Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sYC7xGvp-Sue2klpEqqOjDG6SL8.roa
File: sYC7xGvp-Sue2klpEqqOjDG6SL8.roa (raw, json)
Hash identifier: joA8Ud11Lx7JajrSIB8lN4QympnNeYvhCVV1Y+O6xHw=
Subject key identifier: B1:80:BB:C4:6B:E9:F9:2B:9E:DA:49:69:12:AA:8E:8C:31:BA:48:BF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D722CF39FC3E4F9CE7C28278E1443E107
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sYC7xGvp-Sue2klpEqqOjDG6SL8.roa
Signing time: Thu 09 Apr 2026 12:17:21 +0000
ROA not before: Thu 09 Apr 2026 12:17:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150293
IP address blocks: 151.243.165.0/24 maxlen: 24
151.243.166.0/24 maxlen: 24
151.245.1.0/24 maxlen: 24
151.247.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:24:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:2c:f3:9f:c3:e4:f9:ce:7c:28:27:8e:14:43:e1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 9 12:17:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b180bbc46be9f92b9eda496912aa8e8c31ba48bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b0:00:b8:fa:2a:ec:5e:8e:76:88:cb:75:9b:
0d:34:08:4d:48:69:5d:b3:42:31:06:e7:05:3e:0b:
7e:03:fc:6f:67:a5:ac:66:f4:9e:21:63:3e:d0:5d:
d6:e5:62:02:ce:fb:21:6b:ac:ad:56:96:20:d4:61:
97:1b:02:52:81:e4:49:c7:ef:77:92:92:e0:f2:a5:
0d:7a:77:95:19:2e:42:44:cf:13:50:7b:9c:38:29:
50:53:ad:f7:d4:84:a9:18:04:d9:c7:9e:3a:f8:2d:
ed:43:6a:72:66:ae:d4:c1:e4:9f:9e:23:36:a1:ff:
26:01:c3:bc:b9:45:c8:6b:3b:ed:ca:73:7d:95:80:
5c:11:ca:ff:ea:d3:7a:98:5b:f5:bb:d6:cc:72:dd:
3c:b2:6b:1e:f0:4e:34:46:5f:fa:94:3c:cd:56:80:
14:a3:24:b8:b3:ea:ca:ca:30:6e:5c:2c:88:cf:a7:
9a:21:01:4b:74:52:86:4a:80:bd:97:0e:de:e2:69:
ed:54:77:6e:8b:f5:bc:2b:68:78:35:c7:95:79:25:
d1:75:61:70:6f:5f:a7:e5:1f:7b:51:a2:95:f0:99:
d7:c5:4c:af:80:5d:61:e6:bc:3b:55:59:6e:a4:ab:
10:9f:75:a4:cb:75:c6:c0:a0:69:49:3f:ce:67:ea:
d6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:80:BB:C4:6B:E9:F9:2B:9E:DA:49:69:12:AA:8E:8C:31:BA:48:BF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sYC7xGvp-Sue2klpEqqOjDG6SL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.165.0-151.243.166.255
151.245.1.0/24
151.247.136.0/24
Signature Algorithm: sha256WithRSAEncryption
18:49:40:fd:86:43:36:26:0f:a4:9d:ed:dc:8c:ce:09:a4:82:
94:0e:d8:60:e2:84:d6:39:f4:f5:95:74:5a:a8:ea:60:43:7c:
cc:b0:60:73:78:ce:b5:20:08:b3:36:00:42:11:8f:89:ce:23:
41:b8:6c:8b:06:0c:f5:1a:01:11:20:db:79:6a:f6:88:73:fd:
2a:7c:ba:3b:66:22:88:5a:a0:fa:e2:87:29:a9:37:39:47:d9:
d1:94:13:2d:ae:a8:9c:60:81:b7:40:22:f3:2e:22:72:2e:5d:
25:85:f8:41:de:f2:c5:68:06:de:6a:57:9e:12:0f:6b:b5:cd:
b9:aa:dd:6b:4a:0c:02:14:f6:12:75:d1:43:6a:58:25:ab:08:
38:d3:dc:65:74:2b:e1:7f:d7:45:ef:68:1b:fc:18:8b:cf:8e:
39:8b:da:0f:ea:81:96:1a:33:9c:6b:c2:05:0c:06:d3:05:10:
d0:10:4b:ab:7e:9c:a6:c9:5e:40:ae:cd:ad:12:2a:7b:81:8f:
46:ef:6c:e7:34:80:ab:76:1b:1f:ac:b8:92:83:15:12:77:c8:
fd:09:36:8e:ea:18:17:8e:86:1d:e2:16:13:c5:41:c1:16:56:
93:60:5f:27:af:dd:1c:bf:14:ff:e5:2a:0d:79:27:5c:fa:49:
8a:2d:25:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:55:17 2026 by rpki-client