Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fLu6sLRg6_Q6EXoWcelWgzP3-CY.roa
File: fLu6sLRg6_Q6EXoWcelWgzP3-CY.roa (raw, json)
Hash identifier: DVncokY5/7F2Ga8pc2G4wDHUMRVsw1Pl+dJixsgG+f8=
Subject key identifier: 7C:BB:BA:B0:B4:60:EB:F4:3A:11:7A:16:71:E9:56:83:33:F7:F8:26
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0AFE5830C4A9CEF7859E07C62614221F3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fLu6sLRg6_Q6EXoWcelWgzP3-CY.roa
Signing time: Thu 17 Sep 2026 15:04:09 +0000
ROA not before: Thu 17 Sep 2026 15:04:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200017
IP address blocks: 151.240.112.0/24 maxlen: 24
151.240.116.0/24 maxlen: 24
151.240.117.0/24 maxlen: 24
151.242.78.0/24 maxlen: 24
151.242.177.0/24 maxlen: 24
151.243.29.0/24 maxlen: 24
151.243.45.0/24 maxlen: 24
151.244.128.0/24 maxlen: 24
151.244.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:e5:83:0c:4a:9c:ef:78:59:e0:7c:62:61:42:21:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 17 15:04:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7cbbbab0b460ebf43a117a1671e9568333f7f826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:77:a8:26:61:1f:a7:82:ef:1c:49:6e:c7:26:
f0:08:18:76:79:d5:87:6a:09:0f:1c:8e:46:c0:17:
ca:0a:7a:92:31:bc:38:e8:b5:16:77:0b:0a:b5:ba:
90:f2:42:65:a6:69:6e:44:0b:e0:b3:46:37:d5:2f:
a1:e9:96:ce:87:c6:c0:c0:16:80:cd:a5:8d:c5:44:
83:e3:ea:af:64:0e:b9:59:b6:0a:d6:2b:0b:39:17:
5c:22:30:80:b8:40:d9:69:12:a9:63:c0:e5:4f:bf:
1e:b7:0e:a6:f8:70:ad:c7:78:68:75:e3:d7:07:c8:
f0:42:55:24:b4:fe:26:b9:72:20:cd:12:2d:98:54:
c9:d1:a8:37:9d:1e:36:90:c1:9a:82:2b:05:d2:6f:
73:8e:3c:43:77:e8:75:3f:26:b6:a3:7f:32:a3:60:
c6:02:f9:ef:c2:cb:c9:d8:04:a7:35:92:af:97:73:
c5:df:26:f4:94:61:1b:2b:a0:08:2a:6f:de:48:2f:
90:69:c1:83:18:30:96:56:81:50:c4:bd:6d:bd:f3:
a4:e2:d1:a1:8f:d2:4b:40:82:90:80:ec:ea:92:c3:
7a:cd:77:89:98:85:80:22:03:fd:df:2e:9d:a8:20:
10:b8:2c:7f:e5:cc:85:e4:8f:25:a2:5a:5e:15:d2:
d4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BB:BA:B0:B4:60:EB:F4:3A:11:7A:16:71:E9:56:83:33:F7:F8:26
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fLu6sLRg6_Q6EXoWcelWgzP3-CY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.112.0/24
151.240.116.0/23
151.242.78.0/24
151.242.177.0/24
151.243.29.0/24
151.243.45.0/24
151.244.128.0/24
151.244.130.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:87:48:c8:62:65:bd:5f:98:c9:51:92:f2:77:89:8b:aa:f6:
7b:0e:e4:1a:7a:69:1b:c3:9c:7a:ea:88:28:2d:a3:a9:f0:97:
3d:8b:40:b2:07:1e:aa:0d:bd:81:b1:26:4d:91:4d:9d:51:fc:
87:90:0a:64:73:55:1f:08:32:a8:55:7b:f5:e6:87:7e:a2:a9:
b9:03:47:88:f7:7e:cc:22:49:cd:ed:84:07:36:01:7b:d0:4d:
6c:f0:33:44:4b:3a:bf:ce:5f:dc:59:3c:8c:12:e6:da:fc:02:
e8:a0:59:da:c7:2a:69:cc:69:66:62:80:95:51:b0:89:84:24:
82:84:51:59:b5:3f:96:03:b5:02:b1:7b:89:34:33:fb:07:bf:
68:af:aa:ef:0a:be:e7:ef:2b:85:94:3b:e8:7b:95:00:9d:1e:
2f:9c:63:95:27:9c:8e:11:a3:9a:ee:51:ad:67:62:46:ba:b0:
b2:5b:1e:a5:a1:cb:a7:e0:aa:b1:71:3e:17:eb:ad:63:60:77:
1b:45:71:46:a9:85:84:9c:45:4b:30:43:0e:90:70:b0:83:3c:
20:7c:73:ed:24:86:4f:82:34:ab:4b:f3:27:04:20:ae:15:80:
a5:bc:75:79:3b:43:1a:05:97:d3:4e:f1:10:27:0e:1d:97:18:
61:35:39:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:30:28 2026 by rpki-client