Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t2I1UvJi27WhFZWy2W7BrtpvX10.roa
File: t2I1UvJi27WhFZWy2W7BrtpvX10.roa (raw, json)
Hash identifier: sCPHdN0MT4jVGsRCO7TM7eGuxv/9LUIOMRy53DgOAik=
Subject key identifier: B7:62:35:52:F2:62:DB:B5:A1:15:95:B2:D9:6E:C1:AE:DA:6F:5F:5D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0AFDD44EB0D7AC771F69CA69667EEB75F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t2I1UvJi27WhFZWy2W7BrtpvX10.roa
Signing time: Thu 17 Sep 2026 14:55:08 +0000
ROA not before: Thu 17 Sep 2026 14:55:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209043
IP address blocks: 151.241.26.0/24 maxlen: 24
151.241.47.0/24 maxlen: 24
151.241.78.0/24 maxlen: 24
151.241.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:dd:44:eb:0d:7a:c7:71:f6:9c:a6:96:67:ee:b7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 17 14:55:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7623552f262dbb5a11595b2d96ec1aeda6f5f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d1:84:7f:c2:75:ff:4f:b3:e1:ea:fa:75:8b:
01:a7:b8:c0:7f:4d:9a:81:f9:00:3c:10:06:c5:34:
4c:d8:a9:d9:ec:95:60:ef:04:c5:96:de:25:97:32:
1c:52:13:2b:80:8b:33:23:5c:5d:41:4b:09:6d:d8:
cb:bd:1e:cb:82:f2:c3:02:4c:37:f6:f0:5c:86:dd:
71:e8:05:4e:0b:97:41:9a:d0:fc:b4:eb:bb:fd:c8:
1c:ea:fb:e5:48:8a:92:9c:ca:dc:aa:1d:46:1c:d5:
22:6a:23:f4:53:32:65:9a:8e:bc:53:b1:a3:01:a9:
98:a1:78:49:1e:a9:f2:f5:40:0b:a8:84:0e:da:be:
0c:e2:d4:f6:44:bd:45:25:fc:5e:3c:b5:36:24:1f:
07:6c:ec:be:28:3f:27:90:10:c9:e4:42:71:db:b1:
c9:15:07:9b:4b:b2:a8:57:82:2e:57:25:99:b6:6c:
6a:26:de:cd:03:64:cc:db:cc:9f:9f:91:63:38:47:
b4:da:7e:95:89:7c:c5:68:ee:1c:fe:ec:61:0b:80:
ba:2e:cc:63:09:0e:7d:cc:54:24:82:ac:c7:b5:34:
4a:0f:4c:f3:7b:b9:9f:34:99:f9:61:0d:a5:78:e1:
42:bd:29:6f:c2:ad:10:19:bf:f1:d7:49:f4:cb:ca:
f9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:62:35:52:F2:62:DB:B5:A1:15:95:B2:D9:6E:C1:AE:DA:6F:5F:5D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t2I1UvJi27WhFZWy2W7BrtpvX10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.26.0/24
151.241.47.0/24
151.241.78.0/24
151.241.112.0/24
Signature Algorithm: sha256WithRSAEncryption
20:df:69:b0:31:01:c6:ee:59:5b:c6:c4:d4:88:20:19:0f:53:
ea:17:e7:1d:a2:4b:71:f4:2e:99:ef:79:dd:50:35:ae:ee:a8:
06:e8:55:0e:e5:96:c1:44:91:bf:db:37:02:2d:17:75:5c:e2:
47:d8:b2:99:3e:c0:74:a3:0f:6d:a3:21:08:d4:3c:89:df:a9:
f0:7e:8d:cd:c0:9d:03:7e:07:5d:e5:fa:cc:8b:7b:ae:b2:af:
62:b9:b3:e6:db:08:f5:e6:58:c7:00:59:99:7b:55:6c:8a:cf:
5f:57:3c:17:63:da:e1:67:93:42:ad:6b:f8:19:5f:2d:16:11:
11:06:b4:9f:60:c1:4a:21:4b:6d:3a:cb:66:5d:59:b3:93:95:
60:81:c4:d2:ba:06:e5:2b:7b:13:2f:50:39:63:4c:22:7b:8c:
9d:15:0e:34:97:b5:c1:55:be:33:41:b1:c1:75:f5:a8:b8:b7:
2d:5d:f8:72:8f:e6:d8:96:03:87:7c:d0:32:b9:7e:36:b2:b8:
e1:0b:0a:92:2a:a9:5b:29:99:d3:51:10:bb:89:80:d1:20:27:
71:31:31:66:ab:27:2c:24:28:a8:c0:e4:94:f1:75:ad:ae:ec:
21:70:b2:b4:6e:ef:58:05:31:1c:ee:e7:0f:7a:42:69:00:25:
b9:66:69:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:25:09 2026 by rpki-client