Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FTEsy07M2VddZsQTo1UzDZzxtm0.roa
File: FTEsy07M2VddZsQTo1UzDZzxtm0.roa (raw, json)
Hash identifier: KDP5JbIyqzX0ZH38/JVbqgsEX5AMrDe3xJMdJEYVftU=
Subject key identifier: 15:31:2C:CB:4E:CC:D9:57:5D:66:C4:13:A3:55:33:0D:9C:F1:B6:6D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019C228389EC4253E1A77E7D2950B2CF5199
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FTEsy07M2VddZsQTo1UzDZzxtm0.roa
Signing time: Tue 03 Feb 2026 07:59:31 +0000
ROA not before: Tue 03 Feb 2026 07:59:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137517
IP address blocks: 151.240.120.0/24 maxlen: 24
151.241.20.0/24 maxlen: 24
151.243.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:22:83:89:ec:42:53:e1:a7:7e:7d:29:50:b2:cf:51:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 3 07:59:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15312ccb4eccd9575d66c413a355330d9cf1b66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b6:16:25:2d:95:73:c9:c9:83:84:68:ac:c5:
f8:ca:8b:6f:56:9b:18:1d:22:f2:dc:59:1c:98:be:
86:eb:b5:db:b6:20:8e:b6:a0:b2:6d:68:4b:d0:29:
00:2e:3c:ab:7b:53:0c:7c:1c:b5:47:8f:3e:d0:85:
55:eb:f8:2d:5d:73:15:a2:43:06:78:f8:87:1f:c6:
63:e4:34:db:9a:77:40:1e:a7:88:f7:8d:5f:35:dc:
e2:8f:cd:c0:fc:dd:d8:40:02:c6:3e:de:bb:60:2d:
0b:2c:81:83:f5:02:06:d3:9e:b0:85:5f:66:e5:6f:
c6:0d:89:b7:8c:fb:a2:cf:3b:da:10:3c:ef:5d:a7:
28:f0:21:54:e4:25:e7:8f:c2:15:fe:5a:3a:df:66:
85:44:bc:4f:f6:b8:6a:a2:35:4c:af:74:50:16:a8:
33:af:64:4b:b6:2c:5c:1f:fe:ea:69:f1:23:00:20:
b6:62:a9:24:a3:f9:8a:ae:68:16:e9:5c:b5:5c:b7:
2c:da:25:c0:f1:8b:77:d8:05:9e:07:35:b1:50:40:
b4:74:18:eb:0c:98:c4:c8:bc:b9:91:f2:b7:42:b6:
21:53:c8:56:86:a7:2c:41:9a:b4:f9:e9:ce:60:9b:
2a:f2:f2:41:de:03:32:d9:7b:35:81:f1:26:e4:7e:
c1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:31:2C:CB:4E:CC:D9:57:5D:66:C4:13:A3:55:33:0D:9C:F1:B6:6D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FTEsy07M2VddZsQTo1UzDZzxtm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.120.0/24
151.241.20.0/24
151.243.136.0/24
Signature Algorithm: sha256WithRSAEncryption
76:77:66:bb:60:cd:dc:f3:d3:b2:0f:18:f3:c5:93:82:12:9b:
48:c2:3d:f4:4f:b2:ce:05:b3:da:a0:11:d0:8d:53:55:16:af:
f9:b9:83:4c:17:e7:fd:bc:3d:a9:11:a2:39:b5:27:a4:01:f4:
61:d3:37:01:75:66:d0:2b:b9:11:0b:7b:90:be:96:2f:cd:c2:
5f:ae:54:58:8e:6b:62:3c:4a:78:8f:7b:04:71:09:69:ba:c8:
ef:4c:b9:9d:a7:55:99:c1:07:14:86:02:d1:ba:b7:57:f0:79:
eb:32:51:3a:6d:cd:7c:a4:2c:29:f9:d4:91:be:57:a5:c5:fc:
d5:bd:db:23:b0:c2:fe:a0:b5:fe:02:40:e3:32:f5:1d:fd:95:
70:ed:00:e4:4c:14:48:27:59:0e:a5:17:a3:3c:9d:82:7c:e9:
bb:2f:05:03:b7:12:1b:75:6f:ef:f9:e7:0e:7f:e0:51:4c:16:
e9:3d:75:40:c7:1a:93:0a:92:86:97:29:a1:e9:d2:11:a5:64:
66:86:e1:25:54:d5:67:83:0d:c0:d4:e7:ed:67:3e:a9:f9:3d:
59:70:7d:e8:93:a7:88:b5:94:31:20:9c:53:3c:49:c7:b9:f2:
b2:1f:8b:00:bc:58:2c:ca:7d:78:de:05:1d:f7:6e:f6:0c:a9:
a7:35:06:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:40:40 2026 by rpki-client