Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/e3xKwhvkZ1EjKHZfL7QNwrsCXsY.roa
File: e3xKwhvkZ1EjKHZfL7QNwrsCXsY.roa (raw, json)
Hash identifier: ow/IICSBgjryCFrR1naestRlmWtMGYs9wSEUbs5rYYo=
Subject key identifier: 7B:7C:4A:C2:1B:E4:67:51:23:28:76:5F:2F:B4:0D:C2:BB:02:5E:C6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F1CA1602E557FB3A04999501E3389458E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/e3xKwhvkZ1EjKHZfL7QNwrsCXsY.roa
Signing time: Wed 01 Jul 2026 07:42:45 +0000
ROA not before: Wed 01 Jul 2026 07:42:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 151.241.109.0/24 maxlen: 24
151.241.155.0/24 maxlen: 24
151.241.215.0/24 maxlen: 24
151.241.216.0/24 maxlen: 24
151.241.217.0/24 maxlen: 24
151.241.221.0/24 maxlen: 24
151.241.226.0/24 maxlen: 24
151.241.227.0/24 maxlen: 24
151.241.228.0/24 maxlen: 24
151.241.229.0/24 maxlen: 24
151.241.234.0/24 maxlen: 24
151.242.88.0/24 maxlen: 24
151.243.3.0/24 maxlen: 24
151.243.145.0/24 maxlen: 24
151.243.169.0/24 maxlen: 24
151.243.171.0/24 maxlen: 24
151.243.173.0/24 maxlen: 24
151.243.176.0/24 maxlen: 24
151.243.177.0/24 maxlen: 24
151.243.180.0/24 maxlen: 24
151.243.181.0/24 maxlen: 24
151.243.182.0/24 maxlen: 24
151.243.190.0/24 maxlen: 24
151.243.191.0/24 maxlen: 24
151.243.196.0/24 maxlen: 24
151.243.198.0/23 maxlen: 24
151.243.198.0/24 maxlen: 24
151.243.199.0/24 maxlen: 24
151.243.208.0/24 maxlen: 24
151.243.209.0/24 maxlen: 24
151.243.212.0/24 maxlen: 24
151.243.217.0/24 maxlen: 24
151.243.224.0/24 maxlen: 24
151.243.225.0/24 maxlen: 24
151.243.232.0/24 maxlen: 24
151.243.245.0/24 maxlen: 24
151.243.247.0/24 maxlen: 24
151.244.243.0/24 maxlen: 24
151.244.246.0/24 maxlen: 24
151.244.251.0/24 maxlen: 24
151.244.253.0/24 maxlen: 24
151.245.92.0/24 maxlen: 24
151.245.136.0/24 maxlen: 24
151.245.137.0/24 maxlen: 24
151.245.139.0/24 maxlen: 24
151.245.140.0/24 maxlen: 24
151.245.216.0/24 maxlen: 24
151.245.217.0/24 maxlen: 24
151.245.218.0/23 maxlen: 24
151.247.196.0/24 maxlen: 24
151.247.197.0/24 maxlen: 24
151.247.208.0/24 maxlen: 24
151.247.209.0/24 maxlen: 24
151.247.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:a1:60:2e:55:7f:b3:a0:49:99:50:1e:33:89:45:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 1 07:42:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b7c4ac21be467512328765f2fb40dc2bb025ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:10:cb:5f:04:91:8d:4d:03:91:09:2b:35:
9e:6d:04:ca:95:42:67:61:6c:18:e3:02:35:0c:65:
