Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tmXb7Y6QH4hrWCmD-0xAxEMvjvU.roa
File: tmXb7Y6QH4hrWCmD-0xAxEMvjvU.roa (raw, json)
Hash identifier: EjjNIfVacUf1XVSbunFRuN3LGp0cY5vfKVoZwU1vDTw=
Subject key identifier: B6:65:DB:ED:8E:90:1F:88:6B:58:29:83:FB:4C:40:C4:43:2F:8E:F5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EA0F99454643CF6E53887BBA19B85A690
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tmXb7Y6QH4hrWCmD-0xAxEMvjvU.roa
Signing time: Sun 07 Jun 2026 07:26:11 +0000
ROA not before: Sun 07 Jun 2026 07:26:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209888
IP address blocks: 151.247.16.0/24 maxlen: 24
151.247.100.0/24 maxlen: 24
151.247.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a0:f9:94:54:64:3c:f6:e5:38:87:bb:a1:9b:85:a6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 7 07:26:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b665dbed8e901f886b582983fb4c40c4432f8ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ff:84:0f:1e:3a:79:d1:f3:e9:35:24:a8:87:
34:78:1d:fe:e1:7b:d3:d4:54:0e:3a:34:20:e6:50:
d3:8b:74:e5:30:df:2c:51:34:cc:b0:94:8a:04:7b:
18:c4:a5:97:27:fc:ac:0c:d3:28:09:a2:ea:dc:fb:
01:fa:7a:28:1f:63:7b:b2:1e:d7:4e:48:29:34:bc:
09:73:a1:0c:62:a3:85:11:81:d3:0c:ea:55:58:1b:
f8:94:9b:f4:b8:df:cc:89:7e:2b:ae:5f:23:ad:ce:
bf:71:98:4e:83:4f:8c:ac:62:81:3c:fa:4d:7d:48:
71:aa:50:33:5d:42:56:90:95:ae:1c:00:51:74:b2:
55:b6:22:06:88:91:4b:c5:2c:0e:8a:6b:d4:c4:f5:
dd:17:da:ae:27:a8:3f:e2:57:30:c2:35:cf:b1:a1:
bf:5b:3b:c8:c4:5d:5f:06:cf:44:39:6e:12:2c:27:
49:da:13:78:09:db:bc:96:e6:58:6f:cc:47:ea:52:
1e:49:00:58:ce:b4:eb:8d:ab:9d:79:d6:18:44:c8:
d6:c8:cf:91:24:2c:c1:f0:59:8e:1d:f3:7a:94:7b:
03:27:51:c5:60:77:5b:d8:fc:df:69:fe:e8:9b:9e:
bf:ed:6b:59:83:40:d8:a7:bf:6c:cb:33:f2:5e:95:
bc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:65:DB:ED:8E:90:1F:88:6B:58:29:83:FB:4C:40:C4:43:2F:8E:F5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tmXb7Y6QH4hrWCmD-0xAxEMvjvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.16.0/24
151.247.100.0/24
151.247.102.0/24
Signature Algorithm: sha256WithRSAEncryption
46:8d:36:a7:58:0c:9e:ee:1a:c6:a3:71:a4:9d:42:03:58:07:
76:f0:9b:7b:46:e7:11:7f:73:3d:80:2d:9d:a6:a9:b0:72:06:
4a:4a:c9:59:ab:8d:73:7d:30:84:4c:06:65:a4:0c:2b:6e:c6:
c4:c6:09:ca:5b:04:6d:3c:0a:c6:1a:02:0d:d1:0c:1d:7a:9f:
83:7e:34:40:8d:14:49:e9:31:1e:56:0e:3e:af:54:07:fb:9e:
04:32:ef:af:00:16:2b:eb:1e:e6:35:c1:6d:34:73:fd:9f:83:
51:a5:ff:a6:99:fe:b1:21:9d:87:f9:34:da:c4:40:69:df:32:
01:79:ec:d8:b6:d8:59:7f:53:0a:7f:61:8c:bd:b0:a9:b0:fa:
6a:e9:9c:cd:c7:cc:4b:16:4b:09:3a:de:17:85:d5:02:e8:e9:
93:6f:b0:d1:c4:f5:1b:63:3b:7f:08:d8:c1:1e:9a:3a:c2:cb:
25:47:f7:c8:66:6c:e1:8e:2e:32:de:88:31:11:1f:82:09:ce:
e7:80:02:7f:7f:25:ba:ee:14:1d:c3:ad:80:ae:e7:95:13:26:
dd:ba:36:52:6b:53:e3:fd:ed:c1:f5:ed:92:c9:d1:2a:5f:f2:
08:52:4c:1b:06:35:a9:7c:46:82:72:5a:0c:33:25:0e:d5:08:
8f:dd:47:e7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ6g+ZRUZDz25TiHu6GbhaaQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNjA3MDcyNjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjY1ZGJlZDhlOTAxZjg4NmI1ODI5ODNmYjRjNDBjNDQzMmY4ZWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjf+EDx46edHz6TUkqIc0eB3+4XvT
1FQOOjQg5lDTi3TlMN8sUTTMsJSKBHsYxKWXJ/ysDNMoCaLq3PsB+nooH2N7sh7X
TkgpNLwJc6EMYqOFEYHTDOpVWBv4lJv0uN/MiX4rrl8jrc6/cZhOg0+MrGKBPPpN
fUhxqlAzXUJWkJWuHABRdLJVtiIGiJFLxSwOimvUxPXdF9quJ6g/4lcwwjXPsaG/
WzvIxF1fBs9EOW4SLCdJ2hN4Cdu8luZYb8xH6lIeSQBYzrTrjaudedYYRMjWyM+R
JCzB8FmOHfN6lHsDJ1HFYHdb2Pzfaf7om56/7WtZg0DYp79syzPyXpW8BwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLZl2+2OkB+Ia1gpg/tMQMRDL471MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvdG1YYjdZNlFINGhyV0NtRC0weEF4RU12anZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/cQAwQA
l/dkAwQAl/dmMA0GCSqGSIb3DQEBCwUAA4IBAQBGjTanWAye7hrGo3GknUIDWAd2
8Jt7RucRf3M9gC2dpqmwcgZKSslZq41zfTCETAZlpAwrbsbExgnKWwRtPArGGgIN
0Qwdep+DfjRAjRRJ6TEeVg4+r1QH+54EMu+vABYr6x7mNcFtNHP9n4NRpf+mmf6x
IZ2H+TTaxEBp3zIBeezYtthZf1MKf2GMvbCpsPpq6ZzNx8xLFksJOt4XhdUC6OmT
b7DRxPUbYzt/CNjBHpo6wsslR/fIZmzhji4y3ogxER+CCc7ngAJ/fyW67hQdw62A
rueVEybdujZSa1Pj/e3B9e2SydEqX/IIUkwbBjWpfEaCcloMMyUO1QiP3Ufn
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:56 2026 by rpki-client