Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xC6zM_ROq9_EtUr4gzZLfLBJAWI.roa
File: xC6zM_ROq9_EtUr4gzZLfLBJAWI.roa (raw, json)
Hash identifier: hWmbBRoHvrHgIC8+g/gokFgS435/+f6Z+CePgg9KtKs=
Subject key identifier: C4:2E:B3:33:F4:4E:AB:DF:C4:B5:4A:F8:83:36:4B:7C:B0:49:01:62
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CFA36A492A2135FE1E726B7347159C53F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xC6zM_ROq9_EtUr4gzZLfLBJAWI.roa
Signing time: Tue 17 Mar 2026 05:13:30 +0000
ROA not before: Tue 17 Mar 2026 05:13:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205489
IP address blocks: 151.246.193.0/24 maxlen: 24
151.246.196.0/24 maxlen: 24
151.246.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fa:36:a4:92:a2:13:5f:e1:e7:26:b7:34:71:59:c5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 17 05:13:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c42eb333f44eabdfc4b54af883364b7cb0490162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6f:f1:88:95:da:66:a6:24:3e:1f:5c:ff:bf:
af:21:11:ae:ef:b9:19:74:3d:f6:bd:be:56:6f:14:
cf:80:9f:fe:65:cf:44:d4:cc:eb:1a:cf:df:8c:a2:
57:ed:07:b9:26:03:85:cc:3e:8f:e1:42:f5:81:34:
e1:3b:0a:65:74:74:41:d3:22:0e:26:47:1b:f6:19:
97:0e:7f:01:ae:51:0c:13:8b:70:64:34:fd:2e:5f:
ab:dc:c5:e1:e2:04:9e:14:9f:b7:13:20:01:72:e6:
ac:31:66:39:fd:9b:13:9e:34:50:f5:3c:5d:e9:59:
c8:d6:ed:09:56:6c:15:9a:21:c3:7e:ad:f3:f3:6a:
e4:a4:b9:a6:30:16:69:5e:b3:ee:01:d4:6f:16:74:
9b:aa:8d:56:11:8b:88:fe:c6:cd:bc:75:d6:b9:68:
27:fb:1c:fa:51:35:17:f0:bc:94:97:45:b3:2a:d1:
3c:f9:f8:64:ea:b3:49:05:42:f7:95:e5:4e:1d:ff:
05:f5:1c:46:d1:2a:1a:f7:e7:2d:aa:e6:9a:ff:37:
14:0e:f2:c7:d7:25:07:e2:55:92:43:0b:bd:46:66:
7b:1b:5d:fb:ef:44:01:d6:0f:ce:50:cd:18:40:04:
25:7e:fd:fc:23:e9:2f:4f:1b:4e:95:75:d8:06:9a:
51:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2E:B3:33:F4:4E:AB:DF:C4:B5:4A:F8:83:36:4B:7C:B0:49:01:62
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xC6zM_ROq9_EtUr4gzZLfLBJAWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.193.0/24
151.246.196.0/24
151.246.199.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:6d:4d:c5:2b:0e:42:d2:91:03:1f:15:1a:55:63:f0:6a:87:
aa:11:82:fe:f7:8b:80:37:6a:bc:d5:74:51:b1:40:89:2e:a3:
16:fd:9c:0e:bd:d5:e5:87:bf:5f:d4:1b:60:b9:fa:97:c6:d2:
98:da:37:f1:1c:db:93:47:9a:e9:4b:73:62:7f:b1:2b:7c:36:
78:32:f4:b9:70:c0:e1:60:ed:f6:66:24:16:92:86:70:03:c1:
bd:46:9b:b2:9a:de:ce:af:d5:2b:43:2c:3a:ea:c4:d2:b7:08:
15:0e:f7:84:04:01:e4:44:73:bf:41:be:c5:ff:cc:10:29:84:
da:0b:27:61:7b:dd:cc:e6:02:06:69:19:2c:c0:38:f7:ed:dd:
17:64:5e:12:05:ec:c1:ac:80:37:fe:e6:77:d0:83:2d:26:49:
26:40:0d:c5:73:35:97:bf:79:d3:ed:18:f7:74:6f:10:2b:e6:
18:d7:de:47:59:cc:a9:c0:6b:8b:b4:fb:7a:f3:2d:78:de:f8:
e5:1a:c8:5d:91:7c:e7:fa:4d:a5:93:4a:96:34:76:48:6c:5f:
ea:32:49:03:54:d7:50:66:99:89:ca:67:1e:2b:ee:e1:40:60:
e7:c8:96:65:f2:dc:d3:68:41:00:7a:2a:63:ad:5d:6e:81:9e:
b8:84:bd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:34:24 2026 by rpki-client