Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nmrzApNJVsOuEtwfoTggbkKy2UU.roa
File: nmrzApNJVsOuEtwfoTggbkKy2UU.roa (raw, json)
Hash identifier: 0Y9ZQCdzPOlgOduwHtOydls4ZqJ2gIGXoBceN9BxVnQ=
Subject key identifier: 9E:6A:F3:02:93:49:56:C3:AE:12:DC:1F:A1:38:20:6E:42:B2:D9:45
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0C318F7A699102532C2660ED4275AFD6E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nmrzApNJVsOuEtwfoTggbkKy2UU.roa
Signing time: Mon 21 Sep 2026 08:33:08 +0000
ROA not before: Mon 21 Sep 2026 08:33:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 151.242.152.0/24 maxlen: 24
151.242.153.0/24 maxlen: 24
151.243.130.0/24 maxlen: 24
151.247.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:18:f7:a6:99:10:25:32:c2:66:0e:d4:27:5a:fd:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 21 08:33:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e6af302934956c3ae12dc1fa138206e42b2d945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:13:72:02:62:5c:59:5f:af:29:43:d9:eb:31:
06:7f:e4:55:ec:32:1e:76:bb:9f:11:03:25:ce:24:
9d:67:94:f4:57:04:95:58:b2:48:75:23:61:22:08:
b4:ee:d4:cf:16:52:09:ea:4a:2c:01:46:59:e1:b0:
50:9c:3f:05:f6:cb:6b:4e:e8:38:69:6d:61:f2:b5:
e8:e6:66:ec:89:c1:aa:d0:11:36:4b:57:a6:ed:46:
4e:ad:50:5b:5d:ab:55:92:a5:dd:f9:55:ea:61:df:
76:99:66:a8:b2:4e:08:0a:86:f5:50:5d:41:8c:ee:
e9:7b:0e:c2:f4:66:69:8f:3a:16:1a:26:95:63:46:
3c:7e:65:c5:ba:d6:47:cc:a6:3d:bc:c7:db:f7:1f:
c1:b9:46:ca:c7:ae:63:1f:50:45:9d:b5:55:f9:77:
e2:05:c2:66:71:e8:82:45:01:a5:c6:b5:03:95:c7:
1c:60:00:46:fa:f2:0d:97:5d:a1:8b:4c:4b:9e:61:
3f:9d:a8:39:4a:7c:a2:74:cb:e4:e0:09:d5:c2:6c:
44:db:29:b1:1c:c6:26:87:fa:f6:68:ab:6b:b9:ce:
64:9a:25:41:6c:0e:65:e1:7d:b9:b6:f5:fa:23:86:
59:8e:b2:67:50:e5:70:9b:4d:51:71:21:6b:ec:5f:
7c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6A:F3:02:93:49:56:C3:AE:12:DC:1F:A1:38:20:6E:42:B2:D9:45
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nmrzApNJVsOuEtwfoTggbkKy2UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.152.0/23
151.243.130.0/24
151.247.0.0/24
Signature Algorithm: sha256WithRSAEncryption
22:17:9f:c0:f8:9c:56:f9:5d:6b:46:27:0e:a0:29:15:45:3a:
a1:22:6c:28:e1:58:67:c6:f5:8c:37:60:ab:8e:eb:01:67:3a:
4e:43:6d:97:51:4a:c8:c3:f9:ab:60:41:05:d0:e0:ec:e5:60:
c9:ec:17:ba:a0:3c:31:8e:91:22:29:3d:ff:35:eb:06:73:93:
9f:c7:96:fe:ed:fc:a9:0d:eb:db:2b:1a:36:2f:4a:ca:1d:bf:
20:8d:d6:e4:bb:40:68:e3:f8:52:f2:fe:f9:29:f1:c5:ca:ea:
cd:d7:48:00:14:fa:3b:9a:1b:fe:66:b5:aa:b8:12:2c:f9:bd:
b1:5f:0c:7b:1b:d0:a6:55:11:97:7b:08:12:f6:8a:19:24:10:
73:79:7d:bd:93:31:b7:02:86:82:d3:49:e1:d2:92:34:8b:b0:
48:26:57:ef:e8:7e:e2:29:b7:d1:45:bd:f2:94:22:de:2c:2e:
8d:9b:9a:c4:b9:48:47:48:d2:bf:95:0d:c8:b5:52:66:cf:ee:
5e:3b:86:77:d0:83:1e:f0:bc:37:90:73:7c:80:53:80:1b:a0:
51:85:98:37:bd:be:27:83:e8:18:6e:b7:8f:4e:d7:04:aa:54:
88:f8:e1:bc:48:79:99:a3:72:6e:70:92:18:db:67:36:2a:7f:
e0:71:46:27
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaDDGPemmRAlMsJmDtQnWv1uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwOTIxMDgzMzA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTZhZjMwMjkzNDk1NmMzYWUxMmRjMWZhMTM4MjA2ZTQyYjJkOTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxNyAmJcWV+vKUPZ6zEGf+RV7DIe
drufEQMlziSdZ5T0VwSVWLJIdSNhIgi07tTPFlIJ6kosAUZZ4bBQnD8F9strTug4
aW1h8rXo5mbsicGq0BE2S1em7UZOrVBbXatVkqXd+VXqYd92mWaosk4ICob1UF1B
jO7pew7C9GZpjzoWGiaVY0Y8fmXFutZHzKY9vMfb9x/BuUbKx65jH1BFnbVV+Xfi
BcJmceiCRQGlxrUDlcccYABG+vINl12hi0xLnmE/nag5SnyidMvk4AnVwmxE2ymx
HMYmh/r2aKtruc5kmiVBbA5l4X25tvX6I4ZZjrJnUOVwm01RcSFr7F981wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJ5q8wKTSVbDrhLcH6E4IG5CstlFMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvbm1yekFwTkpWc091RXR3Zm9UZ2dia0t5MlVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBl/KYAwQA
l/OCAwQAl/cAMA0GCSqGSIb3DQEBCwUAA4IBAQAiF5/A+JxW+V1rRicOoCkVRTqh
Imwo4VhnxvWMN2CrjusBZzpOQ22XUUrIw/mrYEEF0ODs5WDJ7Be6oDwxjpEiKT3/
NesGc5Ofx5b+7fypDevbKxo2L0rKHb8gjdbku0Bo4/hS8v75KfHFyurN10gAFPo7
mhv+ZrWquBIs+b2xXwx7G9CmVRGXewgS9ooZJBBzeX29kzG3AoaC00nh0pI0i7BI
Jlfv6H7iKbfRRb3ylCLeLC6Nm5rEuUhHSNK/lQ3ItVJmz+5eO4Z30IMe8Lw3kHN8
gFOAG6BRhZg3vb4ng+gYbrePTtcEqlSI+OG8SHmZo3JucJIY22c2Kn/gcUYn
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:54:17 2026 by rpki-client