Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/MRinmtNkTN0Rg_EDLlTjEZk-lZI.roa
File: MRinmtNkTN0Rg_EDLlTjEZk-lZI.roa (raw, json)
Hash identifier: 1BnwSIEUKdymzUAsG1GESrNgoh1cIaUaMT3UYqC7Ll8=
Subject key identifier: 31:18:A7:9A:D3:64:4C:DD:11:83:F1:03:2E:54:E3:11:99:3E:95:92
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FA7AF603CD764AFD6A8B2C7009FC18B83
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/MRinmtNkTN0Rg_EDLlTjEZk-lZI.roa
Signing time: Tue 28 Jul 2026 07:45:16 +0000
ROA not before: Tue 28 Jul 2026 07:45:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 151.243.51.0/24 maxlen: 24
151.244.184.0/24 maxlen: 24
151.244.185.0/24 maxlen: 24
151.246.174.0/24 maxlen: 24
151.246.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:af:60:3c:d7:64:af:d6:a8:b2:c7:00:9f:c1:8b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 28 07:45:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3118a79ad3644cdd1183f1032e54e311993e9592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:13:f3:e3:95:9b:a7:dc:cd:fa:1a:67:3f:bb:
b7:05:70:c7:3f:0e:bc:44:07:ba:30:14:bc:ed:7a:
d6:9f:9e:e7:ab:1e:04:eb:fa:7f:e5:f3:5a:94:b7:
7b:07:6b:4c:06:00:72:57:07:cb:38:0f:db:d8:71:
0c:7d:6c:e3:dd:04:e1:15:b3:91:ed:ce:58:23:ed:
8b:3b:ad:c3:d4:74:71:25:38:25:15:bf:20:4e:c5:
e8:fe:5e:42:83:30:b5:09:a4:62:71:3a:ac:a3:9c:
ee:f4:c5:b3:fc:34:59:77:c5:e8:55:57:fb:20:23:
52:b0:bb:61:7d:46:d1:f8:23:5e:d4:27:77:a4:89:
3f:a8:11:d9:ce:50:e2:d8:b4:68:a8:54:ee:7c:dd:
66:74:d5:95:f3:2a:17:36:25:91:e1:20:d2:d5:86:
1b:b2:f6:3f:dd:1f:e5:cc:01:05:85:b5:11:e5:8e:
69:73:da:b0:8b:21:ba:5d:a1:f4:83:3a:69:d2:90:
ff:82:b3:4c:12:0c:88:66:76:97:4c:b5:3e:e8:a1:
a0:04:4e:43:4e:6e:4a:7b:61:47:90:3f:07:c4:48:
fe:26:cb:fa:f4:20:af:2f:c0:af:aa:eb:1f:22:75:
86:79:79:17:a6:58:c3:27:9e:83:5e:98:b1:91:51:
e7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:18:A7:9A:D3:64:4C:DD:11:83:F1:03:2E:54:E3:11:99:3E:95:92
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/MRinmtNkTN0Rg_EDLlTjEZk-lZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.51.0/24
151.244.184.0/23
151.246.174.0/24
151.246.180.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:25:93:f7:16:fb:5b:b2:d4:32:f2:59:1d:55:76:c7:60:8c:
ca:40:6e:5f:3c:d0:e0:1b:fa:58:f8:a3:03:6b:0f:c6:e6:e1:
5f:51:9d:3b:7d:8e:62:b5:7e:0d:dc:1c:f6:e3:34:c9:59:84:
3b:cb:31:a8:26:11:30:c9:1a:55:b2:9b:61:25:24:9c:10:65:
3e:f4:0f:f1:09:5d:c5:e7:1f:29:b9:43:17:58:ca:61:be:a1:
e1:61:a7:5d:51:94:5e:da:23:e3:8f:04:c0:6a:95:5c:4f:81:
7b:39:4d:6d:96:df:21:bf:98:93:d9:5f:2f:af:fa:f3:4d:44:
38:94:f1:16:38:44:42:a6:a0:0e:1b:bf:4e:30:da:92:3a:6f:
b0:e6:88:fa:e0:2b:b2:13:f8:fb:c2:26:25:aa:e2:ab:77:6e:
60:5a:6d:fa:e4:82:5b:71:b2:e4:bb:7e:eb:3f:0d:1a:47:92:
f9:ff:2d:b4:27:d7:72:f3:2b:e7:eb:61:37:1d:2e:1e:2c:f1:
10:75:ae:b8:d1:c8:54:07:3e:56:b5:e5:fb:bd:01:d6:89:78:
ce:b4:a9:ad:40:cd:a3:dd:16:de:f3:ba:19:ff:f9:2e:a0:fd:
43:83:14:8d:9d:4d:b1:16:87:1d:1b:4d:f0:3e:4b:77:b8:c1:
95:4f:65:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:05:45 2026 by rpki-client