Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/j864TJI9Qil3fRtpDgIQ9DJDkBA.roa
File: j864TJI9Qil3fRtpDgIQ9DJDkBA.roa (raw, json)
Hash identifier: cOxfajMMv2ZdxIYc26t00uGJjUF4fB30pQw3Yg+Aeaw=
Subject key identifier: 8F:CE:B8:4C:92:3D:42:29:77:7D:1B:69:0E:02:10:F4:32:43:90:10
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0C41DE844C705B8FA1821B3D167970486
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/j864TJI9Qil3fRtpDgIQ9DJDkBA.roa
Signing time: Mon 21 Sep 2026 13:18:09 +0000
ROA not before: Mon 21 Sep 2026 13:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215304
IP address blocks: 151.240.149.0/24 maxlen: 24
151.241.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:1d:e8:44:c7:05:b8:fa:18:21:b3:d1:67:97:04:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 21 13:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fceb84c923d4229777d1b690e0210f432439010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:01:35:a0:e7:58:aa:44:e4:45:98:f0:b3:
d0:fb:5d:ff:bb:93:59:58:fe:30:03:6d:e3:97:03:
af:04:4a:93:27:2a:ea:83:eb:c2:00:99:ce:ea:1b:
66:0b:c0:a1:8e:a3:38:2e:4d:2c:08:c2:b7:19:4d:
b5:33:f3:6d:60:7f:e1:9f:99:97:d4:53:3e:58:ce:
ba:9f:1c:d1:01:61:f8:27:39:54:c2:04:21:fb:71:
01:53:35:ea:74:52:1d:4a:50:66:e6:f7:c8:9e:ce:
13:f0:10:75:fa:f0:e9:c5:9e:f6:a6:a5:e7:f6:b4:
73:ec:5e:93:a2:88:f6:31:15:81:d9:40:88:b8:a3:
89:2e:ef:ed:b3:c6:6a:e9:a1:d1:e7:86:9a:43:01:
d6:a6:4d:98:94:58:ec:ce:ea:9d:ab:34:80:4f:00:
f8:4c:3a:9c:fa:51:f3:9e:82:c3:c9:6f:c1:95:e7:
bf:39:f3:fe:c7:00:e7:d3:40:9b:12:00:46:51:c1:
08:44:05:ca:5f:66:47:91:20:c7:a5:b6:9d:c3:70:
f4:e3:2d:47:75:dc:86:fe:03:d8:8a:54:49:c2:b1:
e1:99:ad:cb:8f:f7:19:0f:ba:13:8b:07:c0:fb:ad:
09:2c:3b:12:18:ab:d5:4a:32:bb:9e:8b:40:a5:2e:
e5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CE:B8:4C:92:3D:42:29:77:7D:1B:69:0E:02:10:F4:32:43:90:10
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/j864TJI9Qil3fRtpDgIQ9DJDkBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.149.0/24
151.241.128.0/22
Signature Algorithm: sha256WithRSAEncryption
97:63:9e:68:21:ef:5a:cf:60:ee:81:d3:1f:71:6c:64:1a:12:
da:46:c1:c0:54:9d:84:68:fa:50:83:be:a2:14:36:2f:bc:30:
cc:74:d2:75:b8:6a:48:00:bd:5e:3e:0a:25:72:63:ee:4d:71:
7c:12:82:d0:a3:9e:bc:d4:40:b6:84:9d:ed:4c:40:a8:87:89:
3c:2e:c3:98:a4:d0:ab:d8:98:35:ea:e3:70:99:bd:d7:27:88:
e6:4a:cf:56:c7:ee:a3:43:b8:58:2e:a8:85:3a:96:36:c8:e4:
d9:9e:05:c2:8b:f2:85:5e:17:62:11:03:52:8f:8d:27:c4:e8:
34:2b:ec:11:1b:aa:f2:71:78:44:e5:ff:0d:37:b4:86:62:18:
62:b4:8a:32:75:dc:4f:94:d5:61:1f:fd:b4:97:dc:22:48:87:
83:e7:16:2c:69:60:5c:09:77:f7:28:9b:85:4f:a8:67:d7:52:
c4:db:96:21:f8:d5:ae:1d:dc:42:4c:86:2d:d7:20:18:dd:e1:
f9:2e:67:eb:00:0d:51:3b:da:82:d1:1a:82:7a:6d:c8:c4:41:
c9:19:8d:63:08:4e:c6:dd:0b:7e:84:11:ca:03:13:b2:00:df:
b9:49:63:bb:e1:9c:ba:c4:36:7d:2f:f4:89:6d:86:0d:95:4c:
98:c1:a2:f6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaDEHehExwW4+hghs9FnlwSGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwOTIxMTMxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmNlYjg0YzkyM2Q0MjI5Nzc3ZDFiNjkwZTAyMTBmNDMyNDM5MDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/8BNaDnWKpE5EWY8LPQ+13/u5NZ
WP4wA23jlwOvBEqTJyrqg+vCAJnO6htmC8ChjqM4Lk0sCMK3GU21M/NtYH/hn5mX
1FM+WM66nxzRAWH4JzlUwgQh+3EBUzXqdFIdSlBm5vfIns4T8BB1+vDpxZ72pqXn
9rRz7F6Tooj2MRWB2UCIuKOJLu/ts8Zq6aHR54aaQwHWpk2YlFjszuqdqzSATwD4
TDqc+lHznoLDyW/Blee/OfP+xwDn00CbEgBGUcEIRAXKX2ZHkSDHpbadw3D04y1H
ddyG/gPYilRJwrHhma3Lj/cZD7oTiwfA+60JLDsSGKvVSjK7notApS7lgwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFI/OuEySPUIpd30baQ4CEPQyQ5AQMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvajg2NFRKSTlRaWwzZlJ0cERnSVE5REpEa0JBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/CVAwQC
l/GAMA0GCSqGSIb3DQEBCwUAA4IBAQCXY55oIe9az2DugdMfcWxkGhLaRsHAVJ2E
aPpQg76iFDYvvDDMdNJ1uGpIAL1ePgolcmPuTXF8EoLQo5681EC2hJ3tTECoh4k8
LsOYpNCr2Jg16uNwmb3XJ4jmSs9Wx+6jQ7hYLqiFOpY2yOTZngXCi/KFXhdiEQNS
j40nxOg0K+wRG6rycXhE5f8NN7SGYhhitIoyddxPlNVhH/20l9wiSIeD5xYsaWBc
CXf3KJuFT6hn11LE25Yh+NWuHdxCTIYt1yAY3eH5LmfrAA1RO9qC0RqCem3IxEHJ
GY1jCE7G3Qt+hBHKAxOyAN+5SWO74Zy6xDZ9L/SJbYYNlUyYwaL2
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:19:14 2026 by rpki-client