Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/97PCfCHy_ERcDrJV5yZfZxMR4SI.roa
File: 97PCfCHy_ERcDrJV5yZfZxMR4SI.roa (raw, json)
Hash identifier: gJMsynNcRF7eqc++DPHhkhVZIkSpUAg/xxubSEfhr6k=
Subject key identifier: F7:B3:C2:7C:21:F2:FC:44:5C:0E:B2:55:E7:26:5F:67:13:11:E1:22
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E5342AA4F37AF1C9D6845A71DA9E4382D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/97PCfCHy_ERcDrJV5yZfZxMR4SI.roa
Signing time: Sat 23 May 2026 05:15:38 +0000
ROA not before: Sat 23 May 2026 05:15:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215120
IP address blocks: 151.244.50.0/24 maxlen: 24
151.244.102.0/24 maxlen: 24
151.244.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:53:42:aa:4f:37:af:1c:9d:68:45:a7:1d:a9:e4:38:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 23 05:15:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7b3c27c21f2fc445c0eb255e7265f671311e122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2d:93:f1:c1:65:2e:e1:0d:ce:f3:85:e5:13:
4c:37:81:64:f8:31:64:e5:61:10:4a:88:f2:b0:89:
0b:a1:11:2d:90:d5:88:de:cd:f3:6b:7c:79:3c:6c:
a8:51:f8:84:fb:4e:6a:0e:6d:66:d0:e3:1e:60:7a:
9c:29:fe:32:90:35:d6:fb:71:81:2c:ed:bf:0d:ba:
cf:a7:65:e9:9e:60:bb:fc:bc:90:48:3d:b1:8e:14:
5e:b9:68:c1:6d:a3:11:1e:a8:80:bd:8b:9f:cc:d3:
9f:84:12:91:22:8c:4b:c2:7b:1c:f0:df:22:29:df:
2a:d0:da:10:a4:d5:c9:0e:4e:f1:20:f6:84:8b:1d:
48:b5:c0:5e:da:7d:e2:a3:36:8e:66:76:c8:ee:47:
df:bf:24:9c:2e:fc:53:4a:89:74:9f:7a:0b:47:d6:
16:df:33:e5:df:d4:51:61:69:ec:f6:b9:d7:12:6f:
62:02:12:83:9a:59:1b:83:e9:eb:94:ec:c4:cd:67:
82:09:7e:74:16:ed:3e:c5:44:2c:01:bc:49:62:ca:
09:00:44:06:35:20:62:6a:c4:49:9f:22:7d:6e:27:
f5:40:b7:f8:b0:b8:39:2d:79:bb:30:84:7e:a9:ee:
06:ef:07:48:ec:bd:dd:76:08:f2:b0:cf:6b:2e:7c:
dc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B3:C2:7C:21:F2:FC:44:5C:0E:B2:55:E7:26:5F:67:13:11:E1:22
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/97PCfCHy_ERcDrJV5yZfZxMR4SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.50.0/24
151.244.102.0/24
151.244.113.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:81:94:3d:ad:15:b3:c2:5d:e6:ea:27:06:af:53:33:02:c4:
ab:ff:c8:1c:a8:2b:10:1f:b5:29:d4:9f:a4:80:aa:b0:10:ee:
21:73:e6:4a:06:3b:0c:41:08:42:30:20:a8:56:f1:83:e6:40:
a1:ba:bf:07:b6:28:fb:89:4c:0c:68:83:37:f3:61:dc:f5:3c:
db:ab:2a:a7:8a:91:30:72:eb:1e:07:62:32:60:52:b5:c3:47:
e6:b2:50:5e:8f:f4:f3:33:e8:9b:c7:2b:fd:c7:0b:dc:3b:a9:
65:2d:e9:fc:1a:97:fc:ce:0a:6d:e9:32:93:ed:82:88:ef:20:
b4:b5:03:91:55:88:1d:cd:8c:ba:cf:6b:96:e5:80:f4:f7:e6:
c7:85:78:67:0c:e6:87:2e:6b:16:be:1a:6a:f9:13:ed:7e:30:
27:ba:17:5a:59:7c:84:87:62:ca:bc:72:ad:0c:17:79:d6:52:
68:ea:42:2c:28:ce:6d:09:a8:f0:3d:ab:4d:0a:a1:b0:8e:1b:
f0:63:1c:06:f4:27:ca:da:d3:bb:be:f4:50:31:80:6e:2b:2d:
11:b7:d6:e2:ca:e4:ad:1d:71:96:b3:4a:ce:e2:cd:4a:c4:9f:
50:34:1a:78:cd:9e:ca:4e:e8:68:62:2a:c2:d6:aa:26:81:ca:
e8:57:02:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:53:21 2026 by rpki-client