Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mdBxlO_JMDa_DmlRpJEnjjfTvA4.roa
File: mdBxlO_JMDa_DmlRpJEnjjfTvA4.roa (raw, json)
Hash identifier: w/OjORZuMbR/WNd7fJhOntguFHV8W6cErrd+RXqa7Nk=
Subject key identifier: 99:D0:71:94:EF:C9:30:36:BF:0E:69:51:A4:91:27:8E:37:D3:BC:0E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D006EBDDC10BF14B54C6676497A455F35
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mdBxlO_JMDa_DmlRpJEnjjfTvA4.roa
Signing time: Wed 18 Mar 2026 10:12:30 +0000
ROA not before: Wed 18 Mar 2026 10:12:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 151.241.145.0/24 maxlen: 24
151.241.147.0/24 maxlen: 24
151.244.0.0/24 maxlen: 24
151.247.129.0/24 maxlen: 24
151.247.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:56:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:6e:bd:dc:10:bf:14:b5:4c:66:76:49:7a:45:5f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 18 10:12:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99d07194efc93036bf0e6951a491278e37d3bc0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:51:de:ad:b7:a5:2a:9f:de:c0:43:10:db:b5:
68:5b:e8:6d:1c:d6:41:d3:33:3c:8b:a7:4a:a2:d2:
b0:66:c8:b8:11:51:55:6d:f5:5e:48:ae:d5:e8:e9:
70:ef:3a:80:d4:17:40:a3:6e:4c:a5:c9:57:0e:ac:
a8:9e:f8:ef:f3:6b:ce:01:71:6b:bb:03:2c:51:17:
fd:7e:82:fc:9f:e1:96:cc:48:ac:e5:69:c5:e6:56:
87:ff:fd:91:40:64:ea:8b:ab:43:0f:6c:70:88:64:
7a:b7:b8:d6:df:c6:87:55:67:dd:14:0a:0b:18:36:
28:96:ce:88:06:d1:dc:5b:ce:a2:41:62:e0:34:ea:
f1:93:42:33:cc:97:10:05:75:4f:11:b8:6f:57:7b:
d3:5e:e1:74:52:8b:62:ab:19:63:74:54:50:46:14:
93:b9:f7:58:12:87:04:cd:0c:ba:1e:eb:ac:e4:8b:
f7:ba:fb:67:5a:d8:b9:2f:de:ff:4d:f2:18:e0:8e:
f4:71:3e:3f:8b:6f:ad:21:ac:c5:22:87:f4:e1:71:
bf:45:1e:a8:e5:82:4c:1a:39:d3:20:8a:fd:ea:ac:
92:57:52:c5:58:8c:5a:ba:cf:65:98:60:fd:43:78:
28:4d:dc:41:eb:68:27:82:de:13:5c:08:7c:86:64:
e1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D0:71:94:EF:C9:30:36:BF:0E:69:51:A4:91:27:8E:37:D3:BC:0E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mdBxlO_JMDa_DmlRpJEnjjfTvA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.145.0/24
151.241.147.0/24
151.244.0.0/24
151.247.129.0/24
151.247.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ea:5b:60:27:e2:14:a6:a5:26:67:24:19:f4:03:af:7d:f5:
92:ce:f8:6a:c9:17:1b:19:86:28:d6:39:df:10:5c:04:a1:d3:
6c:30:a1:33:a7:09:b8:dd:7e:c4:25:7f:f6:d5:08:15:e2:72:
66:7f:19:3a:39:73:09:eb:fe:88:98:e8:7e:a4:12:00:7c:bb:
e9:f5:65:10:16:c0:ce:ac:90:3b:97:b5:fb:07:0f:3e:9f:2c:
4e:75:9e:f5:82:92:79:ba:7e:eb:5c:b4:b7:61:7e:1d:6f:ea:
41:da:ae:79:42:25:f2:4d:48:0f:27:9d:82:b0:7c:cb:09:84:
ea:da:74:71:e1:8e:0d:7d:8b:c3:52:50:ee:92:e8:2c:da:69:
9c:aa:6a:9b:8f:3a:e3:8e:7f:5c:4f:bd:e5:9e:bd:88:cc:6a:
e4:35:20:00:53:ad:40:d4:5d:a5:42:ca:04:66:99:39:64:76:
a7:9a:50:6b:74:60:df:f9:78:15:91:70:9e:d9:c3:da:dc:c0:
7f:ae:ef:95:37:d9:a0:fa:3b:9e:af:e5:79:4c:11:28:96:8e:
f7:ce:30:e9:1e:ad:b0:0c:02:f5:75:63:86:02:ea:ca:18:00:
88:71:97:74:48:ae:e5:79:75:b2:11:4e:ef:c3:f9:b1:ff:c6:
27:56:30:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:32:24 2026 by rpki-client