Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sFLfJVCwxVrMDL-GHBY3QdirMwU.roa
File: sFLfJVCwxVrMDL-GHBY3QdirMwU.roa (raw, json)
Hash identifier: licpZZcQ7sUKRsK1zeq2TJNiA1Zf4X4tyh6ejsgEzUE=
Subject key identifier: B0:52:DF:25:50:B0:C5:5A:CC:0C:BF:86:1C:16:37:41:D8:AB:33:05
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A09EBB488EAC9ED6547ADBDA2AFC4DF041
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sFLfJVCwxVrMDL-GHBY3QdirMwU.roa
Signing time: Mon 14 Sep 2026 07:04:28 +0000
ROA not before: Mon 14 Sep 2026 07:04:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154820
IP address blocks: 151.240.226.0/24 maxlen: 24
151.240.250.0/24 maxlen: 24
151.240.251.0/24 maxlen: 24
151.240.252.0/24 maxlen: 24
151.247.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:bb:48:8e:ac:9e:d6:54:7a:db:da:2a:fc:4d:f0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 14 07:04:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b052df2550b0c55acc0cbf861c163741d8ab3305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:71:5c:60:9f:fc:2b:97:1c:45:02:2a:17:62:
2a:b7:17:b7:f4:42:14:38:29:7d:c8:b9:20:22:76:
90:ad:e0:f9:f0:e9:ec:20:7f:67:9d:3f:5d:8a:85:
9a:76:1d:88:6e:89:72:a6:87:56:2d:ea:7d:6a:a4:
00:0e:00:06:f5:b8:f2:ec:20:46:2c:88:cb:70:4a:
a7:b7:64:d2:90:5d:d8:64:2e:88:ba:5e:0b:00:b1:
68:26:76:4c:a4:51:5f:56:d0:02:91:60:0e:d2:54:
56:e9:7a:c7:dd:11:3d:2d:2e:32:ed:3e:0a:0f:3a:
65:28:d7:3f:be:02:de:ed:e4:a1:ec:09:96:09:9f:
97:3a:1f:ab:3e:90:6f:f5:a9:50:83:8e:dc:d3:15:
63:bd:42:ac:8b:65:23:6d:f7:39:07:3e:33:fd:6a:
ec:8b:f8:ef:20:17:c9:38:2c:82:9c:3e:2a:d6:d8:
e7:2e:e2:6e:37:65:b4:81:86:2b:ec:36:df:63:76:
6e:80:2c:0e:b9:12:91:e6:93:a2:53:ce:9a:b5:13:
a7:9b:74:78:70:7a:6e:b8:10:5c:11:54:99:d1:f8:
74:ae:ab:96:00:08:53:93:59:c8:2d:cf:63:86:9a:
f0:e4:b5:11:6c:5b:6b:f7:65:29:cb:7e:40:1a:ba:
21:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:52:DF:25:50:B0:C5:5A:CC:0C:BF:86:1C:16:37:41:D8:AB:33:05
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sFLfJVCwxVrMDL-GHBY3QdirMwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.226.0/24
151.240.250.0-151.240.252.255
151.247.175.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ba:d3:12:87:70:81:81:e5:eb:de:0c:6e:6f:5e:62:8c:e1:
19:c5:de:0d:eb:db:99:83:59:dd:75:a7:8d:8f:03:33:c9:c8:
51:24:f9:79:7c:d4:6a:8c:66:29:a0:90:8d:8f:9d:d6:dc:8a:
4d:39:1a:a0:db:98:41:cb:9b:40:66:1f:cb:75:de:68:57:5b:
0b:3e:aa:26:37:a3:31:bf:83:b0:01:61:e7:dc:bf:a1:e0:36:
32:6c:81:4f:26:ff:2b:c5:6c:8c:aa:25:98:8b:f8:06:47:3f:
0d:2b:43:2f:92:e6:fa:bc:62:6b:05:24:b2:35:1b:c5:4e:68:
d6:ac:b3:69:05:d2:c3:23:a5:c7:98:c2:bc:1f:22:c3:2d:62:
04:61:3c:f7:4f:bd:6d:04:92:2b:fd:fd:48:8f:d5:bd:24:2c:
0c:80:83:cd:83:76:44:b5:76:6b:1f:9e:76:7b:df:58:51:b1:
32:8f:63:6f:b3:f3:22:fd:c2:e1:5c:17:67:34:81:8e:f9:ea:
07:ac:4a:82:af:b0:6a:ad:66:57:b1:24:3b:63:de:6f:4e:5d:
a9:94:fb:aa:69:56:81:f2:a3:15:c1:c6:04:09:31:e5:26:31:
a8:ba:f1:e5:31:de:d9:0e:81:0e:d4:a3:ef:9c:5e:69:98:3f:
8a:e4:92:c9
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAaCeu0iOrJ7WVHrb2ir8TfBBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwOTE0MDcwNDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDUyZGYyNTUwYjBjNTVhY2MwY2JmODYxYzE2Mzc0MWQ4YWIzMzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnFcYJ/8K5ccRQIqF2Iqtxe39EIU
OCl9yLkgInaQreD58OnsIH9nnT9dioWadh2IbolypodWLep9aqQADgAG9bjy7CBG
LIjLcEqnt2TSkF3YZC6Iul4LALFoJnZMpFFfVtACkWAO0lRW6XrH3RE9LS4y7T4K
DzplKNc/vgLe7eSh7AmWCZ+XOh+rPpBv9alQg47c0xVjvUKsi2Ujbfc5Bz4z/Wrs
i/jvIBfJOCyCnD4q1tjnLuJuN2W0gYYr7DbfY3ZugCwOuRKR5pOiU86atROnm3R4
cHpuuBBcEVSZ0fh0rquWAAhTk1nILc9jhprw5LURbFtr92Upy35AGrohNQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFLBS3yVQsMVazAy/hhwWN0HYqzMFMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvc0ZMZkpWQ3d4VnJNREwtR0hCWTNRZGlyTXdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAl/DiMAwD
BAGX8PoDBACX8PwDBACX968wDQYJKoZIhvcNAQELBQADggEBAGS60xKHcIGB5eve
DG5vXmKM4RnF3g3r25mDWd11p42PAzPJyFEk+Xl81GqMZimgkI2Pndbcik05GqDb
mEHLm0BmH8t13mhXWws+qiY3ozG/g7ABYefcv6HgNjJsgU8m/yvFbIyqJZiL+AZH
Pw0rQy+S5vq8YmsFJLI1G8VOaNass2kF0sMjpceYwrwfIsMtYgRhPPdPvW0Ekiv9
/UiP1b0kLAyAg82DdkS1dmsfnnZ731hRsTKPY2+z8yL9wuFcF2c0gY756gesSoKv
sGqtZlexJDtj3m9OXamU+6ppVoHyoxXBxgQJMeUmMai68eUx3tkOgQ7Uo++cXmmY
P4rkksk=
-----END CERTIFICATE-----
Generated at Mon Sep 21 06:08:40 2026 by rpki-client