Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RSItV-ffSvUsCBsiC4lc4qZVkaA.roa
File: RSItV-ffSvUsCBsiC4lc4qZVkaA.roa (raw, json)
Hash identifier: /bT4c2obqODydkVNq66X2wg5rbpLQ/DAcNEypNZxPkg=
Subject key identifier: 45:22:2D:57:E7:DF:4A:F5:2C:08:1B:22:0B:89:5C:E2:A6:55:91:A0
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D7326E4412DEE20B09BAB8B2D9EA69977
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RSItV-ffSvUsCBsiC4lc4qZVkaA.roa
Signing time: Thu 09 Apr 2026 16:50:21 +0000
ROA not before: Thu 09 Apr 2026 16:50:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36530
IP address blocks: 151.241.128.0/22 maxlen: 24
151.245.90.0/24 maxlen: 24
151.245.108.0/24 maxlen: 24
151.246.184.0/24 maxlen: 24
151.247.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:73:26:e4:41:2d:ee:20:b0:9b:ab:8b:2d:9e:a6:99:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 9 16:50:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45222d57e7df4af52c081b220b895ce2a65591a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f0:f6:e6:6e:ff:aa:46:b2:21:9c:d3:ef:e4:
31:52:16:ab:29:fa:3c:77:8d:49:f9:44:ed:4e:30:
8b:9c:6d:a5:73:4b:07:3c:f7:c2:53:43:ff:05:7c:
c6:f2:ac:48:ce:0c:2c:56:7d:b5:40:56:f4:3f:ba:
1f:7d:38:64:10:b1:b1:b5:06:93:8f:86:bb:41:73:
68:21:fc:30:c8:40:d9:a1:fe:24:03:1b:c9:86:46:
e9:3b:2f:35:a3:a4:5e:c9:50:17:41:a9:a4:46:cc:
a7:22:06:45:7b:af:29:31:b1:54:cd:ba:e7:24:89:
d1:cc:ad:07:19:64:93:64:ab:b4:e4:3c:a3:2f:bb:
2a:3b:46:7b:82:fa:85:92:4e:91:fd:7d:39:04:4a:
c0:5c:9d:ae:c4:8f:e7:51:32:c6:b4:d9:cc:04:31:
ea:60:d2:9e:9f:65:ed:4c:9f:c9:91:df:55:30:da:
cb:53:e4:25:ac:34:7d:30:4d:09:43:c2:27:b5:cb:
57:ac:55:0c:a6:f4:87:96:8f:6c:7f:1c:93:87:8a:
0a:10:c3:c4:82:33:69:14:7a:3e:4c:1b:8c:7c:f4:
70:f8:f7:9f:21:93:01:89:0e:5d:b0:3f:36:d6:83:
73:4e:27:2d:88:db:f7:eb:26:aa:37:c1:9d:c9:51:
e3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:22:2D:57:E7:DF:4A:F5:2C:08:1B:22:0B:89:5C:E2:A6:55:91:A0
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RSItV-ffSvUsCBsiC4lc4qZVkaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
151.245.90.0/24
151.245.108.0/24
151.246.184.0/24
151.247.162.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:e1:1d:d5:bd:5c:c3:03:d2:4f:e7:14:ac:8d:b2:73:d3:40:
dc:d8:4d:86:7c:24:73:24:4f:25:bf:85:15:e1:e9:23:a2:f7:
66:32:6d:fc:08:46:c9:35:b3:69:84:12:76:e6:22:a6:f6:ae:
49:56:d2:91:3a:6b:41:c9:7a:b1:0a:9e:3d:ed:66:3d:61:db:
58:ae:f4:05:85:99:0f:20:1b:ea:f6:c0:99:07:ad:df:3c:b6:
90:7b:b9:58:fc:0f:e7:f6:59:30:66:83:fc:87:0c:45:10:c1:
f2:21:b1:72:7d:36:f0:cb:55:aa:df:c8:fd:e0:ef:12:7e:91:
ef:e7:69:a2:de:9f:ba:31:2d:e4:e2:73:1d:3a:fd:8d:99:3b:
a8:22:04:7d:6c:d0:f4:d8:53:16:e9:a4:72:cb:a8:6e:3d:d0:
81:b9:43:1b:7c:26:29:6b:f5:62:c0:6a:7e:5e:1e:6e:a1:de:
ca:22:4f:34:c2:b2:28:9b:2a:71:6d:c1:bf:36:a5:a6:ad:49:
82:16:83:48:6d:25:7c:f2:18:73:96:d7:c0:a6:44:51:77:e1:
e6:2a:57:29:ca:5d:28:69:f1:ec:72:a1:77:4f:95:7a:7b:d3:
97:27:49:98:4e:6a:a8:dc:ee:7d:49:10:6f:03:0f:63:a8:cf:
6c:a2:1b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:23:16 2026 by rpki-client