Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/60JSo2cPhUObRlc0UkW1kY4rCGQ.roa
File: 60JSo2cPhUObRlc0UkW1kY4rCGQ.roa (raw, json)
Hash identifier: FQpGVoGf4Q2/poo2aY1WwqEMNnpyzAco6cLiHM/uNWI=
Subject key identifier: EB:42:52:A3:67:0F:85:43:9B:46:57:34:52:45:B5:91:8E:2B:08:64
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EACE07A1FD824B2B901549CEEF56D684A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/60JSo2cPhUObRlc0UkW1kY4rCGQ.roa
Signing time: Tue 09 Jun 2026 14:54:12 +0000
ROA not before: Tue 09 Jun 2026 14:54:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402221
IP address blocks: 151.246.128.0/24 maxlen: 24
151.246.163.0/24 maxlen: 24
151.247.1.0/24 maxlen: 24
151.247.94.0/24 maxlen: 24
151.247.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:e0:7a:1f:d8:24:b2:b9:01:54:9c:ee:f5:6d:68:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 9 14:54:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb4252a3670f85439b4657345245b5918e2b0864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6c:56:0b:0b:fb:15:70:99:66:5d:df:88:e0:
80:8f:55:8a:25:53:67:df:81:07:81:f2:66:a3:d7:
56:7d:fb:e3:54:79:9a:da:20:f2:0d:48:0d:c9:51:
b5:65:9e:fa:8c:86:74:40:61:21:58:97:95:b2:a6:
56:45:98:3f:23:4b:68:0c:29:84:e8:7f:ab:58:69:
ff:f6:56:8e:03:f2:0b:1f:9c:64:f2:e9:8e:fb:d3:
d5:ce:48:d7:bc:39:0a:7b:d0:33:94:e8:17:82:3c:
e3:86:24:87:ec:cb:77:39:c5:ff:d4:a0:8c:52:4f:
86:9d:51:60:38:01:a5:d3:71:4a:60:d2:55:34:7b:
8e:de:a0:ce:10:fc:5a:4b:d2:04:8a:15:84:42:c4:
85:95:f2:6c:b9:ae:1c:2e:a0:2c:7a:0f:8c:d1:31:
5d:19:bc:73:0b:44:91:85:95:7a:a1:43:09:55:e0:
65:ab:7d:9c:c4:27:93:2f:74:e4:94:16:05:8b:f4:
e7:9b:2a:42:ba:1f:79:20:c2:e8:75:8c:a7:f8:2d:
b6:67:5c:d7:41:1c:52:1b:b4:7d:ed:77:7f:d9:b3:
10:d2:04:97:c1:9d:1e:67:69:7f:60:8b:62:08:44:
87:48:e7:ac:54:38:f3:f8:28:8c:fa:1f:28:b9:31:
6b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:42:52:A3:67:0F:85:43:9B:46:57:34:52:45:B5:91:8E:2B:08:64
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/60JSo2cPhUObRlc0UkW1kY4rCGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.128.0/24
151.246.163.0/24
151.247.1.0/24
151.247.94.0/24
151.247.103.0/24
Signature Algorithm: sha256WithRSAEncryption
41:f7:28:fd:3a:51:e6:e5:66:e4:57:f8:09:0a:37:23:41:e6:
f1:05:17:54:ab:eb:01:e5:e2:57:4a:06:bc:f8:57:2f:c3:f6:
6e:f9:42:31:e2:7a:36:32:8a:df:09:9e:ca:79:80:c4:d6:4e:
cb:9f:ee:ac:0f:38:06:01:67:18:03:e9:b5:48:54:f2:3e:be:
59:4a:d0:b6:6f:e3:b4:f0:e4:86:75:50:81:21:97:31:04:0e:
f7:56:4e:43:16:d6:c0:9c:09:cd:20:79:7a:cc:88:91:98:cb:
f0:80:bc:cd:8c:b3:b8:a4:ad:12:71:5a:e8:f4:17:a4:80:93:
b5:d4:2f:83:64:93:6b:83:28:c8:cc:7c:fd:51:b5:f2:83:1f:
64:70:82:f8:78:b9:c3:3c:3c:12:e6:6e:c3:7d:23:30:ee:18:
b2:aa:2d:df:6c:2a:69:ea:97:0d:a8:38:b2:02:b3:e4:ff:8b:
ba:dc:39:59:bf:64:39:f3:4e:59:9f:f7:78:6f:4a:26:6b:34:
76:74:3b:ee:e7:ad:27:31:c9:5a:54:ca:76:e1:18:57:db:9e:
35:20:d7:a1:7b:d4:78:68:6c:5d:46:20:7b:c3:ac:6f:28:55:
ed:fc:14:4e:fe:bd:5e:08:44:69:4e:8a:dd:86:4e:1f:f9:d0:
1d:99:39:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:41:50 2026 by rpki-client