Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dCpTFoE0aAshKh9LWsZkFDvUH8s.roa
File: dCpTFoE0aAshKh9LWsZkFDvUH8s.roa (raw, json)
Hash identifier: 3xpd9N+o0g46rn22I0F4L8cTKZmUSGYl3mACJ0JyrcU=
Subject key identifier: 74:2A:53:16:81:34:68:0B:21:2A:1F:4B:5A:C6:64:14:3B:D4:1F:CB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0C50B06F422ECCA58AD3421F752CB237A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dCpTFoE0aAshKh9LWsZkFDvUH8s.roa
Signing time: Mon 21 Sep 2026 17:37:09 +0000
ROA not before: Mon 21 Sep 2026 17:37:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197256
IP address blocks: 151.240.148.0/24 maxlen: 24
151.247.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:0b:06:f4:22:ec:ca:58:ad:34:21:f7:52:cb:23:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 21 17:37:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=742a53168134680b212a1f4b5ac664143bd41fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d9:6f:f3:af:ec:f0:ac:1a:97:02:f7:fa:15:
69:33:e3:e3:6f:1c:4a:13:a0:96:a3:e3:48:b8:c1:
09:ff:08:10:6b:a6:82:a2:47:4a:06:28:1a:cd:21:
78:d2:60:4d:23:30:b5:4c:c5:91:93:83:73:6a:92:
78:1d:89:98:56:c1:7b:f2:cd:44:34:7a:d8:bb:de:
f1:9f:e6:05:e8:89:b2:4b:87:e2:c5:e7:91:92:f7:
98:4a:9b:d3:3b:d5:d4:9c:13:b5:cf:14:e4:bc:27:
d5:75:74:aa:c7:d3:87:90:81:05:03:da:18:72:1f:
ed:8b:ab:cf:26:0d:e2:1b:dc:9e:0c:15:7a:08:d9:
f3:35:98:33:e0:83:7f:1e:ff:cb:5b:76:bd:19:73:
b8:c8:0e:f4:d3:29:31:60:3c:33:93:9e:a9:6f:9d:
af:e8:cc:80:a1:58:74:58:53:a8:ad:c6:58:06:9a:
2c:2c:73:ba:88:bb:a2:b7:7e:be:b6:a5:b1:80:44:
5f:aa:50:86:81:a6:dd:fc:f3:f5:d4:3e:90:32:8b:
98:2b:a9:f6:a2:d3:68:e2:2f:71:42:82:01:44:b4:
00:83:b4:8b:8e:7e:ba:b9:d2:0a:70:c1:69:0c:4b:
84:c4:6f:f7:d0:29:e3:fc:61:e8:0b:2a:a7:ff:9d:
a8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2A:53:16:81:34:68:0B:21:2A:1F:4B:5A:C6:64:14:3B:D4:1F:CB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dCpTFoE0aAshKh9LWsZkFDvUH8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.148.0/24
151.247.170.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:67:15:84:1f:46:d7:1f:e2:e9:c0:97:34:a1:7f:ca:c3:a4:
33:9b:3e:41:8f:7b:37:26:9e:50:bf:bd:97:c5:5f:a3:cd:e3:
cc:27:4f:97:a6:21:4f:01:38:df:e5:59:3e:8f:46:b5:36:7b:
6a:90:bb:18:a1:80:b2:41:65:cb:23:70:17:58:44:8d:a9:f1:
11:c0:f2:f0:fb:c2:1a:27:88:37:71:59:1e:5d:74:60:7e:1b:
b2:45:b3:ef:52:9b:25:d2:5f:64:c1:de:53:d2:22:96:b8:cf:
56:c5:2c:94:fa:97:82:e4:10:c8:55:d7:bb:15:09:84:d2:3b:
6f:a5:c7:4a:8c:a0:74:02:8c:b0:ad:a8:83:3e:32:b0:dd:47:
c4:fd:8d:3e:49:0d:40:98:3a:89:91:90:d3:b4:f0:d0:c2:12:
b7:2d:6f:85:74:39:3d:6b:bb:8d:cc:51:fd:12:f2:cc:97:2b:
18:2f:64:6d:2a:16:bf:1e:f4:c3:6c:13:e1:9e:dc:3d:23:70:
b5:62:e2:7a:34:01:5a:c9:cc:30:a7:eb:de:59:d8:91:6f:98:
92:f9:b4:eb:9b:f8:cb:61:8c:a0:11:30:ce:21:63:f6:93:24:
29:22:7b:e3:f1:6e:80:03:06:f1:32:fc:28:34:7c:60:5a:d1:
19:87:7a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:28:49 2026 by rpki-client