04:5f:42:dc:e2:1b:5a:68:eb:f2:5c:10:9c:14:91:
0e:9b:ce:75:60:64:9e:07:66:78:55:b8:3c:31:af:
e8:01:5c:db:ec:9c:a5:5e:e1:24:43:9e:13:dc:0e:
b1:11:7d:7c:31:b4:ee:9d:1b:d7:91:b4:d9:0d:79:
fb:0d:dc:97:3c:8f:7f:92:56:7c:40:d3:91:7c:f9:
dd:c1:90:d0:f4:95:a3:21:b0:dd:ff:c2:fe:d0:32:
eb:d2:5d:e1:fe:1c:ab:9b:52:f3:19:e1:88:01:e8:
26:b2:12:02:7f:ca:83:be:b1:15:f3:4f:c8:1f:42:
d0:e4:7a:3f:0e:90:9d:24:cf:8a:85:b2:76:77:4e:
93:73:b3:df:8c:00:20:61:9f:f4:e9:f7:82:f9:16:
13:3a:00:93:e5:18:f8:88:a0:fd:ed:d2:4c:3a:e7:
89:dd:70:8a:73:46:41:e3:fe:a0:26:93:1c:08:17:
ef:ff:70:99:8c:2e:e9:83:22:b7:60:70:47:70:eb:
40:2c:11:f2:e6:5d:29:83:f0:c4:3e:51:d1:1d:be:
a1:00:69:52:42:ab:02:a6:5e:52:5b:70:72:5c:c9:
af:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7C:4A:C2:1B:E4:67:51:23:28:76:5F:2F:B4:0D:C2:BB:02:5E:C6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/e3xKwhvkZ1EjKHZfL7QNwrsCXsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.109.0/24
151.241.155.0/24
151.241.215.0-151.241.217.255
151.241.221.0/24
151.241.226.0-151.241.229.255
151.241.234.0/24
151.242.88.0/24
151.243.3.0/24
151.243.145.0/24
151.243.169.0/24
151.243.171.0/24
151.243.173.0/24
151.243.176.0/23
151.243.180.0-151.243.182.255
151.243.190.0/23
151.243.196.0/24
151.243.198.0/23
151.243.208.0/23
151.243.212.0/24
151.243.217.0/24
151.243.224.0/23
151.243.232.0/24
151.243.245.0/24
151.243.247.0/24
151.244.243.0/24
151.244.246.0/24
151.244.251.0/24
151.244.253.0/24
151.245.92.0/24
151.245.136.0/23
151.245.139.0-151.245.140.255
151.245.216.0/22
151.247.196.0/23
151.247.208.0/23
151.247.219.0/24
Signature Algorithm: sha256WithRSAEncryption
90:e9:b9:84:b8:24:4f:15:b6:a7:1c:bf:d2:cf:88:6f:fa:ed:
a5:6f:52:cb:43:0c:16:ab:3d:53:94:89:ee:3b:00:8d:a2:eb:
1b:7b:81:68:62:f8:e0:d4:f0:54:ca:4b:9d:59:36:2c:f3:d6:
39:31:8b:55:83:03:5e:d4:81:9d:f9:cb:df:c5:b2:71:bb:ed:
4f:8c:3e:d6:eb:a4:a6:1a:b0:dc:31:1c:72:25:65:c9:d2:8a:
fd:37:11:b7:35:be:07:1a:c7:5a:4b:4a:cc:d9:74:71:d8:4f:
40:6c:f8:63:96:4f:7e:40:54:88:6b:82:18:ea:8e:d4:9a:c6:
5c:ad:d8:cd:6a:62:a5:98:23:d5:e2:52:73:7c:87:6d:54:76:
14:19:ca:2e:c3:e4:db:af:eb:53:cd:cb:5d:76:91:f5:cf:8a:
d8:28:3b:87:84:90:8c:e6:a9:27:67:f8:01:fa:7f:07:38:70:
65:c7:c3:02:9d:69:56:53:ec:51:a2:b1:f5:e4:3c:31:e0:23:
7e:99:5e:98:36:fe:5f:ea:82:9e:94:c0:15:88:50:b2:73:3d:
b4:64:4a:34:21:93:bb:7f:0e:b8:a1:ca:5a:79:ec:b7:f0:a8:
57:dc:28:8b:d0:d3:3e:e9:30:63:e4:4d:cb:a2:5d:b7:0f:7e:
6a:b3:1c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:48:16 2026 by rpki-client