Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HJkb-UT05ii8ipiMcW7Q5pBY0jY.roa
File: HJkb-UT05ii8ipiMcW7Q5pBY0jY.roa (raw, json)
Hash identifier: HnVyAWYHocO3OtYQ5YgwpYlDdkydfYOBqS0i7ysFFps=
Subject key identifier: 1C:99:1B:F9:44:F4:E6:28:BC:8A:98:8C:71:6E:D0:E6:90:58:D2:36
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A07FF86CAC6A961BC1A31F65838389D436
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HJkb-UT05ii8ipiMcW7Q5pBY0jY.roa
Signing time: Tue 08 Sep 2026 07:43:02 +0000
ROA not before: Tue 08 Sep 2026 07:43:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 262287
IP address blocks: 151.242.126.0/24 maxlen: 24
151.245.244.0/24 maxlen: 24
151.245.245.0/24 maxlen: 24
151.246.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:f8:6c:ac:6a:96:1b:c1:a3:1f:65:83:83:89:d4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 8 07:43:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c991bf944f4e628bc8a988c716ed0e69058d236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:92:e2:3a:56:59:f5:1d:3f:42:57:c4:a5:3c:
8a:ac:b2:e1:f8:0e:a4:58:e3:f6:d6:db:00:76:e7:
02:62:c6:89:9c:0e:6f:56:c2:d0:c0:86:2d:47:68:
c9:2a:66:08:bf:52:9e:df:e3:0c:92:8b:bf:30:17:
07:24:55:dd:5a:90:b6:fe:07:65:23:64:5e:a6:78:
52:4b:0f:78:8f:d4:44:ef:f6:82:31:fa:c2:63:53:
26:15:91:d2:8d:32:58:ca:77:b8:73:87:bc:a4:e1:
39:72:1f:34:df:45:a5:04:02:7c:17:13:0b:b5:3e:
db:0d:f8:46:59:71:2b:2a:59:e6:45:e8:22:d7:06:
2a:e9:dc:cc:43:cb:20:1a:fc:14:10:49:6e:f1:15:
68:d4:48:69:4f:b2:4f:58:8f:10:22:98:78:d5:c9:
53:64:a5:6a:d0:76:04:af:37:00:90:d6:53:a0:93:
f2:18:da:53:9b:45:3f:48:02:dc:f3:e1:45:69:e2:
8d:8c:2e:dd:e0:f9:55:73:0e:16:6b:cf:70:7e:f3:
eb:9a:a2:92:d1:2f:25:63:31:9b:79:7d:14:46:2b:
3b:56:42:4c:ee:58:e3:be:68:35:21:57:f6:83:2e:
6f:67:cb:2a:24:12:bd:9e:5f:03:2a:9f:b0:a4:1c:
bb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:99:1B:F9:44:F4:E6:28:BC:8A:98:8C:71:6E:D0:E6:90:58:D2:36
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HJkb-UT05ii8ipiMcW7Q5pBY0jY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.126.0/24
151.245.244.0/23
151.246.235.0/24
Signature Algorithm: sha256WithRSAEncryption
45:7e:ed:51:b2:9b:42:85:e7:3e:fb:7a:fc:64:6d:18:07:45:
0a:0a:09:4d:97:87:26:5f:20:44:bc:af:3b:75:5a:7d:8e:84:
01:e3:f4:8e:8a:da:aa:00:b3:c9:97:d7:4d:2b:39:30:21:de:
ce:68:9b:ce:a9:c8:f7:53:5a:3a:41:6d:74:a2:cc:cf:49:ce:
6f:1a:e4:ef:a8:c6:62:c2:9c:7b:da:0c:3f:e5:63:00:d8:cc:
02:9e:86:05:9e:5b:c0:52:c9:ce:75:28:9b:6b:88:58:19:79:
38:ee:de:b3:df:1c:93:ea:1f:01:2b:99:6e:86:dc:5c:11:fd:
65:43:01:cd:ea:71:96:6b:a1:b9:1f:e0:e0:08:1e:6e:90:70:
f7:79:72:ae:8f:dd:d1:33:2a:55:f4:43:d2:25:ae:fb:a9:36:
06:23:f4:5b:7a:a1:50:5c:3a:db:b1:37:98:ab:a1:36:b8:fe:
5c:35:c4:e1:a5:1d:74:90:fa:e2:9b:ca:cb:86:5c:11:4d:83:
aa:7b:9b:d2:f3:c0:61:ab:47:42:e2:c9:3d:60:04:2b:2f:93:
6b:d5:66:8a:c6:22:3b:03:08:da:1d:f9:e6:2f:57:af:6b:95:
9c:62:38:f3:d0:e3:f7:6b:8c:cd:d2:69:28:5c:b5:cd:54:57:
86:bd:f6:8c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaB/+GysapYbwaMfZYODidQ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwOTA4MDc0MzAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzk5MWJmOTQ0ZjRlNjI4YmM4YTk4OGM3MTZlZDBlNjkwNThkMjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pLiOlZZ9R0/QlfEpTyKrLLh+A6k
WOP21tsAducCYsaJnA5vVsLQwIYtR2jJKmYIv1Ke3+MMkou/MBcHJFXdWpC2/gdl
I2RepnhSSw94j9RE7/aCMfrCY1MmFZHSjTJYyne4c4e8pOE5ch8030WlBAJ8FxML
tT7bDfhGWXErKlnmRegi1wYq6dzMQ8sgGvwUEElu8RVo1EhpT7JPWI8QIph41clT
ZKVq0HYErzcAkNZToJPyGNpTm0U/SALc8+FFaeKNjC7d4PlVcw4Wa89wfvPrmqKS
0S8lYzGbeX0URis7VkJM7ljjvmg1IVf2gy5vZ8sqJBK9nl8DKp+wpBy7owIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFByZG/lE9OYovIqYjHFu0OaQWNI2MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvSEprYi1VVDA1aWk4aXBpTWNXN1E1cEJZMGpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/J+AwQB
l/X0AwQAl/brMA0GCSqGSIb3DQEBCwUAA4IBAQBFfu1RsptChec++3r8ZG0YB0UK
CglNl4cmXyBEvK87dVp9joQB4/SOitqqALPJl9dNKzkwId7OaJvOqcj3U1o6QW10
oszPSc5vGuTvqMZiwpx72gw/5WMA2MwCnoYFnlvAUsnOdSiba4hYGXk47t6z3xyT
6h8BK5luhtxcEf1lQwHN6nGWa6G5H+DgCB5ukHD3eXKuj93RMypV9EPSJa77qTYG
I/RbeqFQXDrbsTeYq6E2uP5cNcThpR10kPrim8rLhlwRTYOqe5vS88Bhq0dC4sk9
YAQrL5Nr1WaKxiI7AwjaHfnmL1eva5WcYjjz0OP3a4zN0mkoXLXNVFeGvfaM
-----END CERTIFICATE-----
Generated at Sun Oct 4 22:32:22 2026 by rpki-client