Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mSIJFAtDK4RDKupXK-CkPbozNwg.roa
File: mSIJFAtDK4RDKupXK-CkPbozNwg.roa (raw, json)
Hash identifier: xBbKXCSOBgSGlP+92ORYPWO8EgTTpt6PJBo1wH2PlvI=
Subject key identifier: 99:22:09:14:0B:43:2B:84:43:2A:EA:57:2B:E0:A4:3D:BA:33:37:08
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F9E38E30E3B063B449814646F91D65599
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mSIJFAtDK4RDKupXK-CkPbozNwg.roa
Signing time: Sun 26 Jul 2026 11:39:16 +0000
ROA not before: Sun 26 Jul 2026 11:39:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 37.202.222.0/24 maxlen: 24
151.240.28.0/24 maxlen: 24
151.242.87.0/24 maxlen: 24
151.243.6.0/24 maxlen: 24
151.243.101.0/24 maxlen: 24
151.244.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:38:e3:0e:3b:06:3b:44:98:14:64:6f:91:d6:55:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 26 11:39:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=992209140b432b84432aea572be0a43dba333708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4d:b3:fc:1e:4a:15:f7:61:09:b7:45:b0:6e:
88:89:37:55:7a:01:c6:89:c1:8d:d4:52:89:7d:64:
e9:c1:0c:52:af:fe:88:80:61:e0:8f:5c:ce:f7:26:
5b:67:57:b8:05:57:05:6d:e4:84:08:f9:86:51:7d:
51:56:f3:72:7d:be:a8:37:61:79:f7:79:c7:a0:09:
99:41:9c:aa:21:7e:3a:04:35:88:b7:6b:14:74:3d:
fd:ff:a9:15:72:a4:27:62:24:9c:cd:67:b5:43:fa:
f6:81:53:4a:d3:bd:f7:40:7f:63:21:03:43:a1:8c:
5c:03:87:03:69:e8:b6:bf:26:e1:dd:34:6f:f0:83:
95:d9:52:f4:f5:ff:b3:dd:b7:f0:48:e4:2b:55:c6:
99:97:22:3a:04:c2:74:58:d3:24:7e:4b:3c:9d:de:
ee:3d:0f:09:62:51:4f:6e:d9:c5:af:36:6d:a6:97:
1b:13:37:56:d4:f4:8d:00:74:43:cd:27:6a:35:bf:
ef:c4:1c:06:0c:81:69:83:39:a4:f3:ab:11:64:4c:
ac:3a:c2:d0:4f:52:88:b0:11:de:95:d1:40:46:36:
89:aa:c3:b7:81:72:45:d7:38:23:8f:eb:05:2b:14:
fc:9e:5e:22:82:cd:97:cb:6e:bd:82:25:0e:5b:4a:
eb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:22:09:14:0B:43:2B:84:43:2A:EA:57:2B:E0:A4:3D:BA:33:37:08
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mSIJFAtDK4RDKupXK-CkPbozNwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.222.0/24
151.240.28.0/24
151.242.87.0/24
151.243.6.0/24
151.243.101.0/24
151.244.188.0/24
Signature Algorithm: sha256WithRSAEncryption
af:bf:31:4e:61:82:b5:4c:27:42:4f:5f:34:7e:3b:8b:88:c9:
65:72:83:b6:0e:91:9b:32:68:14:a7:aa:6b:98:2b:3c:5b:5d:
0b:3f:5a:d3:93:0d:3a:d5:b8:93:f8:3a:ca:47:b0:ad:8d:56:
63:79:df:cc:69:74:54:c3:3f:4f:2e:cf:cb:a0:c3:47:41:cd:
da:b9:1a:59:77:ba:cc:f3:a0:77:5e:14:ad:c3:9a:8e:30:f8:
c5:b8:12:ee:17:ca:37:dd:56:3c:9a:a8:20:0c:22:79:cf:f4:
6d:b2:51:6a:4b:38:e4:30:8c:e9:f4:1a:11:2e:58:ba:28:0a:
c6:ea:a0:63:43:09:2b:78:b4:4f:6a:85:4e:a3:73:cc:c4:4e:
6b:d5:c7:93:d0:14:d8:b1:a7:b9:ee:d4:37:d4:90:d0:ca:b9:
17:1e:41:52:3b:f9:fd:09:5c:d3:25:8d:c0:fc:99:dd:87:af:
a1:ad:3a:72:65:15:e8:64:5c:78:c6:d5:c1:2e:a4:77:9f:9c:
c7:5f:88:25:c9:95:b5:22:30:47:96:5a:10:ce:f0:a5:eb:b1:
6a:38:35:b0:ec:5b:88:02:70:53:ce:14:76:ff:54:8c:e2:09:
96:da:ec:4e:ce:9d:a5:d6:96:ff:a7:c4:2f:99:a6:c0:58:20:
81:fe:04:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:07:40 2026 by rpki-client