Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/omXB2403kGNzuEykWCUsmAMKvy4.roa
File: omXB2403kGNzuEykWCUsmAMKvy4.roa (raw, json)
Hash identifier: 7CIegw9ICars83VPt23UR6Ou07BTffqoElM6lpqu/UM=
Subject key identifier: A2:65:C1:DB:8D:37:90:63:73:B8:4C:A4:58:25:2C:98:03:0A:BF:2E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0A9313200C3B21EB2E72AE5407D87A99A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/omXB2403kGNzuEykWCUsmAMKvy4.roa
Signing time: Wed 16 Sep 2026 07:49:28 +0000
ROA not before: Wed 16 Sep 2026 07:49:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 151.240.205.0/24 maxlen: 24
151.241.119.0/24 maxlen: 24
151.241.122.0/24 maxlen: 24
151.243.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:31:32:00:c3:b2:1e:b2:e7:2a:e5:40:7d:87:a9:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 16 07:49:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a265c1db8d37906373b84ca458252c98030abf2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:44:ad:a8:c4:f5:38:51:b0:42:3c:e6:1f:
40:1f:4b:10:c6:d4:b6:0f:bf:71:1a:08:9d:f0:e0:
ae:32:1d:48:22:7e:21:92:18:9e:bf:8b:af:4d:ea:
74:2c:4b:92:59:07:07:f4:fb:f8:d2:82:eb:0b:15:
ae:b7:70:90:b0:fc:a1:9a:46:6a:a4:a2:42:4d:84:
66:0a:ea:9b:ea:af:00:95:da:91:c3:fc:81:88:92:
9c:52:37:99:cd:7c:e2:47:37:3c:ed:02:47:b3:f0:
a0:3c:e4:d8:c8:75:ab:00:23:9b:21:8b:92:03:e2:
c5:41:78:ea:49:56:8e:f8:44:63:0d:db:cb:01:17:
71:a3:31:f6:12:4a:64:1d:ea:89:ff:c2:88:65:b0:
98:a7:ea:d1:55:c2:71:34:aa:60:6f:4d:5c:87:1f:
fe:62:7a:b2:25:46:a9:cc:bd:3e:07:6b:b7:62:6b:
e3:15:eb:bd:9e:71:0e:a8:92:a2:89:cc:4e:51:47:
fc:7a:f7:42:23:ad:18:37:82:fb:7c:b9:03:fc:bc:
a3:01:b6:d3:2e:72:74:49:46:ef:06:bb:e0:eb:e5:
06:9d:80:22:9a:06:f7:ac:f3:d7:5c:96:ac:62:c5:
c2:22:32:2a:fb:f2:64:34:4d:1d:80:47:8f:12:28:
e2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:65:C1:DB:8D:37:90:63:73:B8:4C:A4:58:25:2C:98:03:0A:BF:2E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/omXB2403kGNzuEykWCUsmAMKvy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.205.0/24
151.241.119.0/24
151.241.122.0/24
151.243.235.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:3e:59:fc:34:0b:9a:94:e1:33:77:50:e7:d6:de:76:83:b9:
7d:55:ec:2e:8c:be:5c:df:0f:45:ee:0c:f2:0f:c6:81:f7:46:
55:8e:56:ae:76:b9:1d:05:8e:44:39:83:f0:b5:0c:c8:c1:67:
95:6c:71:8b:56:af:3f:11:95:ac:2f:42:c8:16:aa:cb:8c:8a:
f8:3f:6b:14:f0:e0:75:7f:e5:ac:29:cd:80:fb:1a:92:26:fc:
72:a2:f6:80:cd:02:df:c4:66:71:73:53:87:f8:ac:11:e5:da:
41:01:8e:aa:5f:cc:e4:ce:dd:8c:aa:c0:4f:65:0e:d2:f8:72:
5e:3c:af:91:6e:ea:63:c0:56:d4:bf:4b:cb:17:d0:79:9e:04:
de:97:14:52:d3:7c:f2:d6:11:45:a0:ab:ad:9c:92:71:b6:07:
09:7c:74:52:42:e4:b7:df:fb:5c:10:f5:f5:a8:b2:60:a7:1f:
81:9c:45:37:04:ab:db:29:16:99:31:9e:99:dc:7f:bb:ac:4d:
81:2d:c6:26:76:cf:7e:90:30:b0:b5:d4:68:03:98:ff:84:03:
4f:8c:47:b5:42:7b:f1:7e:d1:15:48:7c:c1:42:b7:10:7c:f3:
c7:be:d2:d3:72:ed:76:c4:a7:7f:93:b0:09:cf:d1:f1:52:76:
a2:b9:2b:20
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaCpMTIAw7Iesucq5UB9h6maMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwOTE2MDc0OTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjY1YzFkYjhkMzc5MDYzNzNiODRjYTQ1ODI1MmM5ODAzMGFiZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/NErajE9ThRsEI85h9AH0sQxtS2
D79xGgid8OCuMh1IIn4hkhiev4uvTep0LEuSWQcH9Pv40oLrCxWut3CQsPyhmkZq
pKJCTYRmCuqb6q8AldqRw/yBiJKcUjeZzXziRzc87QJHs/CgPOTYyHWrACObIYuS
A+LFQXjqSVaO+ERjDdvLARdxozH2EkpkHeqJ/8KIZbCYp+rRVcJxNKpgb01chx/+
YnqyJUapzL0+B2u3YmvjFeu9nnEOqJKiicxOUUf8evdCI60YN4L7fLkD/LyjAbbT
LnJ0SUbvBrvg6+UGnYAimgb3rPPXXJasYsXCIjIq+/JkNE0dgEePEijinQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFKJlwduNN5Bjc7hMpFglLJgDCr8uMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvb21YQjI0MDNrR056dUV5a1dDVXNtQU1Ldnk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/DNAwQA
l/F3AwQAl/F6AwQAl/PrMA0GCSqGSIb3DQEBCwUAA4IBAQAcPln8NAualOEzd1Dn
1t52g7l9VewujL5c3w9F7gzyD8aB90ZVjlaudrkdBY5EOYPwtQzIwWeVbHGLVq8/
EZWsL0LIFqrLjIr4P2sU8OB1f+WsKc2A+xqSJvxyovaAzQLfxGZxc1OH+KwR5dpB
AY6qX8zkzt2MqsBPZQ7S+HJePK+RbupjwFbUv0vLF9B5ngTelxRS03zy1hFFoKut
nJJxtgcJfHRSQuS33/tcEPX1qLJgpx+BnEU3BKvbKRaZMZ6Z3H+7rE2BLcYmds9+
kDCwtdRoA5j/hANPjEe1QnvxftEVSHzBQrcQfPPHvtLTcu12xKd/k7AJz9HxUnai
uSsg
-----END CERTIFICATE-----
Generated at Sun Sep 20 10:53:24 2026 by rpki-client