Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HphbkTSzKxM36HwpWtjue2Z2ylY.roa
File: HphbkTSzKxM36HwpWtjue2Z2ylY.roa (raw, json)
Hash identifier: 2vrRoBr1rBTnpEFHUow0dusFpI2Cp8Y/Q95Q9M5mQPg=
Subject key identifier: 1E:98:5B:91:34:B3:2B:13:37:E8:7C:29:5A:D8:EE:7B:66:76:CA:56
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019C3276870640E36736519FF4016B227A7F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HphbkTSzKxM36HwpWtjue2Z2ylY.roa
Signing time: Fri 06 Feb 2026 10:19:14 +0000
ROA not before: Fri 06 Feb 2026 10:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53107
IP address blocks: 151.244.117.0/24 maxlen: 24
151.244.141.0/24 maxlen: 24
151.245.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:32:76:87:06:40:e3:67:36:51:9f:f4:01:6b:22:7a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 6 10:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e985b9134b32b1337e87c295ad8ee7b6676ca56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:53:01:43:51:a2:d8:a9:68:05:15:37:d1:9e:
0c:4f:b1:2c:30:2e:c4:7d:c1:c1:ab:56:5a:2f:74:
45:30:cd:e1:4e:a4:67:13:3d:40:a4:39:37:d5:e4:
2b:ac:bf:b3:b4:e8:88:95:4a:86:bf:57:8f:6c:82:
c0:41:a7:92:c1:63:00:0d:95:aa:a1:4b:8a:19:b4:
80:7c:ce:5b:93:c3:58:80:ec:9a:66:08:f9:ce:2a:
0c:9e:ad:06:6d:eb:c6:11:10:6b:5e:2f:ad:5c:f6:
26:47:ab:0d:03:c5:44:dc:ef:86:47:2f:dd:23:74:
82:3d:2c:24:de:02:72:56:0c:ff:35:6d:94:66:e4:
6f:91:3e:e0:77:9d:88:91:96:2a:f3:de:bd:f6:0c:
e1:ca:ab:5f:1b:cc:52:25:20:9b:72:ee:d3:aa:a8:
7d:e2:d1:08:a3:9d:f0:8a:ee:d8:34:94:05:02:9d:
8d:08:f1:fe:13:38:61:5c:d0:84:0f:c5:99:4c:b2:
52:63:d3:c7:ad:da:8e:8b:6b:b7:73:6e:5f:f0:66:
69:16:97:e2:87:f8:32:d7:bf:d1:f9:92:36:13:8e:
57:a4:b7:69:54:01:71:13:c9:8f:0d:93:05:7d:a6:
d1:75:1a:0c:8d:47:77:4e:e5:93:f8:bd:5b:fd:37:
c5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:98:5B:91:34:B3:2B:13:37:E8:7C:29:5A:D8:EE:7B:66:76:CA:56
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HphbkTSzKxM36HwpWtjue2Z2ylY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.117.0/24
151.244.141.0/24
151.245.229.0/24
Signature Algorithm: sha256WithRSAEncryption
88:8f:bc:07:1a:6e:33:5b:1a:0d:75:12:1d:68:2a:12:f2:f1:
f5:7d:e4:11:ca:8a:fb:5e:c2:95:47:76:46:17:38:9a:ed:c7:
69:dd:d2:36:36:ef:b7:13:f3:35:49:6a:1a:5b:d7:c3:62:df:
83:0f:d1:c1:59:51:59:5e:0d:76:92:b2:c9:73:fd:80:ec:8f:
b7:1b:8a:0b:49:4f:d7:ed:e1:6f:ff:20:8b:27:53:bc:e9:24:
d4:c9:24:72:75:66:6d:34:28:c7:42:0e:6c:6c:55:39:c3:52:
4a:94:fb:50:0a:81:23:f0:92:c1:6b:ac:f6:74:6f:01:1a:3c:
64:1b:3f:aa:cc:dd:a2:62:ac:8f:a7:82:39:dc:33:30:2c:89:
9e:97:c7:a7:75:23:77:40:6b:da:38:08:ea:81:01:cf:32:72:
97:e2:27:bf:fb:29:c4:1e:33:5b:5c:b2:bd:c6:44:77:2b:fa:
31:88:56:dc:86:99:42:ca:77:f4:66:fa:d4:3c:00:24:41:30:
f0:bc:d5:d0:68:f2:46:35:09:d9:81:84:11:51:77:3e:40:a4:
ff:e9:09:70:14:eb:85:7a:1f:b2:0c:89:6a:24:ac:24:6e:c5:
b9:02:f2:c4:4d:36:ab:58:dc:b8:3c:94:6b:46:0e:a0:90:2c:
81:3b:04:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:08:38 2026 by rpki-client