Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tKfc9DjVFpsZEi3RM7R4nrKpMnU.roa
File: tKfc9DjVFpsZEi3RM7R4nrKpMnU.roa (raw, json)
Hash identifier: XpcAlCLM2+TebKsGYZeXusPMV03JS0RbfOaPaXlCjsM=
Subject key identifier: B4:A7:DC:F4:38:D5:16:9B:19:12:2D:D1:33:B4:78:9E:B2:A9:32:75
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F8F9C0C40EAB924F7E0532B3ED80DF7DE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tKfc9DjVFpsZEi3RM7R4nrKpMnU.roa
Signing time: Thu 23 Jul 2026 15:33:16 +0000
ROA not before: Thu 23 Jul 2026 15:33:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 151.242.143.0/24 maxlen: 24
151.244.162.0/23 maxlen: 24
151.247.44.0/23 maxlen: 24
151.247.137.0/24 maxlen: 24
151.247.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:9c:0c:40:ea:b9:24:f7:e0:53:2b:3e:d8:0d:f7:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 23 15:33:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4a7dcf438d5169b19122dd133b4789eb2a93275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:61:36:22:4f:92:78:f9:17:4d:d1:3a:8b:01:
04:f6:f8:b1:91:42:51:7e:d5:ee:e0:14:a8:fe:fb:
e7:20:88:91:d2:d8:ff:c7:fd:40:28:82:82:d6:3c:
27:42:42:de:bf:12:1e:16:00:24:0f:4b:ab:fc:a3:
c8:97:32:24:6f:81:81:d8:5c:28:41:d8:04:42:d8:
f4:e2:b5:50:aa:a0:96:48:1f:7c:b8:60:95:4f:ce:
8d:1a:b2:d2:6c:96:7d:f2:c9:8d:61:90:4c:8c:04:
74:04:26:58:b8:7c:dc:a9:61:f3:22:6d:60:bf:c1:
5d:b8:17:39:09:6f:40:a6:0f:4f:a2:16:68:fc:4c:
33:39:45:86:a9:5d:8d:e6:b6:e4:7e:36:ca:cd:50:
4a:04:27:ac:23:31:5a:5b:c1:b9:ae:91:e4:a1:8e:
9a:16:d4:3c:39:bb:60:12:f5:6d:24:b6:6b:9a:41:
69:28:f8:9f:32:e1:5b:b0:99:de:c8:15:2f:4e:42:
fe:45:6b:95:7e:6c:74:4e:95:1f:20:7c:93:fa:f6:
9d:b0:d1:e8:5c:0b:6a:1e:32:e5:17:01:28:64:a9:
19:81:9a:a5:26:cc:f0:1c:b0:85:65:b3:54:d1:38:
ef:ab:59:90:f3:6f:30:a4:d8:da:e3:7b:b5:02:dc:
25:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A7:DC:F4:38:D5:16:9B:19:12:2D:D1:33:B4:78:9E:B2:A9:32:75
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tKfc9DjVFpsZEi3RM7R4nrKpMnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.143.0/24
151.244.162.0/23
151.247.44.0/23
151.247.137.0/24
151.247.182.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:4c:40:08:8e:d9:f4:3b:b8:cd:31:73:f0:8a:6b:11:cd:e4:
bc:2b:a3:12:a3:85:57:8c:6c:f3:1e:5e:a9:cf:e5:52:8c:11:
f1:21:82:fa:a2:e9:01:02:dd:a9:91:d1:ef:fd:d5:13:af:0c:
06:de:24:5f:ce:79:cc:6e:2a:7e:26:ee:17:d3:74:c0:95:f2:
52:64:89:96:86:09:89:f4:c1:35:8d:c4:ce:63:bd:1f:13:6a:
5d:8b:48:5e:36:f9:bc:5e:22:a6:37:bf:8a:94:ab:e8:ce:58:
22:d4:61:13:42:8d:b5:95:fb:4e:40:56:fa:5e:e9:65:7a:3b:
1f:c1:f2:f9:6a:d0:f5:1c:37:9c:87:ed:ec:1b:29:0e:6f:cd:
cb:10:5d:64:aa:95:8c:1b:bc:98:b4:ba:77:f0:20:80:74:98:
ca:4f:76:26:60:f8:f6:3d:e8:df:5c:25:6a:42:02:cc:6e:91:
cc:de:1e:a1:96:58:eb:30:d7:c9:36:66:af:bd:6b:af:92:d3:
b2:5e:63:09:e2:13:f9:f9:f9:be:43:00:fd:8b:2f:1e:06:a4:
c7:88:64:b1:62:d9:84:ea:40:4d:00:99:c0:d6:51:01:3d:16:
e3:e8:8a:a3:0a:49:e3:b7:a2:3c:6a:f5:7e:17:6c:ec:23:39:
62:ad:5a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:05:28 2026 by rpki-client