Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hpWEn2zblvmABf9Lzdy7eALfZy8.roa
File: hpWEn2zblvmABf9Lzdy7eALfZy8.roa (raw, json)
Hash identifier: 8nybHimhtQJ8VCrhOKu8BhmEikgT6A9iN67803DbLWM=
Subject key identifier: 86:95:84:9F:6C:DB:96:F9:80:05:FF:4B:CD:DC:BB:78:02:DF:67:2F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EABE776041D0DCF80D158966D371296BA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hpWEn2zblvmABf9Lzdy7eALfZy8.roa
Signing time: Tue 09 Jun 2026 10:22:13 +0000
ROA not before: Tue 09 Jun 2026 10:22:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 37.202.222.0/24 maxlen: 24
151.240.28.0/24 maxlen: 24
151.242.87.0/24 maxlen: 24
151.243.6.0/24 maxlen: 24
151.243.101.0/24 maxlen: 24
151.244.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:e7:76:04:1d:0d:cf:80:d1:58:96:6d:37:12:96:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 9 10:22:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8695849f6cdb96f98005ff4bcddcbb7802df672f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:57:4b:7e:c1:64:15:a8:64:1c:cc:6c:c2:1c:
0f:48:d7:8d:10:41:bb:00:63:ef:fd:fb:d1:b9:9e:
81:d7:0f:b4:88:36:27:c8:0a:ea:99:85:64:42:e6:
73:f7:3d:21:bb:b7:07:f5:b6:f6:b7:9d:a6:a9:8a:
3b:a3:0d:d3:94:9d:b8:fe:5a:fa:24:1c:13:cb:fe:
10:b3:43:e3:1e:64:60:b4:54:f8:f3:3e:56:33:76:
94:8c:e6:59:4c:33:00:51:5d:4a:93:f7:97:ba:92:
e4:ad:9f:6a:4f:a9:87:ec:ab:76:51:19:88:48:12:
07:be:f7:6d:6f:8d:f2:21:21:65:53:ed:97:ad:1f:
06:5f:fb:67:10:38:1b:75:20:b7:14:fd:8e:8c:d0:
58:23:d8:71:e9:67:ce:de:03:ec:f6:fb:90:2b:48:
31:8a:09:87:c7:d1:41:f0:f8:88:1d:8d:ab:90:fa:
0c:c1:79:25:34:68:f0:7d:3f:cf:f9:a3:6d:f9:a5:
40:65:43:1e:ad:e5:9e:6f:16:a1:38:ef:fc:2c:78:
90:e9:d5:62:09:ed:1a:1d:12:70:c6:a2:2d:65:83:
2d:4e:45:1c:f8:d4:a6:54:18:71:51:c8:d3:aa:0b:
6e:cd:0a:55:d2:87:77:81:d3:b7:e8:12:ff:fc:9c:
49:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:95:84:9F:6C:DB:96:F9:80:05:FF:4B:CD:DC:BB:78:02:DF:67:2F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hpWEn2zblvmABf9Lzdy7eALfZy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.222.0/24
151.240.28.0/24
151.242.87.0/24
151.243.6.0/24
151.243.101.0/24
151.244.188.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:a9:a2:20:32:af:37:37:f7:2b:75:ed:02:f4:6c:ca:2a:46:
92:ef:ca:4a:d1:3f:49:bd:00:34:71:32:ad:fa:53:41:ac:a0:
30:7f:48:1b:82:8a:47:74:27:9c:24:6f:44:9a:c7:14:b1:17:
c7:de:2c:f1:42:c4:67:7c:c5:81:87:47:d8:cb:05:f9:37:6c:
b1:5d:12:c5:46:c4:e0:63:9a:02:c9:59:22:3f:d6:21:fb:93:
0b:38:77:9c:ac:02:29:74:9a:92:03:8e:7e:5c:44:4d:26:f5:
31:b0:38:e3:56:15:32:a7:4a:fa:f6:15:f9:c1:8a:ae:4b:03:
d7:0f:be:3c:d2:90:cc:62:f4:8a:32:9b:73:06:5d:19:bf:87:
4e:3b:5a:98:23:26:d6:f0:23:ff:57:26:29:61:18:d0:b2:db:
77:94:70:46:c7:92:be:3c:d3:19:96:79:4c:2a:38:00:1c:f2:
cd:3d:fe:17:73:be:56:10:b3:61:bb:30:07:53:2d:4f:79:b4:
5b:ed:56:b1:91:70:39:3d:51:7d:6d:56:54:b2:b1:13:12:7b:
44:59:e7:18:1d:15:4c:a4:31:8f:22:80:b9:f3:c1:12:7a:91:
c3:a1:fa:d0:ef:f8:37:0d:5e:68:ba:b4:4d:2c:ed:23:f5:d5:
98:43:d8:a5
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ6r53YEHQ3PgNFYlm03Epa6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNjA5MTAyMjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Njk1ODQ5ZjZjZGI5NmY5ODAwNWZmNGJjZGRjYmI3ODAyZGY2NzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FdLfsFkFahkHMxswhwPSNeNEEG7
AGPv/fvRuZ6B1w+0iDYnyArqmYVkQuZz9z0hu7cH9bb2t52mqYo7ow3TlJ24/lr6
JBwTy/4Qs0PjHmRgtFT48z5WM3aUjOZZTDMAUV1Kk/eXupLkrZ9qT6mH7Kt2URmI
SBIHvvdtb43yISFlU+2XrR8GX/tnEDgbdSC3FP2OjNBYI9hx6WfO3gPs9vuQK0gx
igmHx9FB8PiIHY2rkPoMwXklNGjwfT/P+aNt+aVAZUMereWebxahOO/8LHiQ6dVi
Ce0aHRJwxqItZYMtTkUc+NSmVBhxUcjTqgtuzQpV0od3gdO36BL//JxJKwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFIaVhJ9s25b5gAX/S83cu3gC32cvMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvaHBXRW4yemJsdm1BQmY5THpkeTdlQUxmWnk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAJcreAwQA
l/AcAwQAl/JXAwQAl/MGAwQAl/NlAwQAl/S8MA0GCSqGSIb3DQEBCwUAA4IBAQC0
qaIgMq83N/crde0C9GzKKkaS78pK0T9JvQA0cTKt+lNBrKAwf0gbgopHdCecJG9E
mscUsRfH3izxQsRnfMWBh0fYywX5N2yxXRLFRsTgY5oCyVkiP9Yh+5MLOHecrAIp
dJqSA45+XERNJvUxsDjjVhUyp0r69hX5wYquSwPXD7480pDMYvSKMptzBl0Zv4dO
O1qYIybW8CP/VyYpYRjQstt3lHBGx5K+PNMZlnlMKjgAHPLNPf4Xc75WELNhuzAH
Uy1PebRb7VaxkXA5PVF9bVZUsrETEntEWecYHRVMpDGPIoC588ESepHDofrQ7/g3
DV5ourRNLO0j9dWYQ9il
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:13 2026 by rpki-client