Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dz5rQrEWxs-zBwZ0iJQo9sbBPuE.roa
File: dz5rQrEWxs-zBwZ0iJQo9sbBPuE.roa (raw, json)
Hash identifier: 84azgdKszoT0FfS/jqWZqirxsIFBH1SIPwDCT8u3YPo=
Subject key identifier: 77:3E:6B:42:B1:16:C6:CF:B3:07:06:74:88:94:28:F6:C6:C1:3E:E1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D6915AE829BF737776D122CCCAFA801A6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dz5rQrEWxs-zBwZ0iJQo9sbBPuE.roa
Signing time: Tue 07 Apr 2026 17:55:21 +0000
ROA not before: Tue 07 Apr 2026 17:55:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198087
IP address blocks: 151.240.144.0/24 maxlen: 24
151.242.139.0/24 maxlen: 24
151.242.140.0/24 maxlen: 24
151.244.50.0/24 maxlen: 24
151.246.128.0/24 maxlen: 24
151.247.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:69:15:ae:82:9b:f7:37:77:6d:12:2c:cc:af:a8:01:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 7 17:55:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=773e6b42b116c6cfb3070674889428f6c6c13ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:97:b3:4e:fb:06:de:86:81:3b:fd:48:14:22:
3b:44:b1:9e:4b:d0:8f:4d:20:3b:8e:ac:76:b6:dc:
18:3d:57:be:b4:9c:22:ed:bc:92:d3:94:3b:de:a2:
44:c1:98:ed:8d:6b:80:0e:b9:62:c9:cf:67:58:b5:
4f:58:c4:3e:f8:57:25:7d:db:40:4b:db:e6:02:15:
15:4a:cd:32:87:04:f2:77:6a:b1:21:a0:3e:cb:71:
68:cb:7a:33:00:62:10:fa:05:22:b4:a4:93:60:e2:
db:50:71:94:31:7d:33:11:b6:82:fc:a5:cd:e9:f6:
94:8e:23:db:5d:79:39:4e:eb:d0:cb:f5:58:37:d0:
ee:30:32:59:1a:c2:18:37:15:28:3d:5e:c0:46:12:
8a:0f:f9:a7:9a:2e:9c:ed:a2:17:d2:f3:30:d2:91:
d3:b6:2b:7e:2a:97:ba:60:dc:57:2d:95:cb:72:96:
3d:d1:39:e1:9d:74:a5:45:c8:4d:09:90:cd:46:78:
e9:13:7e:ad:f2:91:2c:4a:94:97:8d:fd:41:4e:2e:
a9:77:85:70:ed:7b:1a:34:43:5e:80:a5:d8:bc:92:
f0:d4:02:08:fb:60:cc:9a:4b:3d:68:86:85:2a:80:
1c:d4:10:1b:a8:4c:e3:22:f2:10:7c:ab:b3:1d:c4:
c5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3E:6B:42:B1:16:C6:CF:B3:07:06:74:88:94:28:F6:C6:C1:3E:E1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dz5rQrEWxs-zBwZ0iJQo9sbBPuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.144.0/24
151.242.139.0-151.242.140.255
151.244.50.0/24
151.246.128.0/24
151.247.174.0/24
Signature Algorithm: sha256WithRSAEncryption
83:81:fd:9a:6d:10:45:d8:fc:5d:25:b0:d6:6d:bf:9c:e5:e4:
73:0a:f5:28:1a:16:a5:90:18:9b:08:fc:a9:55:6e:82:c8:27:
01:c0:13:97:f3:09:27:bd:d3:ca:76:3b:9b:2a:28:de:b0:d1:
56:b4:95:05:f1:cc:47:54:68:c0:00:94:2e:98:bb:cc:be:56:
e5:aa:bd:27:9d:5d:11:1d:ba:12:54:22:21:a8:c3:b0:7b:aa:
73:be:71:5c:b8:33:5f:6f:6a:ed:a1:cb:1c:b5:71:93:95:bd:
62:e6:6e:e5:22:d7:aa:69:65:71:c2:d4:0e:1a:62:ef:7f:c9:
54:62:5e:72:09:0d:1a:0c:b1:6a:e6:5f:65:ba:83:cc:ef:95:
ab:22:69:6a:b2:35:dc:dd:3b:35:54:1d:9b:17:08:7c:4f:d6:
e1:52:1c:d6:09:90:7d:37:40:2f:02:a7:54:e8:cb:74:67:af:
c3:71:b5:45:58:49:97:51:af:95:1f:51:df:7e:61:a1:ed:3f:
ab:22:ce:f5:45:2b:64:f7:ba:d1:4b:c4:58:36:bf:4b:6a:40:
21:de:e4:59:3b:27:50:16:2f:27:75:c3:8e:9f:70:5e:78:c7:
ae:cd:2e:3d:a8:44:f4:40:fc:e1:60:ac:4a:e6:06:9f:bd:7b:
c2:6c:09:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:21:19 2026 by rpki-client