Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SskT8-x8ihEnP0Hj2IqussphOG8.roa
File: SskT8-x8ihEnP0Hj2IqussphOG8.roa (raw, json)
Hash identifier: 4S79RcbgqgHx9zQHrm/x7uhGAbDcZjIWi84NtyQ/qTE=
Subject key identifier: 4A:C9:13:F3:EC:7C:8A:11:27:3F:41:E3:D8:8A:AE:B2:CA:61:38:6F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EACE1645B106C7B0F83C92EF051C27A05
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SskT8-x8ihEnP0Hj2IqussphOG8.roa
Signing time: Tue 09 Jun 2026 14:55:12 +0000
ROA not before: Tue 09 Jun 2026 14:55:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203113
IP address blocks: 151.242.253.0/24 maxlen: 24
151.244.121.0/24 maxlen: 24
151.244.220.0/24 maxlen: 24
151.247.0.0/24 maxlen: 24
151.247.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:e1:64:5b:10:6c:7b:0f:83:c9:2e:f0:51:c2:7a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 9 14:55:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ac913f3ec7c8a11273f41e3d88aaeb2ca61386f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:c9:6c:7d:61:51:30:a9:ca:47:fb:e5:3c:
a3:68:ef:96:0d:e8:60:0a:06:b3:59:7c:07:60:90:
a4:7a:d8:a0:00:6f:8c:2a:2f:8b:61:e6:33:d0:16:
00:3f:bd:48:c4:15:c6:74:9b:c1:28:ba:58:88:c9:
75:97:a4:e8:9c:35:5c:b8:d9:96:66:ef:b6:7d:52:
a7:8b:4b:31:52:cf:2e:96:de:32:bc:37:84:65:76:
af:ad:14:10:b8:fd:0b:d0:80:95:e8:8e:07:f9:f6:
12:4c:78:97:b9:9b:f9:7b:6c:0c:16:97:09:8a:34:
0c:57:66:47:1b:2a:f4:1d:1a:3f:e5:68:43:8d:71:
d9:1a:d8:39:72:9d:53:f1:62:1f:3f:92:5a:24:9d:
21:87:ff:e0:9d:1c:7c:08:dd:42:1e:19:eb:9c:4b:
94:b8:56:72:1f:17:f9:18:31:83:b5:7f:e8:3b:d6:
24:e2:31:2c:e9:9b:56:91:5c:47:02:77:2b:ba:d1:
57:f7:28:13:f8:ac:4f:44:2d:56:7e:fe:17:52:8e:
5c:2c:6a:01:11:5b:91:13:bc:8c:21:ea:99:de:88:
fb:b7:03:fb:8f:42:e6:0e:15:77:fa:c0:ce:fc:bb:
83:2a:f6:69:76:08:c2:6d:62:6e:26:0b:73:27:1e:
ed:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C9:13:F3:EC:7C:8A:11:27:3F:41:E3:D8:8A:AE:B2:CA:61:38:6F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SskT8-x8ihEnP0Hj2IqussphOG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.253.0/24
151.244.121.0/24
151.244.220.0/24
151.247.0.0/24
151.247.78.0/24
Signature Algorithm: sha256WithRSAEncryption
12:50:de:f2:99:57:cc:0c:b2:02:44:a5:e2:28:75:84:95:af:
58:df:a5:af:20:64:f9:5c:a5:15:d9:8d:c9:84:03:e9:72:29:
37:dc:8e:7b:8c:d7:4a:c7:de:66:55:cc:f2:2b:2d:f4:f5:ef:
c0:e0:96:d4:51:7f:07:a1:9e:82:6e:3b:ba:65:bd:cf:43:95:
ba:1e:d4:e2:39:28:07:fe:35:93:cc:4e:47:e4:b9:1e:d0:b2:
07:b6:27:34:e0:5f:70:43:03:7d:51:79:e6:a4:d0:19:28:80:
78:30:ea:95:99:34:c4:39:0d:38:20:4f:c8:e3:49:dc:89:3e:
e9:3f:e8:aa:26:29:1f:3c:03:69:16:50:dc:f0:1c:22:84:d9:
08:39:2d:94:7c:9b:3a:bb:74:d3:7e:2c:cf:44:d6:51:0f:f2:
c1:3c:cd:b5:6b:4a:34:ec:52:66:41:11:d3:ac:b5:13:09:ea:
51:e9:02:1a:51:c1:0b:9d:d8:cc:4e:48:15:8c:e4:10:b1:77:
46:30:be:00:00:6d:c4:18:33:90:5a:cd:fe:e9:fc:e7:7c:6f:
45:ca:87:f6:40:9c:a3:5c:10:11:14:fc:16:5e:0e:e4:75:2a:
7e:0c:a1:ec:29:6d:67:43:e5:83:b5:d0:ce:d5:d5:2e:7d:eb:
26:0a:b2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:07:19 2026 by rpki-client