Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/E6jTKqn7DiTAWYTZ5a5xgmO07s4.roa
File: E6jTKqn7DiTAWYTZ5a5xgmO07s4.roa (raw, json)
Hash identifier: e5YlFfYflHi7/5LXjUIXkzt68MGiw8jbn6dC58NGeIk=
Subject key identifier: 13:A8:D3:2A:A9:FB:0E:24:C0:59:84:D9:E5:AE:71:82:63:B4:EE:CE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D4CCEB1970214C5688CAA9533E0D03DAA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/E6jTKqn7DiTAWYTZ5a5xgmO07s4.roa
Signing time: Thu 02 Apr 2026 06:08:27 +0000
ROA not before: Thu 02 Apr 2026 06:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14061
IP address blocks: 151.241.93.0/24 maxlen: 24
151.241.224.0/24 maxlen: 24
151.241.230.0/24 maxlen: 24
151.241.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4c:ce:b1:97:02:14:c5:68:8c:aa:95:33:e0:d0:3d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 2 06:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=13a8d32aa9fb0e24c05984d9e5ae718263b4eece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d3:bd:6b:42:eb:8b:81:25:8c:9c:3f:dc:3e:
fa:3a:89:3e:80:17:f6:70:ad:ce:a5:f2:70:1f:95:
1e:65:f4:6b:a7:00:e3:e0:75:54:af:33:a8:68:4a:
32:36:96:eb:72:24:db:8c:fe:37:36:83:5a:f2:64:
dd:5a:8b:9a:d4:bf:4b:78:f7:f6:45:48:6d:0a:3f:
ff:d6:38:97:ce:d9:41:2c:c5:41:11:e5:cc:19:10:
6b:26:16:80:3d:17:1d:c9:5a:18:31:13:cf:50:2f:
ff:0f:fe:79:6b:e9:0b:4f:7b:40:fe:c4:0a:1e:a3:
4a:56:98:88:ca:a9:52:14:1c:e9:43:3e:08:02:9a:
0d:a6:67:60:44:ab:e1:3c:85:84:35:d7:fc:43:99:
93:f1:0f:b6:f2:9c:2c:8e:d0:d7:40:b1:c7:f5:97:
85:da:ef:75:e1:57:8f:d9:0f:ef:ea:6a:50:d5:49:
87:75:f8:d1:e9:7a:3a:ef:b0:64:7d:eb:e7:e8:8e:
5d:ca:38:83:12:0d:e1:11:04:6a:fe:65:a8:e5:27:
3b:72:49:70:af:86:6f:19:02:7e:87:fc:09:4b:c7:
0a:59:40:80:9a:63:9d:4e:0f:70:a4:b9:f3:03:d0:
4a:77:b8:3a:04:49:01:4d:b6:5c:66:79:73:fe:e3:
a0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A8:D3:2A:A9:FB:0E:24:C0:59:84:D9:E5:AE:71:82:63:B4:EE:CE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/E6jTKqn7DiTAWYTZ5a5xgmO07s4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.93.0/24
151.241.224.0/24
151.241.230.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:56:38:b8:14:d8:73:20:ba:a9:01:7d:c6:86:cb:1d:62:a2:
22:ef:02:d9:9c:bf:d0:9c:6c:78:7e:9f:d2:d3:23:db:09:de:
49:46:d0:3e:a1:50:db:56:03:4c:a9:8a:5e:67:f7:c7:28:27:
c1:55:ce:1b:5f:ab:4e:77:dd:54:96:ff:65:73:65:d1:a7:17:
0c:c4:a4:a1:82:3d:56:89:be:ad:71:b7:b7:b4:43:dc:a2:0e:
01:7f:66:ca:b4:f2:ea:29:04:91:03:32:6e:1a:94:09:5c:04:
40:01:71:4e:3d:f3:12:13:ab:cb:80:80:9c:79:16:20:6e:ff:
6b:de:77:b7:2e:27:10:38:06:2a:c2:04:f4:c7:94:b7:90:de:
f5:fb:74:50:18:67:a1:5b:cd:7f:63:ab:3f:92:8b:14:47:ec:
51:08:00:82:8f:6c:46:6d:a0:61:bb:cb:e5:58:fc:58:81:57:
7f:5e:a3:8f:4e:e3:cf:24:fe:da:3a:af:8d:7f:f9:82:f4:13:
5c:48:0c:b0:16:c9:33:91:46:36:53:62:2c:2a:a9:97:e0:65:
2d:d6:d7:1e:30:4f:c3:90:7b:97:d4:7e:47:c2:74:5c:9a:17:
c9:55:92:fb:0f:8f:83:0e:a5:10:0b:bb:3c:0f:b7:93:33:99:
64:98:45:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:38:55 2026 by rpki-client