Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TyPB08IXEbgK4_sg3FFy4TnY5WE.roa
File: TyPB08IXEbgK4_sg3FFy4TnY5WE.roa (raw, json)
Hash identifier: J8zm3+HBqJRBZCxq9gKQyIHmGaghPzu55XWH4lH0mmE=
Subject key identifier: 4F:23:C1:D3:C2:17:11:B8:0A:E3:FB:20:DC:51:72:E1:39:D8:E5:61
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F622CB706F14956F8753203B07E0A4195
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TyPB08IXEbgK4_sg3FFy4TnY5WE.roa
Signing time: Tue 14 Jul 2026 19:48:45 +0000
ROA not before: Tue 14 Jul 2026 19:48:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 273478
IP address blocks: 151.240.161.0/24 maxlen: 24
151.242.117.0/24 maxlen: 24
151.242.201.0/24 maxlen: 24
151.244.241.0/24 maxlen: 24
151.244.245.0/24 maxlen: 24
151.245.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:62:2c:b7:06:f1:49:56:f8:75:32:03:b0:7e:0a:41:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 14 19:48:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f23c1d3c21711b80ae3fb20dc5172e139d8e561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:02:b4:1f:d9:1d:5a:71:44:da:4e:af:8f:
03:01:17:47:99:08:26:8a:86:07:96:7e:9b:52:ae:
b8:15:f5:d2:3f:11:f9:24:49:0a:24:d4:b6:d4:db:
65:d7:52:a9:5a:c9:c8:c3:f7:27:36:f6:1e:d9:08:
d6:d7:7a:27:96:01:90:da:67:25:57:a5:f2:f6:f0:
50:fc:a4:fe:2f:ca:85:8a:e6:2a:27:8a:b5:19:6e:
45:e1:f3:5e:85:91:95:88:00:24:84:2b:79:1b:bc:
6c:06:81:e2:12:d5:f9:34:78:9a:e8:a7:7b:c8:8b:
16:5e:22:45:51:e1:b3:c3:a6:59:03:5a:20:60:fd:
22:ed:0d:a8:77:0e:c5:16:56:36:a9:3f:24:cc:9c:
28:40:d9:d6:e5:fe:10:5b:2b:90:2a:08:eb:d2:04:
63:a3:51:95:6e:2c:85:f9:d1:b9:ac:f1:44:a3:d1:
e4:6e:e3:41:f4:66:b9:c6:63:93:e2:6f:eb:5e:55:
86:34:48:d4:43:0a:f9:b8:51:e9:ca:27:37:68:58:
be:b2:d1:c1:c6:d0:21:ed:cf:9d:66:83:b8:11:ee:
91:bf:78:30:4e:ce:2a:f9:9c:87:ad:c2:e2:e9:f7:
d8:93:06:64:5f:69:b1:8a:44:76:5c:f6:8d:8c:1b:
f3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:23:C1:D3:C2:17:11:B8:0A:E3:FB:20:DC:51:72:E1:39:D8:E5:61
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TyPB08IXEbgK4_sg3FFy4TnY5WE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.161.0/24
151.242.117.0/24
151.242.201.0/24
151.244.241.0/24
151.244.245.0/24
151.245.242.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:ef:65:51:c9:e7:d4:b2:55:99:56:ff:26:32:00:ac:ea:a6:
51:4d:c8:c8:30:e2:2b:54:05:df:5b:34:5d:04:4a:88:f3:7f:
f0:11:93:9b:59:5c:74:b4:ce:0f:2a:93:8c:1e:45:fe:54:6a:
ec:17:05:08:bf:6e:34:bd:de:9d:7d:cf:9a:d0:b6:03:29:8b:
0a:1c:99:6c:8b:31:e2:1f:16:d2:1e:bc:b7:85:5e:6c:c6:fd:
ee:7c:d0:25:fd:92:7c:68:b4:66:06:17:aa:60:51:93:c0:3b:
f1:71:bf:83:53:8b:63:a4:81:c0:1a:8f:a3:44:c7:c2:06:63:
69:53:c7:05:52:c0:d9:e1:0a:65:bc:f0:24:5a:68:6d:37:68:
cb:bd:3b:ac:96:e4:fa:cc:2c:24:75:cd:29:7e:8c:31:73:92:
86:19:eb:64:08:67:9a:27:f9:48:7e:ef:54:7b:fc:2a:53:0f:
b1:77:75:28:7d:54:32:e2:e8:8a:d1:3d:83:5e:f9:c4:a8:5d:
57:d7:3a:f8:00:1d:5b:37:1f:2d:72:8b:7d:7e:0d:e4:4b:98:
a9:59:62:2c:c7:0a:dc:e2:7a:fd:9f:b2:9f:a5:78:e6:1e:06:
16:a3:cb:b8:f2:d9:f9:71:dc:7a:a1:1b:63:61:00:7b:f0:0c:
d7:b9:0c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:33:08 2026 by rpki-client