Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KEgK66SEZWnIFAUNnaJMcTTNFqo.roa
File: KEgK66SEZWnIFAUNnaJMcTTNFqo.roa (raw, json)
Hash identifier: RdRuplOPhx6ktVE0TWZIBVEMX94A8+f++JGF5TcS9JI=
Subject key identifier: 28:48:0A:EB:A4:84:65:69:C8:14:05:0D:9D:A2:4C:71:34:CD:16:AA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D7326E4B8D0998332DEC3B953C56268A0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KEgK66SEZWnIFAUNnaJMcTTNFqo.roa
Signing time: Thu 09 Apr 2026 16:50:21 +0000
ROA not before: Thu 09 Apr 2026 16:50:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214024
IP address blocks: 151.241.128.0/22 maxlen: 24
151.245.108.0/24 maxlen: 24
151.246.184.0/24 maxlen: 24
151.247.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:73:26:e4:b8:d0:99:83:32:de:c3:b9:53:c5:62:68:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 9 16:50:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28480aeba4846569c814050d9da24c7134cd16aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0e:f1:74:e5:67:10:92:cb:7c:1f:ad:9d:0d:
ba:f4:ae:8e:ae:df:78:fa:da:05:63:3b:96:77:f5:
f8:50:4e:0c:d5:15:8e:ac:f9:63:62:34:f2:3f:c9:
4d:19:a2:dc:6f:77:63:a0:3b:d0:ff:86:d2:46:8e:
01:df:6e:87:e2:b2:13:96:84:5e:a8:4b:b4:a7:f5:
08:b9:5c:df:1b:ec:57:e5:6a:fc:fe:ec:45:d2:f8:
24:47:9b:f9:49:dd:20:e7:4f:ce:8a:54:8f:d4:6d:
49:b0:e1:4d:9e:fc:39:25:e8:74:6c:f6:69:ab:5e:
a4:bd:ec:8f:06:23:41:6d:1f:e0:dd:77:39:fe:6e:
d1:1b:00:26:9e:c2:a0:e8:27:4a:42:04:c6:45:20:
be:64:17:58:28:ba:fd:f5:1d:fe:e7:72:90:af:19:
bc:50:70:67:81:f5:a0:63:3f:16:00:d5:4c:dc:98:
f5:0f:62:cc:6d:5a:85:52:ed:45:5c:1a:15:3a:55:
9e:0f:b7:61:5a:02:9d:c9:f4:50:0c:3c:5c:30:28:
7f:ab:c6:da:ed:fc:17:39:32:65:a8:c2:31:fe:c5:
38:a7:86:b7:7a:22:a5:f6:e4:bc:57:2d:63:51:4e:
a1:db:10:51:28:8c:80:4f:b2:ff:a0:23:10:e1:78:
6d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:48:0A:EB:A4:84:65:69:C8:14:05:0D:9D:A2:4C:71:34:CD:16:AA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KEgK66SEZWnIFAUNnaJMcTTNFqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
151.245.108.0/24
151.246.184.0/24
151.247.162.0/24
Signature Algorithm: sha256WithRSAEncryption
95:07:cd:09:b2:a0:13:b0:13:60:e0:64:26:5e:a8:ce:71:0c:
1b:02:40:b2:e9:05:f7:97:7b:24:00:a2:ea:5a:e2:2e:4d:d8:
9a:ca:0d:3d:f6:40:0b:1f:4a:5d:11:b6:9e:c6:b0:bd:4e:48:
c3:28:ce:83:06:6f:18:2d:30:77:88:8e:d7:4c:7c:ef:ed:ae:
cf:25:2a:1f:cb:79:ad:7a:a7:8b:e8:90:50:6f:72:6b:87:3e:
b8:ac:fc:62:4c:c4:8d:f0:0c:98:be:c3:77:87:ed:55:07:2e:
45:a3:76:7a:6a:71:51:35:a3:a2:37:94:ab:e9:48:f3:de:f9:
4a:c6:cb:11:fb:1b:44:df:81:10:8d:a8:31:04:7f:2e:5f:3c:
a7:35:62:23:6c:51:5b:37:b0:90:fe:65:08:ea:41:d2:88:e6:
37:aa:58:8b:36:32:eb:19:d7:fd:49:0d:a6:62:c7:95:d0:61:
c4:35:3b:0d:3b:71:56:51:1a:db:c1:0d:a7:94:0e:f9:c7:18:
71:88:66:af:77:3b:45:2a:3d:f9:75:56:f7:23:eb:39:f3:5f:
f9:2e:d0:17:b3:9c:3f:7a:13:77:aa:2c:c8:a9:cb:cb:e9:8e:
4b:06:5e:c9:b1:13:f1:e4:52:0c:ec:b7:e2:3c:28:e2:c0:83:
24:75:d3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:27:58 2026 by rpki-client