Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Bga7mEotYkIvoIZvdwXqHawhQV4.roa
File: Bga7mEotYkIvoIZvdwXqHawhQV4.roa (raw, json)
Hash identifier: 4SX+o5MNGY7t1DfqlZkTqlBp1hStr1nAbyHlxgYT9uY=
Subject key identifier: 06:06:BB:98:4A:2D:62:42:2F:A0:86:6F:77:05:EA:1D:AC:21:41:5E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E9D207A7848373F4179A3C12B1E304E64
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Bga7mEotYkIvoIZvdwXqHawhQV4.roa
Signing time: Sat 06 Jun 2026 13:30:11 +0000
ROA not before: Sat 06 Jun 2026 13:30:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198486
IP address blocks: 151.242.18.0/24 maxlen: 24
151.242.27.0/24 maxlen: 24
151.242.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:20:7a:78:48:37:3f:41:79:a3:c1:2b:1e:30:4e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 6 13:30:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0606bb984a2d62422fa0866f7705ea1dac21415e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7a:fc:86:ce:82:68:2d:df:f5:f8:01:d8:02:
2b:f3:d8:5c:b3:01:03:ee:94:02:71:ea:14:5c:7d:
cf:6b:dd:1a:f4:3f:ff:e3:c6:d0:fc:6a:d3:dc:9c:
ae:24:f1:6e:5f:c6:08:63:52:64:b3:59:18:79:87:
eb:64:79:aa:2a:10:80:1a:cf:f8:b3:49:77:10:39:
35:62:f6:0f:fb:b7:d4:aa:65:75:98:d5:51:55:5e:
90:9a:3a:2c:ba:07:49:d6:fb:89:d5:24:3c:34:78:
23:88:3b:cd:36:e7:bd:66:a3:9d:36:a2:c9:a1:b8:
a3:fb:c7:57:99:0c:53:b5:4e:96:04:d6:1b:45:b1:
63:e5:05:76:ad:5d:8c:3d:20:2c:87:89:c5:f3:b3:
28:8c:6b:fe:e1:99:06:e4:e2:18:83:ef:2b:3c:eb:
2d:b8:c3:bb:56:49:44:df:d8:5d:37:d6:a5:9a:8e:
e5:f9:58:d7:ce:6f:e6:ac:c8:1e:46:21:90:e6:d1:
ad:f8:e1:fb:57:7f:bb:69:e1:3e:22:ec:30:59:47:
47:4a:14:61:5e:bc:f4:75:7b:79:4d:ec:b0:b1:1d:
b8:3b:be:11:6e:93:c3:57:0c:63:72:53:ec:69:ff:
00:4f:a6:20:0c:e6:74:94:57:3e:5a:eb:68:a1:b9:
b4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:06:BB:98:4A:2D:62:42:2F:A0:86:6F:77:05:EA:1D:AC:21:41:5E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Bga7mEotYkIvoIZvdwXqHawhQV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.18.0/24
151.242.27.0/24
151.242.32.0/24
Signature Algorithm: sha256WithRSAEncryption
61:25:17:e5:91:b9:51:a9:19:58:10:60:90:a5:5c:af:52:bd:
3a:65:02:14:ea:79:6e:60:b9:0e:5a:50:37:ec:1b:21:de:b4:
72:8d:d7:91:22:06:22:5f:15:74:60:08:c3:11:d5:a9:22:92:
71:52:11:e4:81:07:a7:86:04:d2:09:36:a2:b4:1d:b3:41:e4:
c6:08:45:80:0b:c2:e3:0d:ef:cb:01:a3:c4:82:8e:01:7c:45:
e7:2f:8e:48:62:65:57:93:6b:e3:01:b7:6d:9b:3d:ff:bc:3f:
51:20:6c:da:8c:ef:56:03:22:d7:28:56:da:68:10:2a:f0:22:
f0:2d:e2:20:fd:36:3f:94:b1:92:e2:79:e5:a1:d6:dc:fd:0f:
c5:a2:c3:90:9b:5c:7f:46:8c:96:d2:d3:30:32:50:68:a3:64:
a2:d2:3e:82:3f:4f:1a:19:08:1c:98:af:ef:63:b8:d4:ad:50:
ec:5d:e2:ab:88:76:fe:c0:1c:b4:57:3b:cf:95:96:54:22:87:
d7:ce:4e:a0:4a:af:b7:83:92:43:8f:47:aa:79:fc:f7:89:bc:
8d:fb:46:c1:ae:8f:cf:b1:25:62:a2:cc:8a:42:81:01:52:74:
0d:74:aa:90:c1:ba:b8:c3:3f:86:bd:12:87:59:8d:87:5b:46:
ab:46:24:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:07:06 2026 by rpki-client