Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sANLB66256v3eNPniPRiXYCcWac.roa
File: sANLB66256v3eNPniPRiXYCcWac.roa (raw, json)
Hash identifier: VSpgeqbq1j5oyVZB12hZ5MWfe2qNPaPdr76P4JBvm+Q=
Subject key identifier: B0:03:4B:07:AE:B6:E7:AB:F7:78:D3:E7:88:F4:62:5D:80:9C:59:A7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0C48904B8BAE9BA326D50A1851B41C757
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sANLB66256v3eNPniPRiXYCcWac.roa
Signing time: Mon 21 Sep 2026 15:15:09 +0000
ROA not before: Mon 21 Sep 2026 15:15:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211407
IP address blocks: 151.242.116.0/24 maxlen: 24
151.243.30.0/24 maxlen: 24
151.244.119.0/24 maxlen: 24
151.244.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:89:04:b8:ba:e9:ba:32:6d:50:a1:85:1b:41:c7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 21 15:15:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0034b07aeb6e7abf778d3e788f4625d809c59a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a8:a4:e1:75:b3:34:f9:96:8c:ec:fa:a2:d3:
ba:70:ef:65:6e:6c:0b:55:b1:dc:58:ee:38:9e:8d:
15:05:e7:38:29:91:c2:f7:86:b4:3f:e3:c1:12:8e:
e9:8f:1e:71:0e:0b:90:f6:68:a5:c4:ff:42:68:3f:
b2:51:3e:cc:97:f2:8a:a4:bf:58:cd:98:1a:05:28:
12:7a:cf:33:72:be:23:06:4e:d0:94:d4:28:e4:0e:
85:05:4a:55:b7:32:d2:6e:c5:29:91:98:fc:56:9f:
3b:65:e0:01:04:4a:d7:78:96:9b:bb:56:43:8a:49:
85:42:06:3f:c3:7a:85:80:7c:b6:a7:98:1a:f3:11:
bc:7a:f8:c0:f6:6a:48:01:b8:2b:f4:25:c1:7a:d4:
2e:bd:81:6e:2a:3a:b3:d8:c8:ce:e3:f6:48:c5:c9:
b6:f0:ff:6d:65:7c:9e:4b:98:4b:cd:51:63:2c:b3:
1c:84:9c:c1:93:17:bd:37:be:78:b1:87:76:09:dc:
99:15:50:8f:cf:fa:8f:68:82:25:eb:3e:b4:cd:7c:
39:27:e6:51:dc:14:bd:53:b8:25:ed:c8:7f:e9:9b:
02:96:9e:8c:22:ea:e2:f2:2f:fc:8d:b0:a0:62:3b:
b1:53:7c:ca:32:e3:06:ce:15:a9:e7:f6:62:12:b0:
6e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:03:4B:07:AE:B6:E7:AB:F7:78:D3:E7:88:F4:62:5D:80:9C:59:A7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sANLB66256v3eNPniPRiXYCcWac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.116.0/24
151.243.30.0/24
151.244.119.0/24
151.244.238.0/24
Signature Algorithm: sha256WithRSAEncryption
69:1f:3b:b4:f5:17:f4:1b:20:ec:5e:a7:d6:5e:56:42:48:dc:
1a:c2:b6:33:9c:c1:37:05:9d:bc:b9:8d:65:50:46:e2:c3:dc:
ef:8a:45:db:69:88:94:55:90:d4:09:43:be:e5:28:6e:42:3b:
f4:28:66:75:69:6a:4d:89:cb:06:12:3a:f9:99:7a:f0:db:83:
fb:fd:47:c0:76:d1:9c:8a:49:d5:50:a1:3f:3e:16:cd:5e:c3:
21:af:15:b5:71:df:cd:5e:81:f1:3f:11:7b:e8:2a:ff:a4:21:
04:57:31:72:c3:c2:0a:07:9d:23:2c:91:c4:02:f8:ec:17:e0:
59:bb:d5:fd:5c:ea:46:1b:16:15:63:75:ac:0a:32:6c:ac:8f:
c1:b3:72:08:06:ae:80:bd:8c:7f:51:59:e9:59:bd:37:ce:77:
11:20:2f:7b:43:7c:41:99:77:73:bf:80:5a:63:6e:db:8b:47:
16:1e:39:76:d7:9c:e5:00:30:58:1a:5b:cc:33:b0:11:9a:d2:
bb:22:66:c6:ed:0c:93:d6:ec:3f:21:9c:d6:4f:92:41:12:d6:
a4:de:43:2d:46:63:3e:25:b2:cc:6f:41:a8:1c:b3:25:dc:26:
80:a2:bd:15:73:9b:94:fa:aa:a8:1c:98:d6:b9:6f:80:86:9f:
a2:96:50:fc
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaDEiQS4uum6Mm1QoYUbQcdXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwOTIxMTUxNTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDAzNGIwN2FlYjZlN2FiZjc3OGQzZTc4OGY0NjI1ZDgwOWM1OWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKik4XWzNPmWjOz6otO6cO9lbmwL
VbHcWO44no0VBec4KZHC94a0P+PBEo7pjx5xDguQ9milxP9CaD+yUT7Ml/KKpL9Y
zZgaBSgSes8zcr4jBk7QlNQo5A6FBUpVtzLSbsUpkZj8Vp87ZeABBErXeJabu1ZD
ikmFQgY/w3qFgHy2p5ga8xG8evjA9mpIAbgr9CXBetQuvYFuKjqz2MjO4/ZIxcm2
8P9tZXyeS5hLzVFjLLMchJzBkxe9N754sYd2CdyZFVCPz/qPaIIl6z60zXw5J+ZR
3BS9U7gl7ch/6ZsClp6MIuri8i/8jbCgYjuxU3zKMuMGzhWp5/ZiErBuiwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFLADSweutuer93jT54j0Yl2AnFmnMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvc0FOTEI2NjI1NnYzZU5QbmlQUmlYWUNjV2FjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/J0AwQA
l/MeAwQAl/R3AwQAl/TuMA0GCSqGSIb3DQEBCwUAA4IBAQBpHzu09Rf0GyDsXqfW
XlZCSNwawrYznME3BZ28uY1lUEbiw9zvikXbaYiUVZDUCUO+5ShuQjv0KGZ1aWpN
icsGEjr5mXrw24P7/UfAdtGciknVUKE/PhbNXsMhrxW1cd/NXoHxPxF76Cr/pCEE
VzFyw8IKB50jLJHEAvjsF+BZu9X9XOpGGxYVY3WsCjJsrI/Bs3IIBq6AvYx/UVnp
Wb03zncRIC97Q3xBmXdzv4BaY27bi0cWHjl215zlADBYGlvMM7ARmtK7ImbG7QyT
1uw/IZzWT5JBEtak3kMtRmM+JbLMb0GoHLMl3CaAor0Vc5uU+qqoHJjWuW+Ahp+i
llD8
-----END CERTIFICATE-----
Generated at Wed Sep 23 04:00:48 2026 by rpki-client