Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cxt8MIt2JnaJ76RJTKuRwjp6uVc.roa
File: cxt8MIt2JnaJ76RJTKuRwjp6uVc.roa (raw, json)
Hash identifier: lEKxND5+XKwxvW9CXNz1O1l/CWq+nVukZ9MWT/OKnSc=
Subject key identifier: 73:1B:7C:30:8B:76:26:76:89:EF:A4:49:4C:AB:91:C2:3A:7A:B9:57
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019BFB01B7705B52D3D1544B315715AD08A9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cxt8MIt2JnaJ76RJTKuRwjp6uVc.roa
Signing time: Mon 26 Jan 2026 15:52:32 +0000
ROA not before: Mon 26 Jan 2026 15:52:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 151.241.232.0/23 maxlen: 24
151.243.54.0/24 maxlen: 24
151.245.222.0/23 maxlen: 24
151.246.64.0/20 maxlen: 20
151.247.28.0/22 maxlen: 24
151.247.56.0/21 maxlen: 21
151.247.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fb:01:b7:70:5b:52:d3:d1:54:4b:31:57:15:ad:08:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 26 15:52:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=731b7c308b76267689efa4494cab91c23a7ab957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:e0:e8:8b:1a:13:d2:87:ee:0c:10:e0:19:
bc:44:3f:1a:8b:cc:02:fb:f6:eb:8d:e6:6d:b8:33:
90:c3:6d:86:0a:66:1a:79:33:c5:94:49:32:c7:17:
e2:b1:a3:14:44:a5:c3:5c:65:d8:52:9b:87:6a:28:
a4:02:27:9b:6f:e9:6f:7b:e7:4a:cb:af:9e:1e:6b:
3c:24:7d:5d:b1:7e:d7:f6:c4:cd:16:e2:5c:c7:f5:
60:e6:ce:37:4e:fa:de:df:ae:f9:b7:14:d6:87:fc:
7c:2e:65:5a:97:a5:33:72:52:7d:8f:73:43:e2:21:
34:3c:57:5b:67:f4:09:ca:3e:cd:fe:12:5e:77:17:
21:b7:41:ad:28:c2:3c:79:c4:8f:c5:67:e8:3e:cb:
ac:84:03:cd:46:26:2f:67:ee:cd:14:7f:f8:41:df:
6b:d2:aa:4c:17:61:25:26:78:14:64:7c:e7:d5:f2:
d3:c0:ef:c4:e6:2d:0f:2b:f8:2c:22:78:87:1f:99:
21:4c:c4:83:6c:a7:8d:f0:af:97:e9:a2:0e:ba:bf:
40:51:3d:c9:bc:49:1b:a8:c5:55:65:c9:4e:d3:05:
78:e6:e5:a5:46:1e:ba:0e:43:59:79:e9:ee:40:d9:
33:bf:98:3d:28:4f:9c:ad:0c:a0:b2:da:eb:b6:b8:
5d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1B:7C:30:8B:76:26:76:89:EF:A4:49:4C:AB:91:C2:3A:7A:B9:57
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cxt8MIt2JnaJ76RJTKuRwjp6uVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.232.0/23
151.243.54.0/24
151.245.222.0/23
151.246.64.0/20
151.247.28.0/22
151.247.56.0/21
151.247.156.0/22
Signature Algorithm: sha256WithRSAEncryption
58:15:ae:98:49:b8:46:b5:66:24:6e:88:37:63:e2:71:b1:4e:
43:88:a1:c2:c9:37:13:a7:b7:cb:e4:a8:2f:57:80:8d:c5:42:
46:9b:d8:2f:c8:a6:4b:ab:8a:32:a3:e4:cb:0e:a9:e2:96:e9:
1c:b9:ad:62:be:ee:07:01:0f:94:ae:2f:a7:31:b1:f5:7a:2b:
90:81:7c:00:8d:78:9b:38:ed:ca:05:41:ff:3c:b0:af:cf:9a:
a8:5c:f9:ca:0f:7e:92:66:0a:89:8f:e6:0d:ce:59:b2:7b:ff:
bb:b4:5f:60:a4:dc:20:3e:bb:c7:61:b1:75:d0:c7:62:08:d5:
23:8e:8d:df:85:c5:fa:2b:16:8e:7e:16:b5:a5:8b:42:a0:a8:
80:08:76:7e:33:87:ad:39:9c:e5:16:c4:8b:e4:7a:7c:fb:aa:
d3:e3:1d:dd:72:09:78:13:67:b8:30:41:f7:2b:71:3b:4f:ea:
42:e3:11:dc:9f:87:b5:46:19:28:60:30:bc:75:3e:78:fc:a7:
93:dc:ab:99:4d:b0:4c:7a:3a:fa:64:c8:7f:0b:08:07:da:40:
80:ca:42:cf:3e:91:bc:df:c7:bc:ab:b1:1c:a7:8c:44:01:50:
96:da:12:9f:90:45:c3:14:8d:78:7f:92:34:c5:cb:a4:6a:ea:
e5:0a:50:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:04:24 2026 by rpki-client