Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/D70358HTP_fYutyhU31NH-mUjDs.roa
File: D70358HTP_fYutyhU31NH-mUjDs.roa (raw, json)
Hash identifier: kAQ3cYMywC33meHNzYyPdjSU6zqON/nUeo8/bqZZVgw=
Subject key identifier: 0F:BD:37:E7:C1:D3:3F:F7:D8:BA:DC:A1:53:7D:4D:1F:E9:94:8C:3B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A09EBF2A29AD089ACDD9435505C8CE0AD5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/D70358HTP_fYutyhU31NH-mUjDs.roa
Signing time: Mon 14 Sep 2026 07:08:43 +0000
ROA not before: Mon 14 Sep 2026 07:08:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 151.241.213.0/24 maxlen: 24
151.241.222.0/24 maxlen: 24
151.244.48.0/24 maxlen: 24
151.245.89.0/24 maxlen: 24
151.245.123.0/24 maxlen: 24
151.245.124.0/24 maxlen: 24
151.245.125.0/24 maxlen: 24
151.246.147.0/24 maxlen: 24
151.246.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:45:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:bf:2a:29:ad:08:9a:cd:d9:43:55:05:c8:ce:0a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 14 07:08:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fbd37e7c1d33ff7d8badca1537d4d1fe9948c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:28:94:f6:a7:e2:60:0a:45:92:2c:b5:da:e7:
b1:91:f3:f5:03:e3:6a:db:11:bf:fb:f8:90:93:c6:
68:03:3d:5c:4f:fd:67:fd:84:08:02:89:bd:22:a7:
50:9f:f4:1c:67:15:a6:be:46:98:e0:f6:24:58:c2:
46:46:c9:e3:bb:c5:a1:8c:18:53:64:09:59:96:b5:
4c:22:fb:16:3e:c6:78:cb:d5:96:11:dd:4c:08:d7:
b7:df:f0:4d:f4:de:cc:da:ce:a5:ab:f5:0d:20:b0:
0d:17:10:6a:82:b6:2e:17:96:1a:ad:f5:58:db:95:
f7:18:e6:fc:94:4b:bd:02:05:13:5b:13:d5:72:d0:
d0:a6:ba:e2:f2:aa:09:a7:7a:cf:4d:26:47:3c:61:
1e:a3:5a:8d:a7:a6:5c:f3:bd:ab:8c:53:e9:a3:b8:
4b:62:72:0d:ac:17:61:73:df:92:9b:36:95:b9:1d:
43:82:93:8a:0a:1b:82:00:43:f1:b6:51:4b:a7:eb:
ea:fd:c4:c9:ea:3e:c0:7b:f3:82:b1:99:54:41:fd:
8a:0d:dc:7d:f0:ce:29:69:02:4c:10:8e:f6:87:e3:
c2:36:00:86:eb:ad:68:33:5f:cc:ae:e9:18:ef:b2:
e6:4c:11:cc:fe:bc:ee:cb:5e:06:4c:02:d4:be:a7:
08:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BD:37:E7:C1:D3:3F:F7:D8:BA:DC:A1:53:7D:4D:1F:E9:94:8C:3B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/D70358HTP_fYutyhU31NH-mUjDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.213.0/24
151.241.222.0/24
151.244.48.0/24
151.245.89.0/24
151.245.123.0-151.245.125.255
151.246.147.0/24
151.246.203.0/24
Signature Algorithm: sha256WithRSAEncryption
55:34:53:4d:6b:dd:d2:73:c9:d3:c9:7a:7b:9d:8b:7c:89:47:
8f:bf:5d:ff:a0:ad:a0:0e:06:97:65:36:ed:77:3e:7d:1c:ee:
f3:bb:bb:e5:41:e8:c4:8c:ea:ed:e1:0e:38:2d:86:6f:b8:a3:
68:4a:e6:83:ab:1a:08:4b:1d:0f:c2:a4:a1:92:ae:0a:ba:ae:
b9:8e:1c:ab:02:68:9b:2c:16:16:07:32:34:98:b7:eb:ef:61:
6a:0e:59:5e:f1:96:83:b0:b9:e1:79:9a:f0:fc:2b:a6:02:ad:
18:fc:e0:0c:80:ff:33:09:d8:0f:ad:70:78:44:9b:3c:94:8a:
ed:83:3c:73:46:2c:ca:d2:86:cf:73:20:31:8f:50:34:09:dc:
e6:f7:d1:76:80:e7:ef:00:4f:89:48:fd:ab:ea:ac:44:65:a6:
0f:6e:ac:9d:e6:e8:08:b6:0e:4c:cc:38:e9:bc:4b:b8:8f:ce:
75:c2:66:c4:83:2e:ee:e9:f1:e3:55:14:e4:0b:2c:08:86:fb:
d0:3d:9b:46:81:85:9d:0a:9c:8f:90:88:f3:8c:4f:27:3f:9e:
20:b9:f2:a0:8b:25:2f:bb:6b:49:61:cd:55:d8:f4:44:f2:35:
dc:f8:74:09:f4:27:6f:10:24:8b:ab:ed:1e:ee:33:f0:53:3b:
cd:33:f4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:53:38 2026 by rpki-client