Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fhjFIrUDgePCWwcNioAoVbTjDWk.roa
File: fhjFIrUDgePCWwcNioAoVbTjDWk.roa (raw, json)
Hash identifier: uAG/9n94mUHuCA4B2Fk1G8dSpW5NeAlRVfSR8hs8Tqc=
Subject key identifier: 7E:18:C5:22:B5:03:81:E3:C2:5B:07:0D:8A:80:28:55:B4:E3:0D:69
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0B525813EDE36E5813FC8C0CF3FB177F5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fhjFIrUDgePCWwcNioAoVbTjDWk.roa
Signing time: Fri 18 Sep 2026 15:32:08 +0000
ROA not before: Fri 18 Sep 2026 15:32:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64267
IP address blocks: 151.240.2.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.241.15.0/24 maxlen: 24
151.241.33.0/24 maxlen: 24
151.241.43.0/24 maxlen: 24
151.241.48.0/24 maxlen: 24
151.242.26.0/24 maxlen: 24
151.242.114.0/24 maxlen: 24
151.244.42.0/24 maxlen: 24
151.244.69.0/24 maxlen: 24
151.245.69.0/24 maxlen: 24
151.245.171.0/24 maxlen: 24
151.246.224.0/24 maxlen: 24
151.246.230.0/24 maxlen: 24
151.246.234.0/24 maxlen: 24
151.247.35.0/24 maxlen: 24
151.247.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:25:81:3e:de:36:e5:81:3f:c8:c0:cf:3f:b1:77:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 18 15:32:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e18c522b50381e3c25b070d8a802855b4e30d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:c2:26:02:c1:40:d5:ac:c8:e4:b6:24:dd:
d2:99:0e:5e:0a:9e:15:84:c1:7b:07:d8:e0:a1:23:
dc:c9:f9:00:81:cd:37:b0:ac:cb:ec:a4:f3:2c:71:
7a:02:f5:91:1a:fb:dc:ac:6c:d3:92:e4:91:00:4b:
e6:b5:12:75:90:ba:13:d9:83:e7:11:ed:88:77:37:
ef:70:15:59:7c:76:b2:0a:a8:33:da:89:44:34:fc:
de:d1:70:35:03:4c:34:50:b7:31:fa:4e:48:c0:e9:
9c:ac:cc:8f:ed:11:2d:2e:5c:36:4f:12:10:f1:9b:
29:64:c9:50:81:e6:98:83:12:05:d9:16:ae:ca:95:
82:b2:5b:4b:d2:9b:47:7f:3d:60:0e:06:b2:93:f4:
bf:f6:11:f7:0f:08:f8:59:26:14:e0:df:66:c9:be:
3d:26:b4:b4:23:98:64:6e:f6:8a:0e:3e:24:27:c0:
3b:89:9a:32:2c:44:17:d0:61:41:8e:f4:18:4c:2b:
15:ec:95:ef:02:63:69:3d:f7:15:87:21:05:7f:e3:
f2:4d:ea:bb:28:f3:96:fc:80:c2:30:d5:ef:16:cf:
06:f0:1f:84:3f:fd:18:f6:29:81:bf:46:49:44:62:
4f:1b:99:9c:71:65:5a:4f:1c:ee:cb:04:ac:21:71:
af:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:18:C5:22:B5:03:81:E3:C2:5B:07:0D:8A:80:28:55:B4:E3:0D:69
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fhjFIrUDgePCWwcNioAoVbTjDWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.2.0/24
151.240.173.0/24
151.241.15.0/24
151.241.33.0/24
151.241.43.0/24
151.241.48.0/24
151.242.26.0/24
151.242.114.0/24
151.244.42.0/24
151.244.69.0/24
151.245.69.0/24
151.245.171.0/24
151.246.224.0/24
151.246.230.0/24
151.246.234.0/24
151.247.35.0/24
151.247.246.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:bf:af:2e:6e:d9:24:df:03:aa:2b:44:23:7e:ae:d9:5e:1f:
00:36:52:a2:07:f3:52:17:5e:0e:a9:74:ac:c1:e0:95:63:b2:
3e:74:41:33:f9:82:27:5d:26:4d:5d:16:2f:e1:ee:1d:f5:58:
34:7b:ae:44:24:b7:af:a7:b7:fc:25:6c:33:b4:fe:6e:94:72:
4e:24:2f:a3:c8:81:43:0f:ce:1e:5f:ce:f2:d7:88:27:2f:6f:
53:7c:c5:00:f7:45:74:b4:f5:08:2e:9c:46:38:f0:c1:32:c9:
fd:08:03:a8:95:1b:ac:f1:d0:99:64:07:6a:0b:24:72:e9:4f:
b8:04:8d:ce:95:5a:97:e0:f0:83:66:a1:7a:47:e9:92:86:5e:
c9:6c:b1:08:ef:bf:17:67:16:59:c9:7c:11:6c:e8:2f:ff:ae:
26:e3:fc:f8:28:29:9d:7e:ea:d8:6a:78:64:97:89:77:39:df:
78:95:5c:75:3b:af:ee:c9:ac:f1:ad:38:03:58:eb:2a:f8:06:
07:bb:7d:19:be:2d:8e:c9:22:d9:5a:97:1b:f8:f0:69:a5:ce:
2d:9f:f4:74:16:f3:3a:fd:88:1d:ae:ea:93:42:45:a4:63:70:
dd:b5:31:0e:6e:33:a0:b2:48:93:47:fa:4a:39:97:11:a6:c3:
04:a3:27:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:01:24 2026 by rpki-client