Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hcWgOKJqIPNTKp9vNoNEOnmZMXM.roa
File: hcWgOKJqIPNTKp9vNoNEOnmZMXM.roa (raw, json)
Hash identifier: DhnEDbkObKg4ppmWLpxfHkp3nQN1asXnPf7O+1HTXgU=
Subject key identifier: 85:C5:A0:38:A2:6A:20:F3:53:2A:9F:6F:36:83:44:3A:79:99:31:73
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A09548753CA0794A738BD62AE7C6DC811D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hcWgOKJqIPNTKp9vNoNEOnmZMXM.roa
Signing time: Sat 12 Sep 2026 11:02:28 +0000
ROA not before: Sat 12 Sep 2026 11:02:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211407
IP address blocks: 151.242.116.0/24 maxlen: 24
151.244.119.0/24 maxlen: 24
151.244.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:95:48:75:3c:a0:79:4a:73:8b:d6:2a:e7:c6:dc:81:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 12 11:02:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85c5a038a26a20f3532a9f6f3683443a79993173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:3f:1c:49:d3:b2:aa:97:95:61:92:de:58:
70:46:fb:dd:f4:ec:7c:69:b0:b8:99:33:3b:1f:fa:
08:5f:b7:d9:7d:7e:f4:df:e0:ae:85:4a:9e:80:93:
84:e1:a2:e9:2c:e0:29:28:d8:5b:fa:2f:43:e4:2b:
16:00:c9:e8:9b:d4:e0:4c:b1:a5:cb:25:59:bc:0e:
4b:46:59:e4:4b:41:d5:ce:57:eb:ce:1a:e1:f0:b4:
bf:e3:3e:07:cb:6f:b1:e6:a5:3c:49:5a:4d:8d:6d:
6a:ac:0b:fb:74:2b:ce:ab:98:2f:85:e3:0c:8f:6a:
a7:ea:14:c8:6d:13:e9:dc:38:14:73:be:b2:c8:42:
d1:ae:0b:9a:fb:bc:a1:40:a6:03:ac:89:91:1c:9a:
4e:98:bc:ba:6b:2a:63:36:f8:6f:79:53:0f:b3:64:
54:7a:9a:13:ea:55:eb:96:39:3e:38:aa:9c:48:1b:
39:fb:be:59:32:3a:c1:01:a1:9b:77:1e:43:59:36:
a8:43:a7:4f:7c:03:6a:16:36:b3:65:6a:7d:a4:9b:
bc:06:30:ba:a1:3b:9b:a1:40:ae:24:a7:10:b2:6f:
44:12:01:b0:66:7e:6d:f8:a5:03:fd:3b:85:0a:34:
32:64:22:13:87:7b:e8:53:8b:5c:1b:f6:7d:bc:60:
b8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C5:A0:38:A2:6A:20:F3:53:2A:9F:6F:36:83:44:3A:79:99:31:73
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hcWgOKJqIPNTKp9vNoNEOnmZMXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.116.0/24
151.244.119.0/24
151.244.238.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ea:02:75:23:2f:91:f6:96:c1:f5:4a:ef:d7:e4:c7:9a:cd:
95:59:52:25:da:7f:49:99:48:9b:9c:e0:22:36:7b:5c:ab:fd:
55:4b:73:e6:72:0d:30:ab:70:da:f8:a6:56:0a:18:5c:bd:df:
0f:73:e1:da:a6:d0:7a:be:38:d4:a9:f7:b8:40:4c:86:4c:55:
89:b9:a2:85:ce:0c:50:84:28:87:a1:c7:65:bb:dd:b9:77:6e:
d7:3a:da:46:8a:6f:d1:d5:9c:4a:23:37:af:66:de:19:60:38:
08:1a:e4:b2:27:62:58:5d:36:e2:e1:37:b6:05:01:3e:ae:e6:
6e:92:aa:01:d2:16:e3:56:d6:c7:77:d6:a0:8d:1b:de:e8:b1:
a6:08:c8:b6:1f:16:20:51:38:b8:ba:73:28:6f:86:68:e1:1b:
b7:c3:da:5c:19:c0:06:aa:8e:0a:52:17:17:ff:60:9b:d5:d7:
12:bd:60:ec:4d:9f:8f:3d:d2:8c:70:6b:f1:b1:a0:85:74:d6:
73:c7:a7:54:51:0e:44:bf:06:51:6d:be:75:ff:94:5f:73:09:
49:a0:34:59:08:c8:cb:a3:b0:0a:ad:0b:c5:b4:db:c9:c2:93:
d5:a1:d2:b1:53:b0:c1:f9:59:a2:e2:80:b6:da:38:29:e2:74:
84:2a:9d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:36:18 2026 by rpki-client