Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/i4leWPRSmlOsRvb54lXEU_or1YI.roa
File: i4leWPRSmlOsRvb54lXEU_or1YI.roa (raw, json)
Hash identifier: ekcUDoaQKaxIQnRsdp1/tCsxsnEpIEZQcssbsOhU2QA=
Subject key identifier: 8B:89:5E:58:F4:52:9A:53:AC:46:F6:F9:E2:55:C4:53:FA:2B:D5:82
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0B5258091A1386D7F5F2C331B7F2A3DEA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/i4leWPRSmlOsRvb54lXEU_or1YI.roa
Signing time: Fri 18 Sep 2026 15:32:08 +0000
ROA not before: Fri 18 Sep 2026 15:32:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54252
IP address blocks: 151.240.2.0/24 maxlen: 24
151.241.33.0/24 maxlen: 24
151.241.43.0/24 maxlen: 24
151.241.48.0/24 maxlen: 24
151.242.26.0/24 maxlen: 24
151.244.42.0/24 maxlen: 24
151.245.69.0/24 maxlen: 24
151.245.171.0/24 maxlen: 24
151.246.224.0/24 maxlen: 24
151.246.230.0/24 maxlen: 24
151.246.234.0/24 maxlen: 24
151.247.109.0/24 maxlen: 24
151.247.110.0/24 maxlen: 24
151.247.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:25:80:91:a1:38:6d:7f:5f:2c:33:1b:7f:2a:3d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 18 15:32:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b895e58f4529a53ac46f6f9e255c453fa2bd582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f0:e1:c6:1d:c4:10:4f:dc:25:90:34:99:20:
93:7b:1b:b0:14:07:6e:de:c6:bc:02:5c:9a:9c:dc:
e4:83:84:34:35:dd:b3:ee:4b:d2:59:4a:a6:19:e2:
91:5a:d0:60:95:e5:44:9f:46:2e:21:64:61:dc:b2:
60:78:b0:72:36:fd:e3:3c:75:04:1a:f4:7c:4b:27:
5f:a0:60:aa:ff:af:30:d7:a4:1a:fc:c3:94:d9:d3:
f1:fc:32:17:28:2b:c3:cd:9b:6d:32:48:41:93:b4:
93:49:88:14:34:02:0d:eb:b8:21:d4:1f:69:6b:bf:
b7:bd:f1:3b:6e:84:58:d0:66:1a:b0:71:50:9d:bb:
e6:c8:51:36:a1:c1:5c:31:ac:70:1e:2e:c6:b9:22:
14:6f:60:a4:5c:10:c8:0a:18:6f:1d:65:c5:94:09:
e1:50:50:b7:9d:ba:6b:97:a4:8a:1f:bd:d8:fd:df:
bc:e4:af:fd:e7:26:f8:63:46:d7:4a:bf:ab:9a:49:
3b:e8:3e:2d:c0:20:5a:cd:21:c7:58:71:91:63:ec:
1f:7f:3c:b2:f6:6d:10:0d:72:36:da:63:79:b8:be:
5d:82:c7:05:88:05:f3:af:0c:54:c3:e3:a6:18:83:
6a:8d:f6:c1:67:33:fc:0e:3f:b2:1a:f4:43:ea:61:
18:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:89:5E:58:F4:52:9A:53:AC:46:F6:F9:E2:55:C4:53:FA:2B:D5:82
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/i4leWPRSmlOsRvb54lXEU_or1YI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.2.0/24
151.241.33.0/24
151.241.43.0/24
151.241.48.0/24
151.242.26.0/24
151.244.42.0/24
151.245.69.0/24
151.245.171.0/24
151.246.224.0/24
151.246.230.0/24
151.246.234.0/24
151.247.109.0-151.247.110.255
151.247.246.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:9a:85:6f:01:06:db:6f:a7:8c:05:76:2e:f3:d1:da:d2:89:
ad:2f:07:0c:b0:b4:c2:de:a0:ba:f2:71:32:aa:f5:67:5e:e7:
4f:62:75:8e:e0:76:c7:6d:79:b0:96:88:d9:4c:7c:37:06:a0:
b4:66:f5:e5:26:c0:ef:08:49:61:1d:b0:8c:49:44:ab:7a:dc:
f7:fe:8b:82:bf:da:2b:87:e9:0c:9f:5d:2e:dd:47:ad:a2:7b:
5c:4a:78:d9:e3:83:c3:87:d5:d0:9d:b4:db:17:df:bb:fc:8e:
d6:b9:e9:d5:b9:07:77:19:fe:71:37:5b:88:c2:90:c0:77:02:
59:28:43:6f:13:e5:9e:3d:b6:c0:60:c8:5b:7c:35:81:e0:f2:
92:95:56:4f:ef:dc:16:10:a6:e2:33:1e:5b:4e:20:40:59:1e:
c3:03:d0:df:c9:9c:ba:a9:6f:ed:33:cc:84:52:6e:df:e5:70:
fa:60:e9:6c:de:77:83:db:88:ec:54:98:e2:d4:d2:fa:96:70:
2c:c9:8f:56:35:b5:29:1a:b4:c6:63:eb:42:79:a8:28:ea:0f:
0d:be:30:d6:31:e7:b3:89:b3:56:de:c2:61:a8:45:08:a1:da:
45:fd:67:d3:1a:b0:d3:07:f9:c3:d4:45:2b:28:5d:79:38:0a:
2f:ff:29:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:22:14 2026 by rpki-client