Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/l3O3XkEW-fu8QXGW9Lg0dLQv3pg.roa
File: l3O3XkEW-fu8QXGW9Lg0dLQv3pg.roa (raw, json)
Hash identifier: GlY9sF4xHNYn2fAkNb2Au7S86NhCwGcC7cJYAs86W90=
Subject key identifier: 97:73:B7:5E:41:16:F9:FB:BC:41:71:96:F4:B8:34:74:B4:2F:DE:98
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019C7EE391F729837F3FE2747E62137398FC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/l3O3XkEW-fu8QXGW9Lg0dLQv3pg.roa
Signing time: Sat 21 Feb 2026 06:29:28 +0000
ROA not before: Sat 21 Feb 2026 06:29:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 151.240.73.0/24 maxlen: 24
151.244.38.0/24 maxlen: 24
151.244.52.0/24 maxlen: 24
151.244.223.0/24 maxlen: 24
151.245.241.0/24 maxlen: 24
151.247.82.0/24 maxlen: 24
151.247.94.0/24 maxlen: 24
151.247.142.0/24 maxlen: 24
151.247.143.0/24 maxlen: 24
151.247.147.0/24 maxlen: 24
151.247.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7e:e3:91:f7:29:83:7f:3f:e2:74:7e:62:13:73:98:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 21 06:29:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9773b75e4116f9fbbc417196f4b83474b42fde98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ef:de:46:31:ea:9a:e9:56:c6:74:b5:2c:f7:
c6:81:f1:17:5a:f8:8a:25:bb:23:fb:0b:4d:6c:58:
7f:62:eb:ca:1b:77:a4:ef:42:59:b8:09:be:26:78:
6f:1f:e1:fb:81:af:8f:d6:67:5b:84:98:c9:df:f3:
f6:7d:01:82:ba:8d:b7:c5:6f:7a:2e:55:3a:4e:05:
c3:ef:1a:11:03:80:32:db:d3:f2:cf:5f:d6:77:d7:
d6:80:57:9c:fc:ab:16:07:4d:d8:6f:70:cb:af:bf:
7a:dd:e6:75:fc:b9:65:c3:5e:3c:7d:f9:4b:52:4d:
51:75:93:22:a6:71:11:93:69:ac:6f:b9:70:c4:9e:
6d:ab:4f:db:27:6b:a3:6f:62:e9:27:d8:ba:d5:40:
06:3d:96:aa:aa:c0:1a:e8:86:0b:e9:24:1a:58:6e:
26:98:a1:45:18:c0:bf:14:5e:42:5a:f2:e2:83:e5:
b9:fb:2b:64:40:8a:d2:d8:36:7b:b1:63:3b:c6:a7:
61:c8:79:77:b7:82:68:e9:da:48:17:1e:22:d8:6d:
ec:1f:c5:5b:ea:45:f9:80:35:08:b4:e4:0c:35:89:
31:b7:b6:8e:4b:9e:e5:c9:76:fa:e4:04:6b:4a:ae:
95:59:6a:87:79:df:f7:b4:c0:4c:98:55:bb:6b:49:
24:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:73:B7:5E:41:16:F9:FB:BC:41:71:96:F4:B8:34:74:B4:2F:DE:98
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/l3O3XkEW-fu8QXGW9Lg0dLQv3pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.73.0/24
151.244.38.0/24
151.244.52.0/24
151.244.223.0/24
151.245.241.0/24
151.247.82.0/24
151.247.94.0/24
151.247.142.0/23
151.247.147.0/24
151.247.151.0/24
Signature Algorithm: sha256WithRSAEncryption
40:14:c9:66:09:6a:b6:97:97:79:27:de:e4:13:b8:62:5e:9c:
5d:c7:ad:8a:ff:06:76:5f:41:dd:b4:97:a8:f4:83:69:15:fe:
c9:fd:9f:26:ee:74:16:6a:a5:93:57:74:55:b4:98:a3:bc:fe:
a1:34:bf:13:a2:27:18:45:03:6c:17:ce:cc:d5:90:71:01:ab:
3b:2d:06:b3:50:dc:ca:5c:96:d7:e9:b8:67:70:c4:d1:03:42:
15:ae:2d:86:20:f6:cc:75:41:70:c0:fb:5f:91:75:ee:31:a2:
a6:bc:22:6e:24:f4:67:54:13:bd:dd:f3:81:7b:b7:1c:8e:6c:
23:24:a9:c2:4b:3a:de:22:37:4f:7b:c7:3f:44:bc:cd:e7:3a:
46:df:a4:2e:18:d6:03:f5:91:b2:6a:f9:63:1c:db:51:82:7a:
1c:b9:7b:a7:44:59:81:d4:cb:18:b8:c6:e9:3e:ef:c2:51:f7:
94:5a:d2:35:59:58:de:1b:05:a5:a3:25:77:ed:71:02:5a:8e:
0a:6b:ae:3c:cb:76:f0:b1:66:50:b4:37:31:70:86:09:b1:ce:
03:13:0c:fa:9d:01:f7:7a:4b:9b:bb:4e:ef:d9:93:e6:a1:cb:
f2:a3:4d:4a:ba:71:b0:6f:12:d2:9f:5a:87:cd:d7:3a:4b:c8:
ef:13:25:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:18:31 2026 by rpki-client