Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lSdoojW7RqIT1hc78PD14BPhqv8.roa
File: lSdoojW7RqIT1hc78PD14BPhqv8.roa (raw, json)
Hash identifier: 5ZEud0boizOhFR2HVUWWpO890VobflQvrn01kTQyIhQ=
Subject key identifier: 95:27:68:A2:35:BB:46:A2:13:D6:17:3B:F0:F0:F5:E0:13:E1:AA:FF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A09EBFDDDF8AA0EA11E0D3BF8099048F35
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lSdoojW7RqIT1hc78PD14BPhqv8.roa
Signing time: Mon 14 Sep 2026 07:09:29 +0000
ROA not before: Mon 14 Sep 2026 07:09:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 151.240.226.0/24 maxlen: 24
151.240.250.0/24 maxlen: 24
151.240.251.0/24 maxlen: 24
151.240.252.0/24 maxlen: 24
151.247.0.0/24 maxlen: 24
151.247.15.0/24 maxlen: 24
151.247.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:bf:dd:df:8a:a0:ea:11:e0:d3:bf:80:99:04:8f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 14 07:09:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=952768a235bb46a213d6173bf0f0f5e013e1aaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:92:95:80:76:d7:5e:71:ce:2d:dc:75:65:5f:
dc:d4:3f:34:fb:6e:06:63:b5:05:e9:5c:8d:0a:c5:
54:c0:6c:05:ac:3e:ee:32:b1:0c:3c:9e:4e:f3:d7:
4e:3c:3e:44:77:5a:2b:bf:fd:40:7c:74:c6:80:42:
09:f7:a7:6a:1b:68:c9:b8:a7:ce:90:f7:9c:fd:92:
b2:96:46:27:92:46:2c:e7:14:dc:56:55:d2:b1:9d:
1f:f9:5e:b3:6f:19:1c:02:c7:0b:1c:f4:30:c5:4d:
22:4f:45:f8:44:0b:8a:ea:0a:28:82:b9:f6:90:7c:
9b:be:d1:0e:d7:ea:d6:81:0b:eb:90:83:8b:65:f3:
df:8c:ae:44:d6:a6:ad:fd:d5:f1:d5:87:14:88:53:
2c:0c:d9:67:e5:7a:c5:13:09:29:69:c7:88:88:12:
4d:6f:18:1e:3f:e1:05:c6:89:bb:55:dd:84:48:b3:
a0:4a:eb:06:e4:0d:fc:fe:89:f7:73:05:a7:78:52:
26:e2:cb:05:da:33:8a:25:9c:5b:43:aa:b1:b5:58:
dd:a3:e5:00:1e:a1:8a:a4:59:2b:42:fb:ee:d3:eb:
47:d1:96:a6:37:05:17:9f:57:80:68:32:de:f2:c0:
5e:e8:c1:e8:59:b2:e5:7a:c9:ee:e6:cd:f0:46:4e:
d7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:27:68:A2:35:BB:46:A2:13:D6:17:3B:F0:F0:F5:E0:13:E1:AA:FF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lSdoojW7RqIT1hc78PD14BPhqv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.226.0/24
151.240.250.0-151.240.252.255
151.247.0.0/24
151.247.15.0/24
151.247.175.0/24
Signature Algorithm: sha256WithRSAEncryption
48:12:01:75:f7:eb:ee:e7:00:7b:47:4d:76:81:f5:37:a6:ea:
a0:cb:55:3e:d2:43:10:40:b8:69:b3:85:af:dc:72:42:d7:33:
f7:c8:27:be:69:fc:3d:eb:80:e7:e2:fa:c5:35:c2:3f:2a:71:
be:c3:a0:ec:ed:6b:16:55:5e:35:41:4e:79:a1:e8:8c:28:0b:
42:57:51:bb:34:84:29:b2:f2:8b:6c:7e:fb:03:e7:65:c7:3b:
f1:21:55:b6:3b:67:cd:6c:38:35:bf:bb:3f:b0:d4:29:0e:98:
9c:42:62:9f:b0:65:71:51:b5:20:34:52:36:a4:65:ec:21:60:
18:f6:d7:c8:48:02:13:5f:e8:db:82:33:04:06:5a:c9:7b:dd:
2d:e2:f9:16:d4:25:c1:e3:db:6d:0c:34:9d:47:05:59:d8:3a:
81:eb:cb:e2:22:ed:99:60:40:96:6b:82:c0:b8:66:d7:99:05:
d3:1d:1c:b2:cc:80:0f:d3:ae:62:86:93:4a:43:77:cf:dc:80:
2c:b7:7d:60:de:78:41:fe:4d:6e:ee:cf:c1:81:b9:6a:03:70:
fc:41:fd:bb:80:88:28:8f:9f:6f:d5:b8:f1:78:bf:66:5a:b5:
17:cc:8c:3c:4f:8f:99:57:e2:9d:cf:34:29:14:13:03:87:25:
e1:ba:4c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:19:22 2026 by rpki-client