Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jN5DFLKh7U6OtEq4tRc6eAKUajo.roa
File: jN5DFLKh7U6OtEq4tRc6eAKUajo.roa (raw, json)
Hash identifier: Urrn+bMMvoJ7c4BqI1/6627R3+ysvEmA20571KgwPA0=
Subject key identifier: 8C:DE:43:14:B2:A1:ED:4E:8E:B4:4A:B8:B5:17:3A:78:02:94:6A:3A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A05C47A4B80B0ECDA330732C9B6510C849
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jN5DFLKh7U6OtEq4tRc6eAKUajo.roa
Signing time: Tue 01 Sep 2026 09:23:14 +0000
ROA not before: Tue 01 Sep 2026 09:23:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212980
IP address blocks: 151.244.240.0/24 maxlen: 24
151.245.214.0/23 maxlen: 23
151.246.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:47:a4:b8:0b:0e:cd:a3:30:73:2c:9b:65:10:c8:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 1 09:23:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8cde4314b2a1ed4e8eb44ab8b5173a7802946a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:12:e1:63:4a:fc:41:b1:fa:84:83:ac:76:
d2:40:a2:45:4c:3f:0f:de:fb:4e:d8:29:be:fb:f0:
6e:b9:cb:1b:c1:8d:e1:ac:61:64:88:c4:5e:73:49:
ce:78:e6:50:d4:76:91:dc:a6:28:3a:32:c6:b6:eb:
5d:3f:0f:7f:ac:ff:e3:6f:1e:8a:12:fb:90:98:73:
1e:62:33:56:35:e9:a4:32:43:ae:a9:3e:7d:33:b8:
a9:2c:59:cc:b3:a1:03:df:80:40:8d:99:dc:a3:7f:
31:d5:4a:dc:82:36:ba:ba:90:55:59:4f:db:fe:44:
7e:36:ec:d9:e1:78:dd:39:7e:01:ed:42:c1:16:b8:
9e:92:98:1b:98:a4:a0:27:5e:29:9b:71:77:81:93:
23:4f:74:2c:bd:a2:1a:5a:46:38:55:a4:ff:79:77:
65:9c:c7:e3:33:fb:72:94:c7:b3:d2:72:52:82:cc:
0c:89:bf:46:3e:fe:80:08:c5:83:13:8c:85:69:47:
99:82:59:d5:d4:d9:21:e5:0f:80:8a:8f:77:3a:88:
84:16:98:f9:80:b1:9d:b1:6c:a3:c3:65:cc:dd:3d:
7f:18:46:b7:78:e2:81:f0:10:1d:8a:ce:95:01:2e:
ad:5a:31:2d:ef:93:88:17:03:95:98:ee:c8:4c:c4:
5b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DE:43:14:B2:A1:ED:4E:8E:B4:4A:B8:B5:17:3A:78:02:94:6A:3A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jN5DFLKh7U6OtEq4tRc6eAKUajo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.240.0/24
151.245.214.0/23
151.246.32.0/21
Signature Algorithm: sha256WithRSAEncryption
93:1d:3a:4b:61:06:6a:ff:64:c7:76:7e:35:3d:3b:6e:72:9a:
df:b4:80:72:19:43:77:aa:68:26:f6:ac:1f:e3:8a:01:06:d7:
24:b9:ba:b8:cb:b4:41:6a:38:66:91:3f:bf:e2:ae:73:74:20:
ee:d3:b8:e0:7d:9f:08:2d:d5:00:18:b3:66:9b:7d:81:13:d4:
53:0c:55:d1:5e:71:e0:17:bf:ee:65:15:f2:db:b9:88:ec:9c:
98:d3:ec:95:05:32:e3:1b:e7:8e:be:e7:5a:02:57:20:25:22:
15:e6:58:2f:9a:17:d5:f8:47:2e:cf:59:9e:88:02:2d:a8:2b:
60:0b:50:9c:1c:d5:e1:30:e7:16:77:23:02:e4:e2:16:f2:37:
bb:82:c4:50:e2:91:5a:50:f4:a5:62:aa:3f:91:7a:6a:83:43:
e1:13:c3:dd:c0:e3:46:5a:40:b7:ad:56:86:cb:97:76:36:07:
c9:82:d6:a8:95:b4:25:d6:fe:80:0c:6a:12:1c:fd:9b:f6:f3:
27:8f:7c:71:d3:19:8a:e3:bc:07:20:e0:19:85:d5:c9:e4:d7:
d9:1b:77:43:91:59:8f:c4:78:01:25:a5:f6:d3:dc:bd:a8:03:
38:d7:6a:1b:91:52:ea:83:74:50:b4:40:2a:2a:07:fe:43:35:
25:bd:41:6a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaBcR6S4Cw7NozBzLJtlEMhJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwOTAxMDkyMzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2RlNDMxNGIyYTFlZDRlOGViNDRhYjhiNTE3M2E3ODAyOTQ2YTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0MS4WNK/EGx+oSDrHbSQKJFTD8P
3vtO2Cm++/BuucsbwY3hrGFkiMRec0nOeOZQ1HaR3KYoOjLGtutdPw9/rP/jbx6K
EvuQmHMeYjNWNemkMkOuqT59M7ipLFnMs6ED34BAjZnco38x1Urcgja6upBVWU/b
/kR+NuzZ4XjdOX4B7ULBFriekpgbmKSgJ14pm3F3gZMjT3QsvaIaWkY4VaT/eXdl
nMfjM/tylMez0nJSgswMib9GPv6ACMWDE4yFaUeZglnV1Nkh5Q+Aio93OoiEFpj5
gLGdsWyjw2XM3T1/GEa3eOKB8BAdis6VAS6tWjEt75OIFwOVmO7ITMRbDwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIzeQxSyoe1OjrRKuLUXOngClGo6MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvak41REZMS2g3VTZPdEVxNHRSYzZlQUtVYWpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/TwAwQB
l/XWAwQDl/YgMA0GCSqGSIb3DQEBCwUAA4IBAQCTHTpLYQZq/2THdn41PTtucprf
tIByGUN3qmgm9qwf44oBBtckubq4y7RBajhmkT+/4q5zdCDu07jgfZ8ILdUAGLNm
m32BE9RTDFXRXnHgF7/uZRXy27mI7JyY0+yVBTLjG+eOvudaAlcgJSIV5lgvmhfV
+Ecuz1meiAItqCtgC1CcHNXhMOcWdyMC5OIW8je7gsRQ4pFaUPSlYqo/kXpqg0Ph
E8PdwONGWkC3rVaGy5d2NgfJgtaolbQl1v6ADGoSHP2b9vMnj3xx0xmK47wHIOAZ
hdXJ5NfZG3dDkVmPxHgBJaX209y9qAM412obkVLqg3RQtEAqKgf+QzUlvUFq
-----END CERTIFICATE-----
Generated at Mon Sep 28 05:50:58 2026 by rpki-client