Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bC4X2F1atJJOrMd_OJL5m_nshB8.roa
File: bC4X2F1atJJOrMd_OJL5m_nshB8.roa (raw, json)
Hash identifier: YDuyVZJ3C1ff+9nD9SBcBYXrDhgdzZZhBpAkh6gxQxY=
Subject key identifier: 6C:2E:17:D8:5D:5A:B4:92:4E:AC:C7:7F:38:92:F9:9B:F9:EC:84:1F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F4D37BC4175469E584C33FD89C706A252
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bC4X2F1atJJOrMd_OJL5m_nshB8.roa
Signing time: Fri 10 Jul 2026 18:08:46 +0000
ROA not before: Fri 10 Jul 2026 18:08:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 265919
IP address blocks: 151.242.227.0/24 maxlen: 24
151.247.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4d:37:bc:41:75:46:9e:58:4c:33:fd:89:c7:06:a2:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 10 18:08:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c2e17d85d5ab4924eacc77f3892f99bf9ec841f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:17:d8:ec:c3:86:c8:c8:36:06:ca:71:5c:c5:
0d:dd:64:4c:42:fc:df:ac:9d:dc:56:c9:f3:dc:41:
e0:8a:01:94:7c:cc:40:97:27:f2:b2:13:63:98:8b:
31:03:76:a0:c5:4b:34:65:6f:a4:b4:f2:9a:51:52:
1c:65:1c:99:25:14:3e:af:f2:2f:5f:1e:b6:d8:3e:
f3:e0:4c:9e:bd:9c:28:4c:2a:71:c1:97:8e:97:00:
5d:f2:e9:3f:41:74:93:b4:20:fb:3d:a2:bb:56:46:
ac:6a:68:16:a3:04:80:4a:4d:5c:1f:03:58:2c:68:
b9:3c:28:64:35:ce:be:bc:f2:aa:ec:7b:ba:f5:b9:
fb:74:72:37:d6:cf:36:12:e8:5a:c0:93:84:e1:60:
84:7d:32:91:c9:6b:7e:1f:11:1b:e9:83:3c:55:d5:
62:77:28:76:c1:89:8e:04:3c:7e:df:20:1e:16:d3:
6e:82:f6:a6:35:71:33:fc:3f:f6:7f:cb:fa:ab:d6:
03:81:76:c4:3c:63:a5:77:fb:9f:22:c8:71:41:e4:
d6:c1:f4:9c:ca:b7:09:ab:0f:f5:c4:f1:d2:4e:36:
4b:c4:74:ba:7f:4e:a5:32:ce:8c:20:40:e2:12:76:
13:2d:f7:27:f1:a1:ee:bf:1b:bc:d3:10:fc:37:39:
f4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2E:17:D8:5D:5A:B4:92:4E:AC:C7:7F:38:92:F9:9B:F9:EC:84:1F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bC4X2F1atJJOrMd_OJL5m_nshB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.227.0/24
151.247.155.0/24
Signature Algorithm: sha256WithRSAEncryption
31:5e:73:91:3a:19:a6:b7:ea:50:e7:32:d3:5a:bc:3f:72:83:
d3:9f:9a:a4:c0:39:c7:d6:5a:5b:7d:16:5f:f2:ca:af:91:15:
53:43:ab:df:f4:2f:38:af:65:53:ec:7f:ce:eb:74:94:2c:21:
ef:01:89:18:b7:02:0c:94:3e:05:19:42:89:37:8d:17:77:ce:
65:23:fd:6e:ef:4c:14:d1:7c:d8:1e:18:91:8a:d5:86:0f:85:
a4:d3:e7:61:eb:1b:75:06:bd:2e:6a:c0:a3:63:c2:26:1f:6e:
b8:90:60:27:cc:25:df:85:b5:ca:94:61:59:d9:7e:6c:52:ff:
82:f9:88:2c:82:ef:10:f7:d9:fd:47:71:f3:cd:15:c7:78:9f:
91:c0:61:c8:b2:52:fd:6f:73:04:ee:62:a7:2b:2d:4e:aa:e1:
34:c0:81:6e:bc:4c:30:c1:26:24:42:85:fb:4e:37:64:da:bd:
77:d6:c4:26:27:84:f2:7d:a0:58:8d:fb:a0:d4:65:32:3b:9d:
f0:92:79:24:98:75:68:74:40:05:46:c4:1c:d1:42:7f:02:c8:
1d:9e:ef:73:ea:46:a2:39:d3:15:1a:2a:96:70:24:69:07:35:
bb:29:70:3d:63:03:4d:b1:1e:df:d4:d1:79:a8:91:61:6c:54:
16:96:a9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:27 2026 by rpki-client