Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Sf4n6iauSTjtywN8csj_azNL9u0.roa
File: Sf4n6iauSTjtywN8csj_azNL9u0.roa (raw, json)
Hash identifier: WEDGxBk9srdXuLfLv52UM6jwXjZiTv9BCKxuUxIgyDQ=
Subject key identifier: 49:FE:27:EA:26:AE:49:38:ED:CB:03:7C:72:C8:FF:6B:33:4B:F6:ED
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A09192238893FCF3C02BAFFDFD7EE8D11F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Sf4n6iauSTjtywN8csj_azNL9u0.roa
Signing time: Fri 11 Sep 2026 17:44:28 +0000
ROA not before: Fri 11 Sep 2026 17:44:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 151.242.179.0/24 maxlen: 24
151.242.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:92:23:88:93:fc:f3:c0:2b:af:fd:fd:7e:e8:d1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 11 17:44:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49fe27ea26ae4938edcb037c72c8ff6b334bf6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:da:f7:42:29:35:91:65:f2:28:a6:30:a5:c9:
4f:3c:22:3e:3b:77:e7:67:59:9c:b7:d0:9e:58:b2:
ae:72:f2:27:10:66:18:11:ff:e0:8a:8f:77:ff:3e:
aa:8b:42:27:c4:03:db:de:0c:94:aa:b6:ab:df:5a:
fb:55:67:3b:6e:f8:6a:d2:5d:f1:aa:35:cf:67:b5:
fb:33:43:96:a7:86:f2:6e:f9:7c:fc:3a:55:b4:f9:
07:8d:28:28:e1:6f:c8:49:a1:0b:9e:5a:13:48:fa:
9a:72:68:f0:65:1d:82:7b:df:f0:11:1b:a2:4b:f5:
d5:e8:03:b7:5d:3b:c0:fd:f5:f8:37:0a:08:fd:d8:
f3:81:ac:e7:93:31:82:6a:70:3b:4e:42:8d:6e:5b:
cc:15:9e:70:0c:bd:4c:e7:4e:47:76:3c:db:2c:20:
e7:c2:68:1d:ae:a7:29:30:70:0f:f5:e9:63:53:10:
8a:6c:ab:a8:ab:1e:54:f0:37:81:c9:37:7a:94:3a:
90:34:65:38:4b:32:75:89:d3:ca:97:ee:fd:b6:f7:
3b:5f:0a:20:05:32:e2:d2:82:6c:cf:df:48:60:d3:
0e:9e:5b:9c:80:50:e2:3f:ed:43:b1:ff:b4:e4:fe:
96:4d:1f:d4:27:9d:cd:d3:ea:4d:1b:11:12:66:e1:
8a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FE:27:EA:26:AE:49:38:ED:CB:03:7C:72:C8:FF:6B:33:4B:F6:ED
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Sf4n6iauSTjtywN8csj_azNL9u0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.179.0/24
151.242.253.0/24
Signature Algorithm: sha256WithRSAEncryption
89:88:1f:4e:51:f5:a5:18:7e:6f:d5:05:d4:3f:5c:83:0f:8a:
7d:09:07:46:06:51:02:96:b6:70:08:5d:71:23:91:0c:70:03:
d0:a7:61:2b:e9:b9:b7:d4:98:77:03:b6:7a:b1:63:30:ba:b0:
fe:d0:2a:df:b0:db:77:2d:7d:fa:a8:89:80:44:91:86:3f:7b:
7b:2c:0d:97:f9:21:7b:d7:de:cd:06:4d:1a:7d:fb:2a:19:ed:
33:15:4e:3e:84:25:43:85:49:e0:59:bb:0f:3a:1a:65:62:5f:
44:31:91:69:92:af:a4:b6:aa:5b:f9:6e:4f:cb:8e:d3:5e:56:
24:82:e6:5d:fd:0f:6f:38:4b:48:82:84:aa:1b:db:4e:73:d8:
dc:c3:da:92:31:27:79:64:7c:31:22:1c:96:d6:81:45:0a:09:
d6:59:8f:de:ab:65:c3:b0:c5:2b:54:e3:33:22:60:1a:15:15:
fe:a6:24:fb:9f:e2:98:d8:83:5a:23:08:a0:bb:37:d5:06:8b:
80:d3:cc:c6:a1:e5:8b:c9:cc:58:6d:34:0f:f1:c6:b6:68:ef:
40:c1:43:9a:fb:0c:80:a2:90:8c:d8:50:58:be:9b:47:11:aa:
e1:2a:6e:0f:2b:26:65:7c:20:97:1a:fc:2e:38:c0:01:e8:7a:
a2:7d:8d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:10:15 2026 by rpki-client