Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Jkx0ol9sNPcPFaJYUrd5RrGHvMs.roa
File: Jkx0ol9sNPcPFaJYUrd5RrGHvMs.roa (raw, json)
Hash identifier: KVM9y58gsRUym7DniNYpSu5tzaRtaxefGTlR0o/BmSM=
Subject key identifier: 26:4C:74:A2:5F:6C:34:F7:0F:15:A2:58:52:B7:79:46:B1:87:BC:CB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0BD748D89B71F9998D60C271DA5F9532C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Jkx0ol9sNPcPFaJYUrd5RrGHvMs.roa
Signing time: Sun 20 Sep 2026 06:15:27 +0000
ROA not before: Sun 20 Sep 2026 06:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137235
IP address blocks: 151.243.15.0/24 maxlen: 24
151.243.255.0/24 maxlen: 24
151.244.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:74:8d:89:b7:1f:99:98:d6:0c:27:1d:a5:f9:53:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 20 06:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=264c74a25f6c34f70f15a25852b77946b187bccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:59:34:56:b6:7f:50:a0:c7:70:c1:48:2f:
0a:92:4f:96:31:32:0f:d7:99:bc:f3:b4:6f:3e:71:
dc:1b:a1:38:87:81:2d:ad:5c:bc:e5:07:ec:b9:3d:
1e:16:a9:96:f5:fb:bf:db:ad:6f:15:3d:72:ce:3d:
83:f4:ef:f7:61:4a:99:ee:4c:40:08:21:6b:80:62:
90:f3:d0:cc:e3:6b:0b:c3:dd:cf:0a:2d:14:ae:47:
ce:e1:0a:df:5d:e6:fa:80:22:4f:77:e8:01:f4:e7:
7c:85:c6:8c:66:02:e8:db:45:dd:38:cb:f2:31:77:
9d:1e:9e:cc:16:39:89:8e:66:67:ce:d8:9a:7b:29:
30:15:95:56:23:26:e5:89:eb:62:c5:20:fe:11:ef:
62:51:61:84:20:d4:e6:04:07:86:02:06:ef:a1:34:
85:1d:e7:fd:56:2a:98:08:c2:ed:ac:c7:4f:84:6a:
b4:71:ad:4c:f2:2d:70:14:df:2b:b3:bb:d3:b6:a9:
46:13:5b:cc:8e:ac:d0:36:58:29:81:c3:7a:7a:25:
05:5c:ec:0c:be:49:9f:9c:9d:a0:3b:b2:b9:d7:57:
a7:d7:62:42:92:de:d6:49:11:2d:41:ff:1a:1c:43:
af:9e:09:ed:e6:d2:9d:71:29:cd:20:1f:1f:be:13:
a5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:4C:74:A2:5F:6C:34:F7:0F:15:A2:58:52:B7:79:46:B1:87:BC:CB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Jkx0ol9sNPcPFaJYUrd5RrGHvMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.15.0/24
151.243.255.0/24
151.244.247.0/24
Signature Algorithm: sha256WithRSAEncryption
26:64:ec:38:98:48:01:4c:2b:73:70:a5:13:5d:54:46:60:9e:
e5:4d:db:d5:cd:44:c9:5e:ce:ca:a2:dc:42:77:5c:c2:0a:2e:
c8:d4:e9:b4:18:de:e1:3d:fb:a9:94:8b:e2:25:9d:bc:a5:ad:
9d:7d:bd:52:34:0e:26:fe:fb:4f:f6:44:14:86:ee:74:61:e4:
44:f4:27:09:ef:72:9f:d9:15:6f:64:87:fe:77:0a:a9:5d:22:
e6:77:27:10:87:c9:44:18:54:34:c5:13:a3:94:da:67:9c:dd:
47:a9:8e:e3:bd:2a:a5:60:22:b2:0b:ca:5f:cc:e1:3b:20:f9:
6d:85:f7:f9:ad:a2:69:85:af:c4:74:22:c0:9c:fb:ee:d9:d7:
88:b9:6e:33:4d:cc:07:77:52:a4:39:ef:fa:69:09:0d:4e:27:
a1:f2:e2:3c:ee:fe:f7:68:ae:34:6e:15:f0:b1:0f:23:e1:00:
0d:aa:84:d8:af:f7:f0:b5:02:5c:c9:43:73:bc:3b:ff:65:e4:
2f:2c:59:70:bc:d8:10:4b:59:1b:f8:a5:d1:9e:9e:ff:e0:e4:
5a:e1:90:57:90:ec:51:23:a7:ec:5d:e5:97:85:78:9a:d9:19:
e4:66:e2:80:1c:ec:88:18:4c:37:2e:e0:a8:b5:49:17:5f:6b:
76:b0:be:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:50:27 2026 by rpki-client