Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/G8lq4mcuUSxYlvjBEGqQL7Myomc.roa
File: G8lq4mcuUSxYlvjBEGqQL7Myomc.roa (raw, json)
Hash identifier: 7yUm7N8+FMKuZ4hZPMkRbR40DI8fquI6WYps53F07R8=
Subject key identifier: 1B:C9:6A:E2:67:2E:51:2C:58:96:F8:C1:10:6A:90:2F:B3:32:A2:67
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A08A82E39CEF1028F3EAB4A088494CF84C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/G8lq4mcuUSxYlvjBEGqQL7Myomc.roa
Signing time: Thu 10 Sep 2026 08:50:28 +0000
ROA not before: Thu 10 Sep 2026 08:50:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 151.242.185.0/24 maxlen: 24
151.244.138.0/24 maxlen: 24
151.246.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:82:e3:9c:ef:10:28:f3:ea:b4:a0:88:49:4c:f8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 10 08:50:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bc96ae2672e512c5896f8c1106a902fb332a267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:46:0b:2e:b0:07:ce:7e:d1:21:98:50:e3:21:
4b:9e:d7:6c:1a:3e:a6:fc:45:20:d5:55:d0:f1:4a:
67:78:51:58:83:12:5b:3d:57:82:06:dd:9d:ef:02:
75:2f:87:75:63:37:a1:6e:90:0a:3b:6d:d4:ab:1b:
9c:45:76:6b:fc:67:bb:10:af:cf:ad:08:bf:63:3c:
8a:aa:54:84:37:8c:4e:df:0e:6d:6e:c5:19:10:1a:
e6:85:9e:92:7a:72:2e:aa:a1:c2:d9:7d:d1:3c:28:
25:01:ba:79:6d:12:16:6e:1c:ab:6f:8d:bc:a4:41:
62:de:33:d6:d1:24:35:29:dc:c7:6c:09:17:0c:3f:
18:10:c8:69:d1:01:94:3c:9f:07:d6:ba:30:0c:de:
f9:94:e9:18:cb:6f:7c:39:19:41:c8:37:90:c5:d8:
b0:fd:40:00:65:e6:0d:4b:68:c8:ef:9e:0d:4a:7b:
7c:3f:e0:60:4f:ee:a3:23:a0:a0:92:5d:d8:d3:49:
d2:0f:e7:cd:8d:7b:6d:6d:a1:11:17:8e:56:ac:e1:
3f:9e:31:ae:04:23:c6:e7:57:c9:cf:62:d2:7f:c1:
f9:83:09:2f:50:44:bd:09:52:b2:6e:05:02:33:49:
e5:e6:f1:eb:a3:e6:4d:10:a3:f5:22:38:33:18:a9:
7a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C9:6A:E2:67:2E:51:2C:58:96:F8:C1:10:6A:90:2F:B3:32:A2:67
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/G8lq4mcuUSxYlvjBEGqQL7Myomc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.185.0/24
151.244.138.0/24
151.246.158.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:16:08:ed:48:25:eb:5d:c1:77:7c:f7:58:20:8b:f6:37:8f:
08:8b:e3:b7:a1:92:f8:c0:78:8d:72:5e:72:4e:2f:06:3e:1e:
60:84:b6:48:07:53:0f:16:84:20:00:1f:7a:16:97:5d:85:c1:
e1:86:36:27:37:d1:c0:ff:34:e2:29:60:10:1e:03:1d:99:27:
72:0b:5e:ec:78:4d:96:4b:03:84:34:da:f5:7e:12:80:e8:94:
38:3c:3e:5a:dd:75:fe:9e:d8:3e:b9:8c:9f:c5:ad:87:47:55:
20:9e:4b:dc:cf:6f:5d:4e:2b:c5:68:ac:6f:d7:a7:06:d2:21:
5f:81:db:a5:70:b6:f5:bc:4d:dd:71:8d:e8:17:a2:00:c4:9f:
0e:8d:20:bc:f3:a7:97:99:9b:c7:6f:3f:22:8b:e6:35:f3:63:
22:c1:96:8d:96:67:b9:0f:da:f5:ad:69:c6:2b:95:ba:e5:34:
0c:a9:84:31:04:ad:e3:99:33:d6:91:7f:ea:11:5d:ec:01:9d:
2c:ed:ac:d3:d1:d9:ab:d7:e8:fd:7f:ca:fd:aa:34:9c:5f:49:
0c:b1:8d:6b:e8:51:ed:5f:ee:e7:84:f1:d3:40:ef:a0:52:e1:
af:e8:c6:a1:ef:01:d6:5e:38:c0:42:70:88:d9:80:bc:a8:16:
46:70:88:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:29:45 2026 by rpki-client