Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rp_35Mc70qd-6w8KsQis-Zd1_98.roa
File: rp_35Mc70qd-6w8KsQis-Zd1_98.roa (raw, json)
Hash identifier: 2JTipI0Uopt/3qh8Na9gFKDemBb0ReK6CWqtU0Udvq4=
Subject key identifier: AE:9F:F7:E4:C7:3B:D2:A7:7E:EB:0F:0A:B1:08:AC:F9:97:75:FF:DF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019C8EB6C4F19ADE7850422F252B4C192923
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rp_35Mc70qd-6w8KsQis-Zd1_98.roa
Signing time: Tue 24 Feb 2026 08:14:28 +0000
ROA not before: Tue 24 Feb 2026 08:14:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 151.244.59.0/24 maxlen: 24
151.244.90.0/24 maxlen: 24
151.244.97.0/24 maxlen: 24
151.244.105.0/24 maxlen: 24
151.244.110.0/24 maxlen: 24
151.247.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8e:b6:c4:f1:9a:de:78:50:42:2f:25:2b:4c:19:29:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 24 08:14:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae9ff7e4c73bd2a77eeb0f0ab108acf99775ffdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:79:48:90:e6:7a:69:16:09:a7:77:83:fa:c0:
8c:dc:d9:17:e0:47:b5:73:e0:73:cb:6f:33:3c:3b:
a3:79:2f:35:e7:71:3d:2d:82:0b:55:be:1f:64:9f:
75:e9:0a:98:98:4a:98:59:a5:b3:90:4d:a5:ce:5a:
66:1b:7f:eb:3a:a1:b1:50:15:6d:f7:a9:8a:fe:97:
bb:bd:61:17:f6:b9:47:27:ef:3d:e3:45:74:17:c6:
7e:f5:18:34:d8:96:e0:08:c4:f7:a9:c0:6f:55:a0:
6b:58:8f:61:f1:1b:7a:e5:91:9e:f3:6d:bc:2c:06:
dd:a8:16:80:05:a9:55:64:cd:c5:87:1b:a4:af:3e:
65:75:d8:14:0b:13:ea:8b:63:50:4c:a3:b6:68:3b:
fb:d7:64:83:3e:36:1c:e9:3e:30:f6:79:78:85:e8:
a8:c0:ed:5f:c8:da:df:de:a9:b0:06:1a:1a:49:df:
c9:df:8d:3f:0f:e7:b1:a0:88:74:2a:75:30:4a:23:
15:d1:0e:44:f0:f8:50:fb:2e:8b:06:5f:28:6a:31:
e9:d0:a0:32:8a:85:81:7e:d3:39:57:1f:96:91:f1:
ff:2a:4e:19:f8:ec:97:f2:e4:4c:5a:7b:45:47:3c:
9d:6c:52:81:22:35:e6:7a:0c:d5:39:1b:d5:73:cb:
b7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9F:F7:E4:C7:3B:D2:A7:7E:EB:0F:0A:B1:08:AC:F9:97:75:FF:DF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rp_35Mc70qd-6w8KsQis-Zd1_98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.59.0/24
151.244.90.0/24
151.244.97.0/24
151.244.105.0/24
151.244.110.0/24
151.247.46.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:5c:5e:ea:ec:04:ab:17:0a:45:21:02:f8:36:e7:85:75:35:
2d:e8:bc:fc:a9:cf:59:d2:96:54:28:38:f2:f5:76:0a:49:d9:
25:35:af:39:2f:5b:fa:52:62:4d:ae:9b:a2:3d:5e:1c:4d:07:
b6:b2:3a:3c:91:d1:d5:c2:7e:de:a8:9a:35:9b:4a:63:83:5a:
63:0f:62:f0:f2:7f:af:26:69:bd:b5:69:2d:c9:50:02:40:5f:
9f:1d:42:ee:de:f4:0c:34:93:d9:ce:9b:3b:0c:14:5e:a4:7b:
75:7a:81:2c:98:b5:07:b8:ef:03:47:92:95:c4:5a:8f:f8:52:
68:cd:12:34:08:f2:d4:07:36:f2:a6:7d:ac:32:05:bb:94:fa:
58:07:0e:56:e9:f4:28:43:63:18:f0:54:fd:42:aa:30:b6:03:
dc:25:60:4c:ad:26:12:e6:fb:e1:dc:36:6c:94:c0:b8:bd:cc:
b9:93:52:59:37:97:da:af:5e:5b:f1:f1:f0:21:39:4f:f7:1c:
cd:8d:47:88:b9:38:90:33:c9:39:96:06:f4:5d:a9:32:ec:57:
1c:df:b1:ed:e7:04:10:16:57:fc:7a:34:f5:5f:fd:2a:25:16:
c3:ea:f1:16:de:b9:65:46:00:34:0f:d0:64:ab:8f:72:fb:5e:
96:cf:41:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:52:22 2026 by rpki-client