Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6ZIXwMKG3E1YC5BR1qUXxrdyrR4.roa
File: 6ZIXwMKG3E1YC5BR1qUXxrdyrR4.roa (raw, json)
Hash identifier: y506cVRiO7DPlkpiQGdCj2tKIyp2lwc9FtiibYmtlcY=
Subject key identifier: E9:92:17:C0:C2:86:DC:4D:58:0B:90:51:D6:A5:17:C6:B7:72:AD:1E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EA5B4D2460834DAD41B6189D810C2F6D2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6ZIXwMKG3E1YC5BR1qUXxrdyrR4.roa
Signing time: Mon 08 Jun 2026 05:29:11 +0000
ROA not before: Mon 08 Jun 2026 05:29:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63793
IP address blocks: 151.243.184.0/24 maxlen: 24
151.245.178.0/24 maxlen: 24
151.247.75.0/24 maxlen: 24
151.247.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a5:b4:d2:46:08:34:da:d4:1b:61:89:d8:10:c2:f6:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 8 05:29:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e99217c0c286dc4d580b9051d6a517c6b772ad1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:44:6b:e8:83:a0:18:d4:6d:30:5d:6e:07:
78:9f:40:be:8c:20:45:12:21:69:64:e2:5d:3c:cb:
49:74:0f:81:a8:05:23:54:53:20:f7:dd:8a:32:a9:
34:b7:a7:13:05:f9:d4:12:c0:23:06:52:40:3c:35:
c8:8b:9c:6d:bd:ed:3c:23:45:1f:fa:11:99:c6:0c:
08:7b:86:5d:0c:e3:3f:42:a5:b4:85:94:54:cc:c6:
4e:2b:1c:be:8d:94:7f:b4:58:5b:66:b1:d8:81:dc:
ba:f9:00:1c:52:bf:01:6e:fe:1a:ac:63:a4:11:dc:
92:52:f0:23:50:51:ee:51:1c:23:fe:8f:fa:44:f8:
20:bb:af:9f:4a:f7:2f:19:92:88:4c:33:7d:9b:55:
85:eb:4a:0f:f0:fb:66:ce:06:df:84:82:1e:22:27:
9d:00:29:51:20:42:e6:0c:df:5e:9c:6c:de:fa:ab:
54:d9:88:0b:43:c3:d4:43:a6:07:03:67:c5:43:fc:
af:16:dd:da:f3:84:e9:bf:2b:79:f3:15:ba:ac:46:
db:9e:cb:c6:e9:63:c3:5c:28:5c:d1:3c:29:64:30:
b4:57:ea:b2:64:53:3d:95:51:d2:7a:99:75:cc:27:
b3:67:05:26:52:33:53:f7:b6:3b:bb:5c:35:d9:fc:
fc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:92:17:C0:C2:86:DC:4D:58:0B:90:51:D6:A5:17:C6:B7:72:AD:1E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6ZIXwMKG3E1YC5BR1qUXxrdyrR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.184.0/24
151.245.178.0/24
151.247.75.0/24
151.247.160.0/24
Signature Algorithm: sha256WithRSAEncryption
30:42:a5:7c:c5:c3:e3:be:42:eb:aa:94:4d:93:ad:a4:a3:25:
eb:ff:f5:f3:86:6a:3f:58:4b:bc:66:98:fd:5b:28:6b:d0:ff:
43:1c:48:dd:e8:a3:03:b5:97:f4:9c:99:0c:16:fd:1d:4a:e8:
d2:29:cf:de:ab:41:0d:a1:07:97:b2:23:de:b2:4e:f9:71:ab:
04:06:5e:70:3d:4e:17:f9:69:b0:bd:7e:28:db:b5:25:c4:ec:
a2:ec:65:32:d3:60:f8:15:51:3f:d8:f8:12:75:ea:8b:85:6d:
79:0e:2f:80:6b:81:6d:4c:ac:57:c6:3e:1d:9f:0d:ee:cc:df:
72:14:96:ba:7c:df:85:2d:20:3a:85:d8:c8:1b:9b:33:a7:49:
36:50:47:88:00:74:6f:ad:6e:b2:45:4b:bd:e8:df:11:b8:02:
60:6e:c9:08:1f:d7:74:19:2e:23:cc:76:e4:c9:6d:94:16:eb:
5f:88:47:4b:2d:22:cb:20:ef:4e:5f:4a:c9:36:14:df:d1:4b:
e8:ab:a2:93:5b:56:58:6d:79:16:33:58:53:d4:eb:bd:59:50:
5d:37:19:30:94:83:44:16:55:ca:d5:13:ef:4e:85:38:a6:a3:
3c:61:e3:d4:6b:c3:fb:96:bb:e2:d7:ea:b1:79:9a:a0:3b:cb:
d1:6a:6a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:39:49 2026 by rpki-client