Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rEDExAmOP6-kTPrt7b8Ghn9Kfd4.roa
File: rEDExAmOP6-kTPrt7b8Ghn9Kfd4.roa (raw, json)
Hash identifier: hlYFN8yRYFoDHUPQsJErSOVwrdhj8kmQa7pGNfZ6l4E=
Subject key identifier: AC:40:C4:C4:09:8E:3F:AF:A4:4C:FA:ED:ED:BF:06:86:7F:4A:7D:DE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EA5BB3D4F844069FBB7FBC8A38C78EF2C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rEDExAmOP6-kTPrt7b8Ghn9Kfd4.roa
Signing time: Mon 08 Jun 2026 05:36:11 +0000
ROA not before: Mon 08 Jun 2026 05:36:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213734
IP address blocks: 151.243.36.0/24 maxlen: 24
151.244.121.0/24 maxlen: 24
151.244.137.0/24 maxlen: 24
151.247.1.0/24 maxlen: 24
151.247.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a5:bb:3d:4f:84:40:69:fb:b7:fb:c8:a3:8c:78:ef:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 8 05:36:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac40c4c4098e3fafa44cfaededbf06867f4a7dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:56:80:9d:a7:3d:56:09:30:1c:ed:6e:54:
6c:05:ad:0c:ad:04:07:0b:95:41:c5:bd:c4:5a:d4:
79:58:80:66:3e:fd:96:d9:49:58:f7:97:d8:ce:6d:
83:dc:5f:5c:a2:e3:f2:ee:bb:f6:0b:10:a8:7d:73:
80:25:a8:60:99:47:05:1e:f5:75:a4:fb:b7:74:d9:
f9:9b:31:c6:ba:4a:96:99:91:93:45:6a:f4:1f:80:
a7:ab:0a:5c:98:70:dd:3a:bc:e6:aa:f7:74:42:bd:
10:2e:98:0c:7c:bd:a9:7a:d4:40:29:e5:93:55:b2:
20:8c:42:f2:ce:6a:b8:4d:80:4e:6c:a0:e9:63:15:
45:9f:21:56:2e:09:e7:78:c3:d1:fb:b4:ec:45:4c:
da:fc:07:5e:a5:77:ff:5d:78:4d:4e:a4:af:6a:31:
40:7b:c1:69:aa:fe:a5:00:40:68:82:be:18:f7:7b:
87:77:76:63:9c:4e:83:2f:c6:c1:7f:d3:01:3c:a4:
ef:b5:2c:23:5d:3a:94:45:ed:17:9c:f1:88:c3:91:
d7:c4:8e:ec:d0:cb:4f:e8:4a:df:d3:63:fb:27:05:
cc:e2:21:7b:71:aa:30:3d:27:a6:9d:d0:c4:26:d6:
e5:d1:97:3c:20:c3:5d:5b:52:da:a8:a1:52:7c:4f:
9f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:40:C4:C4:09:8E:3F:AF:A4:4C:FA:ED:ED:BF:06:86:7F:4A:7D:DE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rEDExAmOP6-kTPrt7b8Ghn9Kfd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.36.0/24
151.244.121.0/24
151.244.137.0/24
151.247.1.0/24
151.247.88.0/24
Signature Algorithm: sha256WithRSAEncryption
23:f6:ff:08:11:22:b7:bb:80:1a:e0:6d:e9:83:1d:7b:42:a0:
48:93:d4:87:8c:7c:29:ad:e3:61:a0:28:1d:14:d2:ab:6f:2f:
5a:2e:6e:3d:e7:3c:49:f9:62:87:1e:a1:80:a3:a2:e7:7f:05:
db:88:a3:23:29:ca:0d:71:3c:7f:f4:0a:98:93:d6:58:a2:84:
04:69:6f:28:0d:ab:45:c0:84:4a:b8:67:2c:a4:af:51:fb:1e:
ca:51:c4:ed:3a:7a:eb:3e:7a:aa:c1:c0:3f:d4:55:45:05:a5:
f4:53:83:88:38:f8:f7:d8:24:58:37:a3:d8:60:c1:54:af:19:
81:23:fc:e3:50:7a:6f:9a:d9:9a:9d:9c:98:3a:33:fb:5e:d2:
7e:79:6d:b4:59:cd:e1:41:86:1b:45:d5:83:cc:23:f0:5a:f0:
d7:3a:90:aa:e6:50:9e:26:fa:b1:08:21:25:e7:05:cc:a5:47:
fd:5a:fd:f0:98:02:69:51:13:4b:89:ee:b0:6b:e3:75:98:9b:
11:df:8a:6b:a2:a3:94:75:db:96:47:b6:dd:d1:3f:ad:0d:2b:
ff:bd:df:bb:4f:40:dd:d8:c9:fb:0c:9f:98:e3:5b:a4:cf:a4:
c4:70:30:47:c8:0b:a1:e2:92:ab:aa:30:0e:c1:59:ab:0f:21:
3f:af:d7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:40 2026 by rpki-client