Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7uOZ-lAQX1pt-_p__TOr9C4py4Q.roa
File: 7uOZ-lAQX1pt-_p__TOr9C4py4Q.roa (raw, json)
Hash identifier: dBnNyKAhd5mx+jhGLz10Iuv2tobO8vqj1U1qD5hesPk=
Subject key identifier: EE:E3:99:FA:50:10:5F:5A:6D:FB:FA:7F:FD:33:AB:F4:2E:29:CB:84
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019C9DF5A88E19145A3355FDC42DAA4DFCB1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7uOZ-lAQX1pt-_p__TOr9C4py4Q.roa
Signing time: Fri 27 Feb 2026 07:17:28 +0000
ROA not before: Fri 27 Feb 2026 07:17:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9457
IP address blocks: 151.246.129.0/24 maxlen: 24
151.246.157.0/24 maxlen: 24
151.247.79.0/24 maxlen: 24
151.247.95.0/24 maxlen: 24
151.247.100.0/24 maxlen: 24
151.247.111.0/24 maxlen: 24
151.247.174.0/24 maxlen: 24
151.247.178.0/24 maxlen: 24
151.247.180.0/24 maxlen: 24
151.247.237.0/24 maxlen: 24
151.247.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9d:f5:a8:8e:19:14:5a:33:55:fd:c4:2d:aa:4d:fc:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 27 07:17:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eee399fa50105f5a6dfbfa7ffd33abf42e29cb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:99:b4:34:51:71:fb:39:00:04:0c:e3:b4:db:
19:27:77:71:b3:99:9a:0e:6c:d6:f4:ee:38:b0:21:
c8:80:7b:93:36:d8:d7:be:1c:80:82:8b:24:a7:76:
bf:af:88:36:0a:40:9e:1a:51:f8:bc:69:c4:a2:0b:
a4:2a:1e:ce:aa:55:2b:5a:e7:d0:ac:30:ee:78:29:
b6:a2:a2:14:1d:78:7d:f9:88:e0:d5:76:65:38:df:
c9:15:04:c2:ff:ad:ae:4e:dd:b5:51:1b:f2:8f:a1:
08:bc:d9:cf:2e:3f:60:80:c0:6c:fa:59:46:9f:1b:
29:28:8d:65:d4:c8:d7:5e:52:42:4f:6e:88:94:b6:
57:75:a6:5d:b9:df:8d:65:31:79:67:af:e0:bd:5a:
51:84:66:eb:ea:5d:7e:e4:c1:b5:27:f9:f7:65:63:
69:17:de:c5:3d:c4:d6:b7:54:7a:9b:0f:2f:d6:bb:
e3:91:dd:66:0d:b4:e0:a1:e4:0e:95:cf:a4:c9:31:
f9:9b:f2:0d:8f:29:b9:4f:f0:5f:23:57:b4:7b:4b:
11:b0:9f:3c:1d:a3:39:97:fd:1a:58:25:df:ce:7c:
29:08:e6:22:11:59:42:34:db:63:6a:92:2c:b2:29:
c5:f9:fe:17:d5:43:8f:3e:d4:f0:04:cb:d6:9f:48:
e8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E3:99:FA:50:10:5F:5A:6D:FB:FA:7F:FD:33:AB:F4:2E:29:CB:84
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7uOZ-lAQX1pt-_p__TOr9C4py4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.129.0/24
151.246.157.0/24
151.247.79.0/24
151.247.95.0/24
151.247.100.0/24
151.247.111.0/24
151.247.174.0/24
151.247.178.0/24
151.247.180.0/24
151.247.237.0/24
151.247.251.0/24
Signature Algorithm: sha256WithRSAEncryption
15:0f:56:e5:57:53:bf:88:da:41:b9:28:f5:4e:d3:63:0f:53:
e5:a0:b5:3b:1f:61:eb:0c:86:af:f8:4c:99:1e:08:e1:1f:b4:
e2:6e:f9:2f:69:a8:ec:2d:0f:12:5f:54:e4:27:be:37:6e:56:
bc:18:00:3f:19:4d:ec:97:12:bb:df:91:28:07:13:5a:4e:60:
e6:ee:7d:14:95:b8:46:80:46:3a:81:9a:af:a9:c4:1a:bf:63:
0a:cb:5a:86:66:08:1f:29:fe:e2:4f:37:c3:96:1b:3a:3e:9b:
28:3b:ab:08:0e:fa:8c:04:87:9d:59:2f:d2:7e:1e:b5:c3:e6:
64:74:a7:74:ec:cb:c5:d8:ff:8a:e6:a5:95:98:2a:73:73:da:
52:09:c0:2e:1c:67:4f:de:28:47:8c:db:a5:e2:90:c4:91:23:
58:ee:ed:9d:43:d7:46:ac:13:55:dd:6e:ef:5d:16:4c:4c:27:
55:dc:8e:76:df:ff:73:72:8c:4b:86:98:5e:ea:52:65:05:c2:
44:5f:23:d6:af:21:1c:03:46:8e:9f:d9:ce:7f:b0:d0:f9:c3:
bd:c6:3c:18:4e:aa:7a:e9:e0:48:5a:d3:45:59:c3:02:60:49:
9a:1b:cc:f0:0e:46:64:6f:78:82:b7:c1:54:42:e8:aa:84:68:
10:40:88:75
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZyd9aiOGRRaM1X9xC2qTfyxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwMjI3MDcxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWUzOTlmYTUwMTA1ZjVhNmRmYmZhN2ZmZDMzYWJmNDJlMjljYjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Zm0NFFx+zkABAzjtNsZJ3dxs5ma
DmzW9O44sCHIgHuTNtjXvhyAgoskp3a/r4g2CkCeGlH4vGnEogukKh7OqlUrWufQ
rDDueCm2oqIUHXh9+Yjg1XZlON/JFQTC/62uTt21URvyj6EIvNnPLj9ggMBs+llG
nxspKI1l1MjXXlJCT26IlLZXdaZdud+NZTF5Z6/gvVpRhGbr6l1+5MG1J/n3ZWNp
F97FPcTWt1R6mw8v1rvjkd1mDbTgoeQOlc+kyTH5m/INjym5T/BfI1e0e0sRsJ88
HaM5l/0aWCXfznwpCOYiEVlCNNtjapIssinF+f4X1UOPPtTwBMvWn0jo7QIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFO7jmfpQEF9abfv6f/0zq/QuKcuEMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvN3VPWi1sQVFYMXB0LV9wX19UT3I5QzRweTRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAl/aBAwQA
l/adAwQAl/dPAwQAl/dfAwQAl/dkAwQAl/dvAwQAl/euAwQAl/eyAwQAl/e0AwQA
l/ftAwQAl/f7MA0GCSqGSIb3DQEBCwUAA4IBAQAVD1blV1O/iNpBuSj1TtNjD1Pl
oLU7H2HrDIav+EyZHgjhH7TibvkvaajsLQ8SX1TkJ743bla8GAA/GU3slxK735Eo
BxNaTmDm7n0UlbhGgEY6gZqvqcQav2MKy1qGZggfKf7iTzfDlhs6PpsoO6sIDvqM
BIedWS/Sfh61w+ZkdKd07MvF2P+K5qWVmCpzc9pSCcAuHGdP3ihHjNul4pDEkSNY
7u2dQ9dGrBNV3W7vXRZMTCdV3I523/9zcoxLhphe6lJlBcJEXyPWryEcA0aOn9nO
f7DQ+cO9xjwYTqp66eBIWtNFWcMCYEmaG8zwDkZkb3iCt8FUQuiqhGgQQIh1
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:15:26 2026 by rpki-client