Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/npeWVBUK92aWuxiD9qA1OShyMUk.roa
File: npeWVBUK92aWuxiD9qA1OShyMUk.roa (raw, json)
Hash identifier: ZurKDZeUmLEa4vxyVSZDgHlooSN5e3+AYNfuS+WiIi0=
Subject key identifier: 9E:97:96:54:15:0A:F7:66:96:BB:18:83:F6:A0:35:39:28:72:31:49
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0B521D64312FFDF78A3215A28E0F388D9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/npeWVBUK92aWuxiD9qA1OShyMUk.roa
Signing time: Fri 18 Sep 2026 15:28:08 +0000
ROA not before: Fri 18 Sep 2026 15:28:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219105
IP address blocks: 151.241.23.0/24 maxlen: 24
151.242.9.0/24 maxlen: 24
151.242.35.0/24 maxlen: 24
151.242.52.0/24 maxlen: 24
151.243.16.0/24 maxlen: 24
151.244.239.0/24 maxlen: 24
151.246.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:21:d6:43:12:ff:df:78:a3:21:5a:28:e0:f3:88:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 18 15:28:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9e979654150af76696bb1883f6a0353928723149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:42:ac:c4:fb:3c:c6:7a:6e:43:4f:cf:69:be:
e3:bd:f5:15:c2:a8:04:7f:d1:11:ea:e5:f2:15:db:
e3:f6:47:26:58:e7:19:2c:79:3b:fe:34:76:aa:04:
d0:27:ee:94:1b:16:ce:16:b4:c0:33:3b:d5:3d:a0:
c1:95:86:5c:49:1f:17:0f:0b:b4:42:8b:7e:3f:ef:
6b:87:2c:17:9f:a8:a8:f6:4e:65:16:43:d5:e9:e2:
e4:64:a9:18:60:84:b4:2d:09:84:b7:2a:fe:86:e0:
98:c8:b8:46:76:99:db:08:4d:b3:52:72:70:dc:76:
a2:f3:33:40:38:b9:c0:38:4a:6b:77:69:ac:6b:5e:
2b:a1:69:3d:bc:67:7e:76:07:82:75:e0:8b:40:37:
f1:1a:ab:0a:82:3b:83:71:12:9c:c1:4e:29:f2:30:
24:f7:81:07:43:46:bf:2d:6a:8e:62:cf:af:80:94:
37:f6:ce:a8:c4:ba:a4:1f:5d:23:c0:3e:b7:0d:12:
29:38:e9:80:02:85:f8:f1:0f:46:29:f0:30:4b:6d:
7e:dd:ca:48:c2:82:6a:77:13:4b:0e:29:99:38:2c:
68:f6:54:7d:10:b5:75:13:36:be:5b:07:4e:7d:24:
93:88:0b:49:f5:d6:24:17:63:01:94:79:70:b6:79:
65:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:97:96:54:15:0A:F7:66:96:BB:18:83:F6:A0:35:39:28:72:31:49
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/npeWVBUK92aWuxiD9qA1OShyMUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.23.0/24
151.242.9.0/24
151.242.35.0/24
151.242.52.0/24
151.243.16.0/24
151.244.239.0/24
151.246.5.0/24
Signature Algorithm: sha256WithRSAEncryption
05:97:18:5a:f1:c8:89:8a:b1:29:af:1a:d9:94:58:81:5b:cc:
1a:de:c5:5e:a4:78:32:f3:0b:65:da:39:07:d3:7e:f4:11:45:
1f:49:63:81:47:5c:b6:55:88:eb:4b:64:e4:1a:af:cc:8a:55:
87:55:0f:82:7d:ac:1d:06:92:41:e6:61:e6:88:98:9d:4a:d4:
e9:6f:4f:22:48:3d:68:7e:fb:89:4c:44:68:ae:ee:60:83:48:
82:8b:83:f1:63:63:55:bc:7a:f3:5c:f4:b5:7b:83:d1:22:2e:
fb:30:0d:4b:4a:67:3c:a4:20:0e:de:c7:92:a9:7d:de:3b:86:
de:7d:5e:77:f3:bb:2a:84:2a:11:df:4a:55:d5:17:b9:3e:c1:
25:7f:46:91:e5:74:bd:db:83:c2:38:de:d1:36:f5:a2:5c:6c:
86:dd:c2:49:00:e0:bb:c0:15:5e:76:5d:88:ff:0b:49:50:a1:
d7:a0:33:5b:f2:88:aa:bb:d1:92:5e:1a:d9:5e:30:1d:e5:35:
35:53:dd:a9:e1:b1:b9:fa:1a:a5:67:59:c0:a0:a3:4e:28:7c:
db:b6:37:c4:7d:0e:37:1c:73:85:67:74:4a:6d:18:7b:fd:1a:
79:72:5d:73:cc:fe:0b:91:73:03:eb:f3:67:82:88:fe:c5:3f:
ad:be:87:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:06:48 2026 by rpki-client