Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/riUJ2SWNN2S4mrv0xJbUXeKA2GM.roa
File: riUJ2SWNN2S4mrv0xJbUXeKA2GM.roa (raw, json)
Hash identifier: xwaFPelhzQXHnZA/sEcU5EEMUQlM5pCi4ylbAahxk4M=
Subject key identifier: AE:25:09:D9:25:8D:37:64:B8:9A:BB:F4:C4:96:D4:5D:E2:80:D8:63
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EA5BA517DDDB2291CB8D05728675405CA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/riUJ2SWNN2S4mrv0xJbUXeKA2GM.roa
Signing time: Mon 08 Jun 2026 05:35:11 +0000
ROA not before: Mon 08 Jun 2026 05:35:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203106
IP address blocks: 151.244.215.0/24 maxlen: 24
151.247.33.0/24 maxlen: 24
151.247.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a5:ba:51:7d:dd:b2:29:1c:b8:d0:57:28:67:54:05:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 8 05:35:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae2509d9258d3764b89abbf4c496d45de280d863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:b4:53:ce:62:38:c7:20:83:66:15:3e:30:
b7:a5:77:a9:eb:b0:d5:b8:58:7f:79:fa:53:8b:7c:
b4:6f:31:79:18:bf:58:81:9b:58:b6:e0:0d:85:f7:
c1:31:1b:55:d6:37:fe:bf:7e:e2:6e:aa:fd:c8:eb:
ec:b6:2e:c1:02:c6:30:7b:7a:e9:1a:60:c9:9b:07:
5a:3f:aa:32:89:bc:ef:b2:53:99:bd:98:0b:f7:fa:
77:18:d6:26:1f:29:33:60:1c:ad:fa:65:ef:dd:2e:
4f:e5:9b:6c:aa:f0:32:44:02:e6:85:53:6a:94:b8:
12:51:04:b8:1a:51:5d:ed:34:d9:63:8f:d7:80:1e:
da:1a:29:b2:cf:c8:9f:29:fd:0b:1a:78:3b:83:0a:
30:41:2e:27:8b:b5:2b:0f:f3:41:1c:d7:d9:15:d6:
81:ff:26:68:43:36:27:e2:f1:d8:57:57:08:9e:c4:
50:14:cc:ca:9b:66:16:09:35:d8:30:e7:01:6d:5e:
f5:a3:21:35:50:08:20:47:fe:ca:6e:27:d6:a9:5d:
26:d4:09:8f:df:b4:7a:de:35:a2:77:48:e7:5e:1c:
81:43:20:72:58:ce:b5:cb:39:b6:51:70:80:cc:36:
18:ad:d9:08:94:35:00:e0:4d:5f:c8:34:91:d1:71:
86:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:25:09:D9:25:8D:37:64:B8:9A:BB:F4:C4:96:D4:5D:E2:80:D8:63
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/riUJ2SWNN2S4mrv0xJbUXeKA2GM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.215.0/24
151.247.33.0/24
151.247.238.0/24
Signature Algorithm: sha256WithRSAEncryption
21:5f:6d:5e:5b:79:1c:33:56:12:f9:88:8c:e0:3b:7e:d7:3d:
af:c1:f1:17:ac:b1:54:06:73:37:02:16:71:bc:94:69:5d:aa:
10:6e:8e:a1:17:bd:de:78:7a:39:20:de:3c:7b:c0:9f:88:45:
ff:1c:2c:c4:ad:05:33:d6:6f:7f:fc:19:de:4e:3f:aa:f2:e6:
f4:8b:e6:ba:bf:c5:b7:ea:da:9d:ac:9f:33:83:e9:e8:d1:db:
ab:33:a9:26:dd:e4:e7:4e:61:b6:09:40:01:4f:25:58:8e:3c:
ca:f1:fd:6d:f5:54:0b:cf:a7:5e:87:61:cb:8c:f0:84:e2:ce:
3e:a0:64:4e:08:b8:90:1a:91:5e:ee:14:b2:8b:65:52:a9:fc:
de:f5:8f:30:5a:0c:4f:4c:ce:1b:fa:05:25:dc:28:0a:96:d0:
16:d0:61:9d:22:68:18:3c:15:e4:be:fd:ba:91:ad:20:41:36:
74:8a:bf:22:74:4d:e3:6e:70:d1:71:e5:42:b6:74:f2:68:46:
48:c8:9f:98:9d:5e:f2:97:9c:c7:5a:33:81:0c:54:e3:6c:bd:
e6:95:6d:b8:5d:61:98:e9:f9:04:59:22:1d:99:09:50:61:6d:
fe:d1:9d:93:bf:43:6e:46:71:f3:b3:72:4e:62:84:a9:0d:e7:
aa:1b:7e:2a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ6lulF93bIpHLjQVyhnVAXKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNjA4MDUzNTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTI1MDlkOTI1OGQzNzY0Yjg5YWJiZjRjNDk2ZDQ1ZGUyODBkODYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpS0U85iOMcgg2YVPjC3pXep67DV
uFh/efpTi3y0bzF5GL9YgZtYtuANhffBMRtV1jf+v37ibqr9yOvsti7BAsYwe3rp
GmDJmwdaP6oyibzvslOZvZgL9/p3GNYmHykzYByt+mXv3S5P5ZtsqvAyRALmhVNq
lLgSUQS4GlFd7TTZY4/XgB7aGimyz8ifKf0LGng7gwowQS4ni7UrD/NBHNfZFdaB
/yZoQzYn4vHYV1cInsRQFMzKm2YWCTXYMOcBbV71oyE1UAggR/7KbifWqV0m1AmP
37R63jWid0jnXhyBQyByWM61yzm2UXCAzDYYrdkIlDUA4E1fyDSR0XGGTwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFK4lCdkljTdkuJq79MSW1F3igNhjMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvcmlVSjJTV05OMlM0bXJ2MHhKYlVYZUtBMkdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/TXAwQA
l/chAwQAl/fuMA0GCSqGSIb3DQEBCwUAA4IBAQAhX21eW3kcM1YS+YiM4Dt+1z2v
wfEXrLFUBnM3AhZxvJRpXaoQbo6hF73eeHo5IN48e8CfiEX/HCzErQUz1m9//Bne
Tj+q8ub0i+a6v8W36tqdrJ8zg+no0durM6km3eTnTmG2CUABTyVYjjzK8f1t9VQL
z6deh2HLjPCE4s4+oGROCLiQGpFe7hSyi2VSqfze9Y8wWgxPTM4b+gUl3CgKltAW
0GGdImgYPBXkvv26ka0gQTZ0ir8idE3jbnDRceVCtnTyaEZIyJ+YnV7yl5zHWjOB
DFTjbL3mlW24XWGY6fkEWSIdmQlQYW3+0Z2Tv0NuRnHzs3JOYoSpDeeqG34q
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:11 2026 by rpki-client