Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Tos4NdiLyu05WuXy5ELPkS1LmBI.roa
File: Tos4NdiLyu05WuXy5ELPkS1LmBI.roa (raw, json)
Hash identifier: kpq65VoBO6JvfuiNpQr+IHrmn1UfTJEcAnY0YLSsT5E=
Subject key identifier: 4E:8B:38:35:D8:8B:CA:ED:39:5A:E5:F2:E4:42:CF:91:2D:4B:98:12
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F60285AE28E5FEF83DB2B2FFA11E42F3B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Tos4NdiLyu05WuXy5ELPkS1LmBI.roa
Signing time: Tue 14 Jul 2026 10:24:45 +0000
ROA not before: Tue 14 Jul 2026 10:24:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 273508
IP address blocks: 151.242.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:28:5a:e2:8e:5f:ef:83:db:2b:2f:fa:11:e4:2f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 14 10:24:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e8b3835d88bcaed395ae5f2e442cf912d4b9812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c1:b4:44:cb:91:ba:5e:4e:78:9f:94:5c:90:
db:bc:1c:9d:7d:e2:c1:0b:f6:0e:80:a4:96:d7:5d:
4b:9e:22:a7:71:3b:ff:a1:59:86:6c:ac:25:79:45:
cb:3a:31:2c:e4:4f:41:d1:ef:79:45:6e:c7:20:d5:
d9:7a:f9:92:63:88:af:ac:c5:af:6c:07:0e:23:6e:
81:9a:23:3c:f6:2f:0b:50:ca:f2:f3:48:7f:e7:a3:
a1:35:1e:b7:39:62:82:9c:ec:5e:25:e9:80:81:ca:
fd:ab:c9:fd:f5:55:ae:2a:4b:19:07:c4:30:5a:7b:
3e:dc:a1:43:32:44:07:e3:a5:90:92:63:73:81:2a:
89:a8:2e:86:a7:a5:67:bc:b1:9b:c2:e8:ad:14:ed:
cf:ad:f6:51:12:0e:36:a4:03:54:ea:d3:20:ad:b7:
5c:64:2e:7a:aa:3f:ab:c9:e6:ff:e2:e6:04:70:b5:
a9:9e:b9:6b:b7:7e:46:a7:a0:66:9b:f3:56:b1:4a:
29:9a:9c:0d:67:3d:6b:aa:18:fc:2d:0c:7b:80:9c:
5f:c9:28:a8:a4:99:27:9d:2d:9b:13:a4:ba:90:bb:
ff:15:5b:ac:f7:c3:f4:64:ec:db:dd:62:3c:5b:37:
64:0c:29:e0:12:a6:1a:b7:ca:81:28:23:07:88:d9:
b3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8B:38:35:D8:8B:CA:ED:39:5A:E5:F2:E4:42:CF:91:2D:4B:98:12
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Tos4NdiLyu05WuXy5ELPkS1LmBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.140.0/24
Signature Algorithm: sha256WithRSAEncryption
65:b2:a5:f8:77:9b:f2:36:88:b4:4f:03:ef:fe:70:d7:c3:ce:
8a:0b:cb:28:47:20:32:b0:c4:6b:b7:dd:de:a4:63:a0:d0:eb:
f7:61:48:1c:29:ed:6f:ca:bc:fb:9d:04:ae:e0:ce:95:fc:5c:
74:40:0c:29:77:0e:63:e6:8c:7c:de:1e:0f:80:8c:2f:20:8f:
2b:fc:26:d0:b0:a1:40:16:92:85:01:5b:d1:d8:10:70:ef:43:
2a:fe:b2:ac:1b:1d:12:57:b3:61:70:ca:db:fa:cd:68:87:64:
1b:ff:92:67:ae:14:bc:ec:8e:1b:4b:aa:d1:fe:78:15:14:46:
27:25:f0:55:99:a1:2a:e6:fc:48:9b:7e:c6:1c:61:e9:15:b0:
a1:4d:db:26:70:11:47:f5:b9:4a:52:5d:f7:cd:14:00:55:18:
de:7c:4f:0c:d9:f1:d7:46:e1:65:b0:68:6c:cc:e7:fa:e5:b2:
51:74:bb:b2:25:38:d0:85:49:97:4e:4c:67:26:88:7c:57:19:
f3:7b:45:4b:f3:66:d6:dd:18:1d:bf:6d:0c:29:30:df:49:12:
9d:1c:6e:2c:27:70:76:cf:fe:4f:65:ab:49:eb:40:fd:64:5e:
22:0d:f3:14:76:c1:15:39:c2:4c:9c:ae:b6:02:a7:5a:de:36:
f5:73:16:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:50:36 2026 by rpki-client