Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/p9nSI5Fv1U9dLy8AwuKMTaB3azo.roa
File: p9nSI5Fv1U9dLy8AwuKMTaB3azo.roa (raw, json)
Hash identifier: zamOchqk7UKLgzWPv8/yeT1S4spDb9tOvRQvKjorGm0=
Subject key identifier: A7:D9:D2:23:91:6F:D5:4F:5D:2F:2F:00:C2:E2:8C:4D:A0:77:6B:3A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D9B940604388E0DCEDEA26AB81AB3D4B4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/p9nSI5Fv1U9dLy8AwuKMTaB3azo.roa
Signing time: Fri 17 Apr 2026 13:14:22 +0000
ROA not before: Fri 17 Apr 2026 13:14:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 151.244.38.0/24 maxlen: 24
151.244.52.0/24 maxlen: 24
151.244.118.0/24 maxlen: 24
151.244.221.0/24 maxlen: 24
151.247.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:94:06:04:38:8e:0d:ce:de:a2:6a:b8:1a:b3:d4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 17 13:14:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7d9d223916fd54f5d2f2f00c2e28c4da0776b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ac:8f:49:5d:dd:f3:d2:04:ec:8b:fc:2e:06:
2c:0b:e5:96:cd:88:bc:60:2b:e4:11:4c:8f:df:93:
33:37:80:7e:4c:b8:3c:66:ce:f2:a2:2a:f7:30:d9:
5e:2b:0c:a4:dc:ac:05:2f:7d:ff:df:cf:b3:06:cc:
b6:6e:56:48:83:13:3b:a1:5d:89:f7:c7:1f:4f:f2:
40:d3:f6:48:58:bb:8f:b7:f0:35:a5:aa:06:61:51:
9b:02:b3:d9:3f:14:28:27:90:c4:83:a9:43:3a:ee:
9a:82:5b:9d:fe:26:65:61:f3:03:e2:d8:aa:a0:aa:
7d:01:57:2b:81:6f:b4:32:fa:da:1c:30:44:5e:06:
c6:14:a0:50:07:8e:9b:9d:57:53:ec:2a:5d:57:ae:
81:41:57:9a:6f:cd:7b:52:88:1f:7e:42:b5:b6:c4:
ab:e3:b4:8a:a4:cc:f7:4a:ad:a1:5e:87:cf:17:87:
72:5d:be:a9:90:d2:b5:5e:36:a6:06:8b:16:d0:99:
16:50:b2:ac:3f:83:fb:dd:49:35:e1:3c:dc:fc:d3:
a4:a0:af:79:de:50:b8:94:68:14:3a:01:3b:f3:cd:
2a:57:04:53:f6:a7:37:a7:63:03:47:01:00:c8:35:
af:a1:d1:5f:d6:d2:24:a9:b7:79:ff:d9:e4:70:0e:
3a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D9:D2:23:91:6F:D5:4F:5D:2F:2F:00:C2:E2:8C:4D:A0:77:6B:3A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/p9nSI5Fv1U9dLy8AwuKMTaB3azo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.38.0/24
151.244.52.0/24
151.244.118.0/24
151.244.221.0/24
151.247.151.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:5f:8e:b1:ff:ee:1a:81:13:c4:0c:41:f5:17:fd:7d:d3:2f:
c4:10:b8:96:94:d4:ed:3d:ae:74:32:ac:78:e4:6d:6f:9d:17:
1d:c7:9b:c7:67:45:a1:76:2e:28:64:4a:c2:2e:a8:d0:44:6e:
83:cb:5e:47:2f:16:af:b8:53:fd:a3:b1:4e:19:ac:b3:d2:1f:
80:73:a0:4d:08:a3:88:ae:15:92:56:66:57:c6:68:88:37:d1:
5b:3f:3a:cd:fb:2d:8d:c8:64:a9:bb:85:94:a1:82:0c:d8:84:
0c:50:9e:14:21:d0:85:4f:5b:04:34:55:37:9f:5a:04:65:5a:
7e:04:99:a5:b3:87:cb:16:13:79:58:96:b0:46:6f:ec:f2:bb:
fa:10:43:8d:83:82:6b:fc:28:fc:ae:fc:1e:20:3c:fd:c8:1f:
e3:ba:a0:bd:fe:6c:d0:bb:5f:76:5e:03:82:72:9c:24:20:33:
6a:89:67:6f:25:2e:20:40:32:11:8b:ea:b3:70:c1:0e:3f:20:
1a:96:cb:d6:1d:5a:7b:ab:3e:f0:55:d9:4d:7f:58:83:8b:e8:
a9:ad:2e:bd:1a:5c:ba:00:6a:96:5f:e5:64:8c:6b:ee:32:8c:
38:9d:35:18:ba:b3:21:bb:bf:c1:11:75:a8:2e:da:e7:82:8f:
87:7f:ac:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:33:44 2026 by rpki-client