Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RE2g2EEZSqQkQytZTSxCqRSSGLo.roa
File: RE2g2EEZSqQkQytZTSxCqRSSGLo.roa (raw, json)
Hash identifier: zvlveOkQRMy8ieRTgIyJytF7HNhat402ezLX8eZCme0=
Subject key identifier: 44:4D:A0:D8:41:19:4A:A4:24:43:2B:59:4D:2C:42:A9:14:92:18:BA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A090590A258293C4F500F6BF9D82A2B0D8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RE2g2EEZSqQkQytZTSxCqRSSGLo.roa
Signing time: Fri 11 Sep 2026 12:02:29 +0000
ROA not before: Fri 11 Sep 2026 12:02:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 151.244.194.0/24 maxlen: 24
151.244.195.0/24 maxlen: 24
151.245.189.0/24 maxlen: 24
151.245.199.0/24 maxlen: 24
151.245.220.0/24 maxlen: 24
151.245.224.0/24 maxlen: 24
151.245.225.0/24 maxlen: 24
151.245.228.0/24 maxlen: 24
151.245.247.0/24 maxlen: 24
151.246.120.0/24 maxlen: 24
151.246.121.0/24 maxlen: 24
151.246.122.0/24 maxlen: 24
151.246.123.0/24 maxlen: 24
151.246.124.0/24 maxlen: 24
151.246.125.0/24 maxlen: 24
151.246.126.0/24 maxlen: 24
151.246.127.0/24 maxlen: 24
151.246.184.0/24 maxlen: 24
151.246.255.0/24 maxlen: 24
151.247.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:59:0a:25:82:93:c4:f5:00:f6:bf:9d:82:a2:b0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 11 12:02:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=444da0d841194aa424432b594d2c42a9149218ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:06:ab:74:b4:e9:47:d0:5a:ed:a1:72:df:52:
1f:00:69:85:af:c5:7d:d3:ba:8d:12:ef:70:73:65:
ae:ec:d4:87:a4:79:ec:9d:a1:49:f4:b6:e9:c8:9f:
e4:5b:f6:1d:c9:73:37:9d:6f:ee:84:38:90:45:fc:
91:9d:a6:bd:47:f7:7a:48:66:ef:87:55:6c:e5:d9:
15:ab:aa:53:28:ee:86:ea:22:01:46:88:b4:c4:28:
ab:ce:40:18:e2:4d:52:3d:99:ba:5d:7c:bd:9e:d7:
f9:23:31:4f:ac:9f:ae:36:05:8f:b9:33:da:f2:90:
e4:10:fe:79:9d:b0:12:7f:42:fe:c7:04:7e:f5:df:
93:27:99:49:f6:2c:74:4b:3d:30:dc:20:f6:f6:ed:
49:21:c3:40:c8:42:e8:9d:a7:22:8f:2f:32:eb:77:
b7:07:34:bb:b4:ea:69:c3:b4:c8:aa:7b:98:a3:d5:
d2:a2:40:74:26:9f:77:98:1c:4b:16:3a:f9:3a:ae:
87:7d:74:5b:77:b2:93:1f:69:7d:7f:32:92:69:92:
84:de:8d:00:86:4b:94:39:9c:b3:73:4a:59:5f:04:
3c:fe:26:97:23:b6:c0:c6:21:82:82:6c:a8:20:9c:
ec:66:4e:d7:ef:19:6c:a0:79:93:b3:87:46:33:97:
00:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4D:A0:D8:41:19:4A:A4:24:43:2B:59:4D:2C:42:A9:14:92:18:BA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RE2g2EEZSqQkQytZTSxCqRSSGLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.194.0/23
151.245.189.0/24
151.245.199.0/24
151.245.220.0/24
151.245.224.0/23
151.245.228.0/24
151.245.247.0/24
151.246.120.0/21
151.246.184.0/24
151.246.255.0/24
151.247.162.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:8e:e7:5a:63:bd:62:17:33:0c:f6:d9:10:86:4a:de:2c:47:
00:50:f8:88:79:44:39:2e:40:d8:1f:5b:6c:5b:b8:b8:2a:50:
1a:4b:16:f1:eb:0b:86:eb:c2:65:c2:9d:c2:e8:4e:a9:1b:ec:
42:d8:c5:d4:cf:86:ab:ad:0c:53:0d:07:6f:18:4c:de:3e:4d:
4a:7f:62:6c:3d:8a:8e:e8:fc:06:10:23:cb:53:19:87:79:25:
7a:61:6b:5f:bd:0f:53:2f:75:41:cf:24:ac:02:c7:39:db:dc:
87:c8:27:b7:8d:40:8e:11:78:53:ff:ab:f1:2e:ef:51:93:34:
50:38:5f:c7:d8:e4:c7:ae:18:fe:64:4d:db:d1:7e:e1:26:ba:
20:b3:50:fb:88:02:e2:ab:86:82:55:b1:99:77:d3:c7:cf:4a:
da:49:43:2b:82:6c:c8:2a:7e:94:a2:78:7f:89:43:12:dd:6c:
ad:51:55:73:80:a4:b1:4e:df:d0:41:e2:74:63:37:6d:f0:f2:
ea:94:77:08:10:c3:61:d1:ee:32:83:2f:d9:a1:bd:0b:8f:fb:
50:00:89:cc:64:a2:97:16:f6:c0:f7:a4:d6:1f:84:78:96:37:
fb:ad:e6:99:89:a9:ad:5e:0e:bc:b8:86:d8:4e:c5:e3:91:4f:
12:52:92:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:58:40 2026 by rpki-client