Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5o3JCuQfTOg8gagHdxRvzlwAB04.roa
File: 5o3JCuQfTOg8gagHdxRvzlwAB04.roa (raw, json)
Hash identifier: S2cOXdSMDXSoAbS3fWEBwm/qYzTQkEftbdWO+gYwb14=
Subject key identifier: E6:8D:C9:0A:E4:1F:4C:E8:3C:81:A8:07:77:14:6F:CE:5C:00:07:4E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CAE0D8D1A37F9D61DEB1B95ACFE74BBE5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5o3JCuQfTOg8gagHdxRvzlwAB04.roa
Signing time: Mon 02 Mar 2026 10:17:29 +0000
ROA not before: Mon 02 Mar 2026 10:17:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201907
IP address blocks: 151.247.41.0/24 maxlen: 24
151.247.44.0/24 maxlen: 24
151.247.45.0/24 maxlen: 24
151.247.47.0/24 maxlen: 24
151.247.48.0/24 maxlen: 24
151.247.82.0/24 maxlen: 24
151.247.91.0/24 maxlen: 24
151.247.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:43:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:0d:8d:1a:37:f9:d6:1d:eb:1b:95:ac:fe:74:bb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 2 10:17:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e68dc90ae41f4ce83c81a80777146fce5c00074e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:ab:d4:8c:3f:59:6b:3c:c3:93:4a:b6:dd:
78:02:f8:2e:47:e6:02:d7:89:90:04:e2:6d:46:07:
08:32:73:0b:b6:b6:e0:09:1c:2d:f2:c2:13:cf:54:
64:92:30:17:e4:ca:2b:ef:3a:11:6f:a6:83:24:d8:
d9:d4:0e:03:67:56:8d:11:b6:92:aa:8e:e5:32:86:
bb:83:8d:38:b5:c9:6a:a9:d1:9e:52:9c:64:9a:cf:
4f:95:10:de:03:79:ea:ff:35:4b:1b:83:f2:3a:71:
46:bb:43:73:2a:6b:15:4f:97:e4:b3:4c:7b:0f:f7:
b2:d4:b6:d5:83:4e:14:78:8e:9b:4a:25:06:7b:08:
7e:92:0f:6e:3f:a0:08:2a:ed:d6:52:f6:45:e3:5c:
c2:51:0b:cd:2e:24:cd:62:64:6b:07:9d:bc:b2:1b:
fa:be:5e:86:2b:71:02:57:5d:81:2d:07:99:42:92:
6f:45:e3:cb:02:20:1a:45:74:1a:c1:01:30:08:b8:
33:43:45:15:03:8d:9e:91:1d:47:bc:c7:2d:42:9c:
29:11:63:92:cc:ce:0f:50:39:5b:4d:c1:62:17:1e:
88:09:e9:84:b7:16:dd:39:81:b8:b8:41:25:18:e6:
e3:ad:26:da:4e:f2:fc:16:5c:4c:56:ba:86:fb:90:
e3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8D:C9:0A:E4:1F:4C:E8:3C:81:A8:07:77:14:6F:CE:5C:00:07:4E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5o3JCuQfTOg8gagHdxRvzlwAB04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.41.0/24
151.247.44.0/23
151.247.47.0-151.247.48.255
151.247.82.0/24
151.247.91.0/24
151.247.94.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:b7:e0:66:d6:66:bd:41:92:f3:ad:be:e6:23:49:94:db:23:
43:40:d4:00:47:8d:d4:ba:9f:c5:65:e3:11:5e:6c:97:76:7c:
e9:b9:b4:63:f1:09:e0:48:bb:78:25:ee:ee:cc:66:69:d2:9a:
a6:05:e6:17:8c:2e:2b:f9:3a:dd:f8:3a:1e:5d:1a:fa:fc:91:
e6:3d:71:2d:4a:fa:1d:d1:2c:d5:fc:3c:5d:d5:93:a7:b4:a8:
ab:7b:89:dc:6d:9a:7e:15:e9:e5:5c:fa:9a:b2:10:48:2a:1d:
03:59:3e:24:aa:2c:04:0c:be:78:e3:e0:cd:bc:7e:58:d6:03:
81:8d:ce:e5:ba:5b:73:bb:b6:67:50:cd:d2:57:fc:d7:3e:67:
f7:78:12:08:60:ac:37:af:7c:61:0f:6c:bb:38:e2:a8:ff:4e:
d9:22:f1:65:67:f9:41:af:21:a8:e4:44:1a:d4:1d:79:55:e7:
98:b4:1b:13:2b:ff:a2:0d:cf:fb:fb:4d:2e:65:a6:be:9c:2a:
3a:58:1f:29:b4:79:e4:42:a7:15:20:ba:d9:05:5f:24:4e:29:
f5:bf:2e:2e:99:10:9e:14:a0:67:98:c9:32:02:8e:cf:41:fa:
2a:2b:22:e3:c3:33:ed:4c:e8:1d:1b:49:bf:45:b1:f7:1f:3a:
00:ec:ba:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:19:38 2026 by rpki-client