
20:f6:5b:54:7c:d5:41:3d:f1:98:13:1c:d5:b4:96:7a:33:fb:
08:f8:2a:3f:6e:f5:57:25:d3:b6:4d:4d:90:78:8d:82:90:99:
d9:bb:2e:6d:74:db:ce:d7:6c:52:a0:db:40:9a:1f:47:61:6a:
0e:95:ee:cb:5e:e7:42:80:8c:da:8b:fa:ca:bf:6d:1c:66:56:
8d:12:0a:0a:3f:6d:3c:0b:3a:db:b7:28:f5:89:18:2d:30:1d:
0b:de:91:02:05:70:8f:8e:9d:31:46:e7:94:8f:2d:33:9c:a6:
6f:0a:06:16:c8:2d:f3:9b:27:e7:e8:5d:cd:ce:c6:73:cb:27:
eb:1b:b5:7a:9c:5b:04:0f:cc:55:20:88:e8:b6:0c:07:fe:f3:
0e:66:fc:92:2b:db:53:13:63:d1:9a:33:13:e9:5b:e4:9f:b3:
43:db:ad:b6:bd:84:63:eb:5f:d4:11:27:46:94:b4:ff:e0:44:
0f:59:49:dc:30:69:3e:34:ff:1e:5f:cf:94:a2:68:89:02:92:
db:96:59:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:29 2026 by rpki-client