Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7--gTdXx3ohVDgDQfRXCXS6AzBk.roa
File: 7--gTdXx3ohVDgDQfRXCXS6AzBk.roa (raw, json)
Hash identifier: 7zbAYefm8rVdNfSjRfc7yQ/uo1VFbpmtoTjA16yTofk=
Subject key identifier: EF:EF:A0:4D:D5:F1:DE:88:55:0E:00:D0:7D:15:C2:5D:2E:80:CC:19
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A08BA53D5BBF7D9D53DFB598165EBE411F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7--gTdXx3ohVDgDQfRXCXS6AzBk.roa
Signing time: Thu 10 Sep 2026 14:07:37 +0000
ROA not before: Thu 10 Sep 2026 14:07:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213736
IP address blocks: 151.242.245.0/24 maxlen: 24
151.242.246.0/24 maxlen: 24
151.242.247.0/24 maxlen: 24
151.242.248.0/24 maxlen: 24
151.242.249.0/24 maxlen: 24
151.242.250.0/24 maxlen: 24
151.243.34.0/24 maxlen: 24
151.243.37.0/24 maxlen: 24
151.243.43.0/24 maxlen: 24
151.243.44.0/24 maxlen: 24
151.243.50.0/24 maxlen: 24
151.243.52.0/24 maxlen: 24
151.243.53.0/24 maxlen: 24
151.243.58.0/24 maxlen: 24
151.243.59.0/24 maxlen: 24
151.243.80.0/24 maxlen: 24
151.243.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:45:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:a5:3d:5b:bf:7d:9d:53:df:b5:98:16:5e:be:41:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 10 14:07:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efefa04dd5f1de88550e00d07d15c25d2e80cc19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:62:14:41:4f:38:f3:f4:f8:4f:93:83:26:
97:0c:07:bf:3b:69:3b:97:f9:f1:1b:24:3f:b6:07:
7e:00:46:a8:63:69:46:2d:d3:e3:59:95:e4:5a:85:
1b:dd:e7:53:11:68:ed:97:e9:0a:79:b5:7c:5d:ba:
bb:46:89:3d:35:b5:53:01:68:7d:fc:50:45:ce:9e:
28:c9:e6:d4:83:1f:62:c8:61:d0:d8:ea:78:be:82:
4d:4b:11:87:87:0d:3f:f6:87:28:eb:48:d8:03:91:
f7:37:bf:eb:d2:aa:55:80:f1:75:0f:9d:06:e3:da:
f9:6b:2b:b5:c0:97:02:e9:dc:15:5e:1f:0b:f4:e9:
99:5e:80:45:80:4c:7c:01:cd:41:4a:cc:47:3e:48:
af:5c:c9:78:2d:db:00:8a:ef:e4:b6:cc:6c:9f:6f:
16:40:3f:d0:ec:f8:36:0c:6b:16:5e:24:bd:e2:35:
a0:c2:a6:f9:4c:82:92:07:16:ff:5e:da:eb:e0:f9:
72:0d:b6:3e:bb:e2:64:3c:6a:c2:dc:ee:f1:28:f0:
b2:fb:0e:5d:f5:54:34:a9:c7:97:f6:de:04:ff:8d:
54:ab:78:3e:ef:6a:3d:37:a2:6a:24:b2:92:51:b9:
82:09:87:73:e8:81:92:ad:03:ff:36:17:5e:da:22:
e8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EF:A0:4D:D5:F1:DE:88:55:0E:00:D0:7D:15:C2:5D:2E:80:CC:19
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7--gTdXx3ohVDgDQfRXCXS6AzBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.245.0-151.242.250.255
151.243.34.0/24
151.243.37.0/24
151.243.43.0-151.243.44.255
151.243.50.0/24
151.243.52.0/23
151.243.58.0/23
151.243.80.0/23
Signature Algorithm: sha256WithRSAEncryption
34:72:40:94:bf:45:10:32:5b:65:a8:91:b3:7f:71:79:44:24:
e7:73:0e:d0:7e:6a:65:d2:62:c5:65:6e:8c:e5:1e:9e:b5:1f:
7f:96:ba:17:51:c6:e0:a5:63:43:60:45:91:bb:9f:09:5e:c0:
83:34:3d:44:ef:7e:81:fd:e1:80:9f:42:07:5d:8d:8c:5a:16:
68:73:0e:85:67:52:da:ce:93:7a:fa:20:e2:b0:cb:5f:f7:79:
12:d1:82:3a:6c:a8:03:fc:f2:01:c0:93:c0:6f:a6:97:c7:eb:
98:d3:50:1e:7a:36:55:4c:fe:0f:ca:43:52:6e:c2:ae:ef:74:
db:1c:31:ae:14:87:b5:ef:97:1e:89:2f:fb:d2:d0:55:75:1d:
91:0b:29:28:9e:a2:7e:35:0a:ac:8d:12:c9:4d:54:32:df:1b:
a3:71:d2:23:88:da:f5:19:31:1f:e8:59:08:29:c8:8e:ab:0a:
86:72:ac:e5:b3:24:68:0a:a9:7b:a2:0d:1f:1b:36:8b:0c:55:
d2:ea:d6:03:cf:2d:fe:3e:de:88:7f:71:2b:ed:7e:4b:36:6a:
96:da:25:32:79:9d:94:98:23:f1:2b:8a:1b:d4:b6:b7:5e:79:
9f:09:ef:89:01:ca:17:66:0d:ce:52:10:51:09:7b:ec:d8:9a:
9e:50:1e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:52:58 2026 by rpki-client