Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0llSYlZgjNHncj_yWlTEueorEYE.roa
File: 0llSYlZgjNHncj_yWlTEueorEYE.roa (raw, json)
Hash identifier: Opj0yHtvlsXj2453nNtWPxWza3IzF5dE9yjJfvo6exs=
Subject key identifier: D2:59:52:62:56:60:8C:D1:E7:72:3F:F2:5A:54:C4:B9:EA:2B:11:81
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E917E44D00835689221EB24EB416742AE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0llSYlZgjNHncj_yWlTEueorEYE.roa
Signing time: Thu 04 Jun 2026 07:17:11 +0000
ROA not before: Thu 04 Jun 2026 07:17:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202051
IP address blocks: 151.242.17.0/24 maxlen: 24
151.245.163.0/24 maxlen: 24
151.246.238.0/24 maxlen: 24
151.247.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:7e:44:d0:08:35:68:92:21:eb:24:eb:41:67:42:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 4 07:17:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d259526256608cd1e7723ff25a54c4b9ea2b1181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:30:6e:61:14:9c:f8:3a:c0:ae:86:66:92:
58:04:49:af:9d:05:cf:b4:cc:9d:81:bd:17:d4:0f:
47:47:6d:bf:60:5a:0a:8b:9f:2a:1a:6d:1a:bb:89:
a3:10:5b:5b:19:31:fd:a2:2b:f7:15:64:99:99:65:
d1:d7:be:c2:bc:14:a3:c2:ee:d2:ef:24:ed:58:61:
0f:0b:1c:fd:f2:5c:ff:da:7e:17:0a:88:a6:46:59:
b6:7b:2b:46:9b:0e:c3:c3:10:0c:14:61:08:3a:60:
31:aa:1a:b0:4f:55:75:84:04:07:99:e9:2c:64:e4:
f1:52:f7:e1:62:7f:5a:38:c5:f1:6d:3f:f1:e4:41:
e4:dc:85:62:e4:31:50:d2:94:aa:ca:81:13:33:6f:
fe:c0:4b:7b:2a:84:d8:1a:e7:1d:42:d2:3b:3c:4f:
8a:16:28:48:e6:ec:23:5d:ca:80:df:0a:87:58:af:
8d:3c:6a:f9:cc:e7:16:88:e0:d7:9d:f1:7c:0a:aa:
0d:9a:19:9f:39:ca:f3:3e:1b:98:c4:81:d5:00:97:
c3:f4:d9:ce:61:18:15:f1:65:88:c4:5b:4c:21:1a:
c3:fd:d7:9e:d4:14:65:54:9c:51:81:9c:8f:20:f5:
ed:f0:6a:ea:6f:c0:82:c3:5c:5e:ca:f0:9a:da:69:
3b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:59:52:62:56:60:8C:D1:E7:72:3F:F2:5A:54:C4:B9:EA:2B:11:81
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0llSYlZgjNHncj_yWlTEueorEYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.17.0/24
151.245.163.0/24
151.246.238.0/24
151.247.25.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e0:59:ef:36:d2:04:6a:c6:e1:e3:25:a6:da:cd:13:a2:fd:
00:65:c8:2a:63:7f:be:cd:2c:6b:d8:bb:36:88:c0:fc:43:a7:
bc:52:21:b6:db:2c:8a:d0:80:85:eb:22:74:c5:b7:5c:f9:ac:
ad:4c:1d:5d:20:a2:a8:69:dd:c9:b9:64:f3:1a:b0:5e:47:57:
d4:6b:a1:43:99:56:b6:63:3b:3e:0d:8d:b4:01:23:cd:a4:cb:
bb:cc:82:8d:0c:1b:a9:36:5e:61:b4:43:e8:df:9c:74:7c:d9:
63:98:0c:f3:8c:8f:16:dc:bb:f4:57:f8:88:93:2b:1f:e6:07:
4d:a4:46:d7:71:79:1a:2e:d7:d4:11:05:b6:f7:2a:18:8e:4f:
9d:6a:63:c7:e7:84:f0:1f:ba:9a:cd:64:8e:b1:fe:2e:08:5b:
47:4c:0d:62:df:4f:d4:65:4c:91:28:79:f6:c6:eb:b8:78:7a:
73:9e:ac:61:c4:be:12:5d:f3:f7:6c:a1:82:2c:47:21:42:e8:
0d:6a:75:98:c0:2e:ec:7d:9b:e9:66:94:c8:93:d1:7b:d7:f1:
a9:6b:5e:58:3b:76:95:04:e0:2c:a6:b9:6d:1a:25:f8:74:27:
a8:0b:87:5e:db:6a:93:06:6f:da:fa:36:68:dc:d0:67:c9:da:
42:9a:c3:06
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ6RfkTQCDVokiHrJOtBZ0KuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNjA0MDcxNzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjU5NTI2MjU2NjA4Y2QxZTc3MjNmZjI1YTU0YzRiOWVhMmIxMTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps4wbmEUnPg6wK6GZpJYBEmvnQXP
tMydgb0X1A9HR22/YFoKi58qGm0au4mjEFtbGTH9oiv3FWSZmWXR177CvBSjwu7S
7yTtWGEPCxz98lz/2n4XCoimRlm2eytGmw7DwxAMFGEIOmAxqhqwT1V1hAQHmeks
ZOTxUvfhYn9aOMXxbT/x5EHk3IVi5DFQ0pSqyoETM2/+wEt7KoTYGucdQtI7PE+K
FihI5uwjXcqA3wqHWK+NPGr5zOcWiODXnfF8CqoNmhmfOcrzPhuYxIHVAJfD9NnO
YRgV8WWIxFtMIRrD/dee1BRlVJxRgZyPIPXt8Grqb8CCw1xeyvCa2mk7CwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFNJZUmJWYIzR53I/8lpUxLnqKxGBMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvMGxsU1lsWmdqTkhuY2pfeVdsVEV1ZW9yRVlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/IRAwQA
l/WjAwQAl/buAwQAl/cZMA0GCSqGSIb3DQEBCwUAA4IBAQA84FnvNtIEasbh4yWm
2s0Tov0AZcgqY3++zSxr2Ls2iMD8Q6e8UiG22yyK0ICF6yJ0xbdc+aytTB1dIKKo
ad3JuWTzGrBeR1fUa6FDmVa2Yzs+DY20ASPNpMu7zIKNDBupNl5htEPo35x0fNlj
mAzzjI8W3Lv0V/iIkysf5gdNpEbXcXkaLtfUEQW29yoYjk+damPH54TwH7qazWSO
sf4uCFtHTA1i30/UZUyRKHn2xuu4eHpznqxhxL4SXfP3bKGCLEchQugNanWYwC7s
fZvpZpTIk9F71/Gpa15YO3aVBOAsprltGiX4dCeoC4de22qTBm/a+jZo3NBnydpC
msMG
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:18:35 2026 by rpki-client