Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GUtDM0sOuXbyQVz6LRY4C2AfPyQ.roa
File: GUtDM0sOuXbyQVz6LRY4C2AfPyQ.roa (raw, json)
Hash identifier: naN5m2wd910WNAFsLln3vjrJCUlg6t8devlUkeuIbH0=
Subject key identifier: 19:4B:43:33:4B:0E:B9:76:F2:41:5C:FA:2D:16:38:0B:60:1F:3F:24
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0C7F700CED7E01019E2A8ECCE78A53890
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GUtDM0sOuXbyQVz6LRY4C2AfPyQ.roa
Signing time: Tue 22 Sep 2026 07:14:08 +0000
ROA not before: Tue 22 Sep 2026 07:14:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402390
IP address blocks: 151.240.253.0/24 maxlen: 24
151.241.40.0/24 maxlen: 24
151.244.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:45:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:f7:00:ce:d7:e0:10:19:e2:a8:ec:ce:78:a5:38:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 22 07:14:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=194b43334b0eb976f2415cfa2d16380b601f3f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3f:1a:8f:8f:bd:80:57:e4:69:8b:49:29:17:
08:d8:6f:ec:b2:49:5f:bc:80:50:a1:b3:cd:3b:0c:
59:6d:1e:e1:a9:a1:b7:65:d2:b6:2b:e3:ee:e9:fc:
c7:d6:40:ea:d8:97:09:c5:3d:12:e6:3d:7d:21:1e:
47:64:25:ab:6d:6b:b9:40:86:09:c0:3d:ae:ae:33:
b0:db:cd:84:74:da:85:4c:82:2d:40:85:b9:a6:0a:
0b:53:9b:01:91:0a:97:07:d8:c0:d5:ab:f9:e1:92:
0d:95:0d:a2:aa:9a:f1:69:55:da:85:37:5e:ab:20:
eb:f5:14:36:f0:42:a8:87:e6:73:0f:0e:e0:a7:9b:
a9:1b:ec:60:4f:f5:5e:3e:dd:1a:99:f7:69:63:8c:
84:97:d2:11:e5:8a:30:9a:a5:6a:4f:e4:c8:5f:3b:
fe:d9:a2:fd:4e:a9:20:6e:4e:bd:11:13:d8:82:5b:
50:9f:a0:54:ee:09:3d:9a:4b:71:5c:1b:78:03:0b:
7e:a5:72:cd:73:71:7e:be:d2:3c:2f:71:61:df:e5:
ea:70:9b:f5:e9:0b:de:92:f8:f1:30:14:11:9a:ab:
1d:ab:d4:d5:fd:50:6c:74:d8:aa:03:ea:0e:a6:51:
64:5b:56:b7:24:10:93:90:e1:f7:1c:35:c7:9a:1b:
62:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4B:43:33:4B:0E:B9:76:F2:41:5C:FA:2D:16:38:0B:60:1F:3F:24
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GUtDM0sOuXbyQVz6LRY4C2AfPyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.253.0/24
151.241.40.0/24
151.244.223.0/24
Signature Algorithm: sha256WithRSAEncryption
66:e1:02:0e:3d:98:05:53:3d:54:d5:fc:2e:11:7c:49:70:9c:
9e:7a:43:a8:97:09:5d:2b:b4:bc:67:ac:fa:ea:1b:1b:b7:64:
ec:09:80:ae:ff:16:60:bf:32:ab:1c:bf:13:8f:31:5d:9f:37:
7b:fb:36:47:5a:7c:23:4f:d4:5f:ca:6b:45:bc:b7:8b:20:d2:
84:c5:cf:5f:96:6f:e1:cc:be:16:d1:86:e2:c1:f9:14:27:50:
bb:1e:b1:ae:75:36:84:7a:43:7a:63:35:89:d3:3b:4d:8e:f2:
8a:c0:e8:da:0b:41:f1:d8:58:01:2a:e1:ba:b8:ee:f7:17:8b:
55:66:17:49:fd:34:db:ba:7b:16:4f:12:2d:57:b0:3a:f5:b4:
b8:b6:ca:ce:ca:e2:38:48:53:3c:c0:00:e4:dc:b8:d4:d9:e8:
d6:aa:19:77:49:ba:e6:c3:bb:20:ba:fe:cd:2e:9b:3a:13:93:
f9:5e:5f:60:d0:85:61:19:2c:12:aa:3d:ea:bb:bf:fa:88:c2:
88:2e:62:32:b0:de:3b:be:72:c2:2d:62:05:b0:28:d2:a0:3b:
67:2a:db:7e:ff:82:07:62:d0:67:64:5d:5b:0f:8f:b0:f0:04:
1b:af:06:53:cc:e5:4d:85:09:e2:64:ac:c2:a7:28:7a:00:66:
83:83:bd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:04:13 2026 by rpki-client