Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qHnmhZeGBIIBANoLwkT7GlGpEdo.roa
File: qHnmhZeGBIIBANoLwkT7GlGpEdo.roa (raw, json)
Hash identifier: gF8ko8OnlNWgJ9yqGRIjmZqNws1CrJWLfDbswyfDOO4=
Subject key identifier: A8:79:E6:85:97:86:04:82:01:00:DA:0B:C2:44:FB:1A:51:A9:11:DA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F622DA05BE5F67D34708AAA62FD196EE7
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qHnmhZeGBIIBANoLwkT7GlGpEdo.roa
Signing time: Tue 14 Jul 2026 19:49:45 +0000
ROA not before: Tue 14 Jul 2026 19:49:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53107
IP address blocks: 151.242.142.0/24 maxlen: 24
151.244.117.0/24 maxlen: 24
151.244.141.0/24 maxlen: 24
151.245.229.0/24 maxlen: 24
151.246.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:62:2d:a0:5b:e5:f6:7d:34:70:8a:aa:62:fd:19:6e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 14 19:49:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a879e685978604820100da0bc244fb1a51a911da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:be:c8:06:2f:b1:f5:fa:75:2b:9b:98:4d:0a:
db:f9:73:bd:c7:60:98:97:d6:e4:1b:b3:31:08:de:
fb:a3:55:7e:ee:be:74:d4:9b:2e:bd:45:b1:e9:62:
5d:de:93:22:10:97:bf:b8:4d:ce:57:c5:f5:af:18:
5e:1d:47:6e:71:2f:20:42:e3:a4:7c:e9:56:61:1f:
f2:b6:4c:50:6d:01:2f:27:ff:08:f2:af:ee:55:4f:
6b:8c:9a:1b:1d:55:72:e9:5f:eb:29:cf:56:45:c9:
7d:fe:f1:0c:81:e6:a4:29:f3:36:45:61:de:60:9c:
58:8b:6f:a5:76:a7:81:38:f4:eb:16:8e:f5:80:43:
dc:c3:03:16:6f:49:dc:4b:8b:3d:28:20:ee:e0:d6:
bd:5b:16:dd:38:46:3b:c0:e0:25:0d:1d:3a:ff:45:
0c:94:99:f1:19:b7:c7:c0:e9:f4:dc:b1:1a:cc:52:
5f:3c:28:3c:cb:32:ed:be:94:c0:2f:9c:ad:1b:17:
09:d2:c3:d5:0a:45:1b:76:26:b3:56:1d:47:2f:1c:
c2:eb:c1:d9:41:01:d4:bd:2e:40:7a:fb:e9:e1:43:
3a:4e:07:dd:44:bc:98:27:04:52:13:7b:57:a1:42:
77:c6:16:19:35:b5:fa:2f:40:e7:4c:c4:69:32:34:
af:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:79:E6:85:97:86:04:82:01:00:DA:0B:C2:44:FB:1A:51:A9:11:DA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qHnmhZeGBIIBANoLwkT7GlGpEdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.142.0/24
151.244.117.0/24
151.244.141.0/24
151.245.229.0/24
151.246.233.0/24
Signature Algorithm: sha256WithRSAEncryption
72:10:0f:76:63:6e:cb:e4:e7:74:44:52:fc:cf:f5:7e:2d:b7:
1d:7a:93:04:bd:dd:49:3f:3b:93:0c:d5:5c:f4:80:fc:dd:83:
d0:f2:57:ca:56:6b:77:5e:06:22:63:93:55:a5:0c:fc:7a:4d:
88:04:3f:5e:4e:51:45:f5:7f:ac:b6:0e:b8:07:92:53:9b:f4:
5f:64:a6:68:e4:e5:f1:c3:f2:c0:82:c7:f4:cb:e2:fd:77:b5:
29:ec:c5:38:38:46:d6:ac:11:91:7c:8a:57:9e:9a:5e:f0:2a:
88:d8:c2:bb:37:a7:51:69:0b:f8:d3:7f:37:53:17:c5:d4:7d:
25:4f:0d:9e:b8:32:e4:7c:05:1a:d5:d9:e2:af:07:ed:7c:e1:
37:05:c4:e9:f4:a2:bd:01:1b:ba:2b:e7:aa:09:3f:c0:89:e4:
99:b1:11:e6:42:96:77:9b:84:7a:80:5a:47:e1:cb:da:cd:a7:
0f:5d:0d:a7:3e:87:10:aa:91:bc:45:71:d6:e3:cc:b6:90:c6:
73:6f:61:37:a1:7a:f1:c0:e3:ee:3f:0c:44:8c:19:44:d3:9e:
05:b9:b3:c9:ed:a4:1c:3b:e9:96:18:a2:17:94:51:89:fb:fe:
87:85:95:be:7c:57:23:6c:86:2f:f3:03:89:09:65:95:2e:99:
04:eb:df:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:54:14 2026 by rpki-client