Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CgxUuH_v6smiBoMck_WkmdmieOY.roa
File: CgxUuH_v6smiBoMck_WkmdmieOY.roa (raw, json)
Hash identifier: 9qvnvQ3MtAN4J9X9Bnz1VjpV7j4MKi7KGK3+A8AU/1k=
Subject key identifier: 0A:0C:54:B8:7F:EF:EA:C9:A2:06:83:1C:93:F5:A4:99:D9:A2:78:E6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D4CD25BD9BC4B78ACABA85DE11D584661
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CgxUuH_v6smiBoMck_WkmdmieOY.roa
Signing time: Thu 02 Apr 2026 06:12:27 +0000
ROA not before: Thu 02 Apr 2026 06:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 393406
IP address blocks: 151.240.160.0/24 maxlen: 24
151.241.19.0/24 maxlen: 24
151.241.45.0/24 maxlen: 24
151.241.110.0/24 maxlen: 24
151.241.231.0/24 maxlen: 24
151.244.89.0/24 maxlen: 24
151.245.74.0/24 maxlen: 24
151.245.87.0/24 maxlen: 24
151.245.198.0/24 maxlen: 24
151.245.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4c:d2:5b:d9:bc:4b:78:ac:ab:a8:5d:e1:1d:58:46:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 2 06:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a0c54b87fefeac9a206831c93f5a499d9a278e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5d:0d:f1:e4:56:33:29:a4:20:79:d5:09:49:
82:17:35:4b:62:c6:63:18:09:67:ee:5e:bc:1f:67:
0c:f9:24:5a:89:d5:98:79:ff:33:d1:78:7e:d3:24:
18:76:fe:c9:60:92:14:68:29:af:b2:02:37:6d:b4:
f5:d8:e3:b9:87:93:34:b9:86:24:f8:7a:fc:c6:4e:
68:e5:36:30:87:9b:8a:75:7c:d3:e1:6f:ca:7a:0c:
c3:65:9a:0c:2e:55:41:08:60:f5:df:25:3c:33:4f:
ec:be:c5:41:1e:03:df:ce:96:99:21:9b:12:b4:0f:
b3:97:76:0e:2b:ee:95:05:2e:e1:6d:1c:93:b6:1a:
99:2e:9e:75:23:2f:4e:c2:20:b4:04:37:79:58:bd:
a0:62:08:a7:e6:0f:b0:6c:b2:da:9f:8f:7b:38:00:
f9:e7:37:2f:01:7d:6f:21:a0:d6:ca:cc:d5:37:b5:
71:ae:e6:2f:34:ac:f6:68:c7:d2:e8:4f:ba:ce:89:
33:23:73:2e:e9:fc:d4:47:0e:89:0a:f6:dc:c2:ef:
43:96:de:37:d3:96:ac:6e:97:35:6b:5a:2c:e3:e6:
04:70:b8:d9:cd:f0:b8:53:83:e4:47:28:39:ce:bc:
5e:51:80:9a:70:44:bc:68:d1:32:cd:93:d9:2d:63:
26:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0C:54:B8:7F:EF:EA:C9:A2:06:83:1C:93:F5:A4:99:D9:A2:78:E6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CgxUuH_v6smiBoMck_WkmdmieOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.160.0/24
151.241.19.0/24
151.241.45.0/24
151.241.110.0/24
151.241.231.0/24
151.244.89.0/24
151.245.74.0/24
151.245.87.0/24
151.245.198.0/24
151.245.213.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:8b:6c:88:1d:7b:62:1a:c3:1e:87:89:18:92:9e:aa:3c:bd:
f4:7b:88:73:9b:e6:ca:3c:fa:de:2f:2a:1f:41:e4:32:ff:41:
29:e5:46:9e:1d:19:df:02:4d:32:f3:a3:ab:38:f5:90:e9:bc:
1a:d2:25:82:92:f1:d6:f0:ee:36:6a:7b:85:b1:2f:14:2f:34:
84:25:7f:92:12:8b:c5:15:8c:8e:cf:cb:8e:db:eb:c4:f4:62:
cc:57:11:b2:56:e3:5d:4b:56:3b:91:9f:18:31:c7:0e:c0:be:
a5:4c:05:c3:f8:8d:9b:50:55:3c:25:cb:a8:ae:04:a0:81:5f:
be:62:cc:42:d6:bd:f2:42:ec:7c:49:13:2e:a0:c8:f7:f5:d2:
a6:b1:54:d4:2c:7b:2b:20:4f:6e:06:60:21:13:3d:e5:ec:46:
5c:af:5a:7c:2f:c4:8e:15:01:38:25:ef:38:f9:b5:10:e2:21:
28:71:41:c4:b3:af:c6:99:b7:62:7f:a6:6f:70:74:88:a5:b4:
bc:29:52:bf:0f:30:59:f3:7e:df:a4:41:e2:0a:dc:1c:d9:b3:
90:5c:73:81:7e:fd:f9:9a:33:dc:bf:3e:8d:70:4f:e1:b1:95:
4f:65:98:32:6c:fb:10:d1:b9:d7:24:68:13:d3:1b:c6:58:31:
98:7a:4b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:13:16 2026 by rpki-client