Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/of7tgWCousRQDhgDm87LyoWtyBU.roa
File: of7tgWCousRQDhgDm87LyoWtyBU.roa (raw, json)
Hash identifier: DyXc7lqd7AG/YV63X/s3JTVuFC+vsYgLaD5UbAb6++I=
Subject key identifier: A1:FE:ED:81:60:A8:BA:C4:50:0E:18:03:9B:CE:CB:CA:85:AD:C8:15
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EA87FD95DBF6750DA09F45B32FF05A6C6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/of7tgWCousRQDhgDm87LyoWtyBU.roa
Signing time: Mon 08 Jun 2026 18:30:11 +0000
ROA not before: Mon 08 Jun 2026 18:30:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213690
IP address blocks: 151.242.58.0/24 maxlen: 24
151.245.94.0/24 maxlen: 24
151.245.113.0/24 maxlen: 24
151.245.114.0/24 maxlen: 24
151.247.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a8:7f:d9:5d:bf:67:50:da:09:f4:5b:32:ff:05:a6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 8 18:30:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1feed8160a8bac4500e18039bcecbca85adc815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:96:ee:86:d5:f7:5e:d5:c2:e1:39:9f:7f:73:
28:cf:b5:e3:23:b0:48:e9:38:18:a4:c7:48:56:57:
04:8c:9a:2c:c9:1b:bc:10:0d:f8:34:31:fc:d5:39:
40:6d:e8:f2:74:b3:ef:5f:42:58:3b:a1:5a:3e:93:
c5:85:4c:af:fa:84:76:0d:a5:d6:b0:f7:5b:fa:60:
00:d2:84:4c:0c:03:ca:28:97:77:9e:14:08:ed:76:
ac:1e:76:ee:e4:3b:64:60:e7:9d:fe:8c:3b:ee:bb:
a8:03:ed:c9:7c:4e:da:f1:eb:a4:88:42:d9:ba:fa:
b9:d6:ef:2b:08:e2:7a:79:b4:6a:c3:81:33:f0:03:
42:05:00:17:f6:a7:ac:04:ff:67:7c:af:89:4d:fe:
4a:0b:8b:c9:5c:95:37:46:31:0f:6b:49:86:d4:c3:
70:e3:a9:25:0c:fb:f9:ed:ac:4f:48:ca:81:2e:0c:
be:4a:5c:fe:25:10:b0:40:fe:bb:69:94:a1:ab:ac:
7e:ad:1e:cb:42:aa:95:22:a3:8f:51:ce:2c:a0:1b:
f0:c1:17:9a:d7:ac:f3:88:86:77:3f:00:4e:62:d0:
8f:20:fe:05:a2:90:cc:80:1d:82:50:b0:79:af:55:
c6:e5:e0:32:bc:cb:ec:3c:75:7d:76:d7:4d:64:4b:
3c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FE:ED:81:60:A8:BA:C4:50:0E:18:03:9B:CE:CB:CA:85:AD:C8:15
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/of7tgWCousRQDhgDm87LyoWtyBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.58.0/24
151.245.94.0/24
151.245.113.0-151.245.114.255
151.247.146.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:51:85:c2:b9:d9:2a:a3:83:b6:83:f6:02:81:75:01:e5:ce:
f1:2b:20:d4:77:b7:9f:25:70:1b:74:c0:16:bc:54:4d:83:af:
af:37:02:19:3b:fc:11:f2:cb:ce:b4:d8:07:c1:f7:c7:a4:b9:
ad:41:ef:e0:b9:8c:36:40:1a:1b:46:6d:cc:2c:fb:ef:b1:ff:
75:46:3c:69:44:40:13:bc:61:f6:6c:d7:9b:f8:04:7e:39:92:
ee:78:bc:45:a8:b0:08:dd:87:50:30:c5:90:14:69:59:fd:71:
c1:95:fd:3f:b8:96:85:d5:fd:d0:62:14:da:ef:83:68:80:0f:
58:7b:47:a8:70:1f:e9:71:98:7b:b5:ed:ac:49:28:cd:0d:57:
4a:38:f9:e2:f1:7b:be:07:5b:d5:c4:1c:e1:9e:cc:72:3d:66:
29:ff:5e:90:04:dd:fb:60:f1:6d:de:22:7e:91:4a:61:d2:b4:
59:79:1c:40:df:36:73:20:23:2e:8e:7d:da:be:6b:e3:c5:5e:
b4:9b:77:43:fb:5a:db:1d:5c:18:0a:15:ec:c4:ca:6d:60:09:
1b:49:45:38:6e:68:30:13:97:1e:54:f4:bc:18:67:30:47:fe:
c7:d6:1b:41:2a:ad:77:9a:f8:01:ba:df:07:c9:aa:a2:39:f1:
8b:8f:2d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:11:13 2026 by rpki-client