Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fp2KKnTupE3I8MVBjA2fdQkxvnM.roa
File: fp2KKnTupE3I8MVBjA2fdQkxvnM.roa (raw, json)
Hash identifier: xaeLtB5KcpiUeNyjfF35wUxDx3xFIakuNUKvDOTzix4=
Subject key identifier: 7E:9D:8A:2A:74:EE:A4:4D:C8:F0:C5:41:8C:0D:9F:75:09:31:BE:73
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A1AC97141A8E7A84738A152A02C616ECC4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fp2KKnTupE3I8MVBjA2fdQkxvnM.roa
Signing time: Thu 05 Nov 2026 16:42:24 +0000
ROA not before: Thu 05 Nov 2026 16:42:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 37.202.194.0/24 maxlen: 24
151.240.227.0/24 maxlen: 24
151.241.207.0/24 maxlen: 24
151.242.105.0/24 maxlen: 24
151.243.7.0/24 maxlen: 24
151.243.152.0/24 maxlen: 24
151.243.154.0/24 maxlen: 24
151.243.197.0/24 maxlen: 24
151.243.228.0/24 maxlen: 24
151.243.231.0/24 maxlen: 24
151.244.54.0/24 maxlen: 24
151.244.167.0/24 maxlen: 24
151.244.180.0/24 maxlen: 24
151.244.224.0/24 maxlen: 24
151.247.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ac:97:14:1a:8e:7a:84:73:8a:15:2a:02:c6:16:ec:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 5 16:42:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e9d8a2a74eea44dc8f0c5418c0d9f750931be73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:83:13:13:8c:a1:f3:bf:79:81:19:44:b5:c0:
c3:cb:41:95:4d:33:7d:12:6c:b5:10:71:51:5c:7a:
a6:3e:88:d9:63:f3:5d:e4:6d:a2:e6:f3:cc:99:14:
8f:ad:2b:90:80:56:89:b5:ba:bf:9d:ca:2a:27:43:
37:dd:68:03:c1:ba:d2:b6:1b:33:88:42:38:77:14:
fe:b7:d6:89:21:36:66:87:f5:1c:93:5f:78:bc:04:
7a:04:c7:d4:1e:ce:f6:f4:62:9c:e0:7e:a8:e8:ff:
96:94:f6:b5:8d:35:09:41:d8:cc:a5:a1:1a:94:fa:
6b:50:22:76:b4:1b:fc:df:9b:37:33:3b:44:2b:01:
ee:93:2b:58:73:b2:26:cb:01:e2:c5:a7:b4:47:df:
a0:31:b9:88:41:3f:53:4a:a3:55:ce:4c:79:80:f8:
2e:32:9d:ab:37:12:8c:5e:57:be:4d:40:6c:f2:14:
8c:91:80:81:c7:80:55:b1:94:d4:5f:c7:a3:2a:a0:
cd:fe:06:41:f6:cf:a2:c2:69:6f:8e:19:2e:0b:8b:
79:69:70:03:32:b7:8a:db:f5:45:92:77:e5:1e:a8:
17:4f:56:43:81:09:0b:8f:95:44:b2:fc:bc:e8:71:
24:ff:60:d2:e7:2e:aa:e9:97:c3:f4:84:5b:b7:dd:
4b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9D:8A:2A:74:EE:A4:4D:C8:F0:C5:41:8C:0D:9F:75:09:31:BE:73
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fp2KKnTupE3I8MVBjA2fdQkxvnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.194.0/24
151.240.227.0/24
151.241.207.0/24
151.242.105.0/24
151.243.7.0/24
151.243.152.0/24
151.243.154.0/24
151.243.197.0/24
151.243.228.0/24
151.243.231.0/24
151.244.54.0/24
151.244.167.0/24
151.244.180.0/24
151.244.224.0/24
151.247.54.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:53:e7:3c:0e:c0:67:1c:d0:cc:5b:ef:59:c5:8c:9d:63:66:
3e:4d:13:3c:85:aa:03:01:53:8c:0e:85:28:79:66:f6:d6:2e:
6b:3e:cc:28:3d:52:48:30:cc:44:fe:2b:bb:5f:5e:50:c3:59:
1b:34:b0:fc:e2:e2:01:26:4c:c5:b5:30:b0:3a:84:b4:6b:5e:
4c:f3:e9:e4:98:8b:78:03:2b:3d:6e:72:97:ea:62:b6:c7:b8:
7f:26:62:f8:d7:9a:b8:ae:a2:e1:bd:9c:a2:ca:43:91:60:e7:
ff:97:e1:34:1d:96:b9:9b:4b:9c:0c:2d:0a:fb:37:dc:fd:22:
66:03:6a:d5:05:8c:0d:72:62:41:f6:ec:cc:85:7b:8e:ea:56:
68:6f:c2:bb:b4:f2:6a:ab:e2:22:d6:59:ff:63:33:f6:0f:a3:
1c:4c:f6:f1:a0:db:ca:44:9a:2f:81:5b:17:51:f9:22:32:6c:
57:cf:5d:e3:c0:00:87:7a:8a:94:cc:64:aa:8f:4b:bd:f9:af:
65:55:a8:70:8e:3d:9c:a5:ab:0d:92:a7:a3:78:34:3d:0e:f0:
ff:14:18:6b:c9:c2:4d:8a:6d:79:fe:33:28:8f:60:4c:8f:16:
8d:60:9f:ca:e9:2b:d6:74:6b:88:cb:b3:56:10:4b:62:fb:86:
34:da:cd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:26:22 2026 by rpki-client