Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wVmZJ3zVSnfOx2Is3xepRRhEO4g.roa
File: wVmZJ3zVSnfOx2Is3xepRRhEO4g.roa (raw, json)
Hash identifier: iP+smf/mQEE3YzpSZOxjUfV7uPy3Pbth2tDIAZ4hjYE=
Subject key identifier: C1:59:99:27:7C:D5:4A:77:CE:C7:62:2C:DF:17:A9:45:18:44:3B:88
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D8CC5B93D39FB1FCC14CBF4854B167E30
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wVmZJ3zVSnfOx2Is3xepRRhEO4g.roa
Signing time: Tue 14 Apr 2026 16:14:21 +0000
ROA not before: Tue 14 Apr 2026 16:14:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20326
IP address blocks: 151.241.65.0/24 maxlen: 24
151.241.178.0/24 maxlen: 24
151.243.21.0/24 maxlen: 24
151.243.244.0/24 maxlen: 24
151.244.2.0/24 maxlen: 24
151.244.136.0/22 maxlen: 24
151.244.160.0/22 maxlen: 24
151.244.171.0/24 maxlen: 24
151.244.172.0/22 maxlen: 24
151.244.176.0/22 maxlen: 24
151.245.8.0/21 maxlen: 24
151.245.149.0/24 maxlen: 24
151.247.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8c:c5:b9:3d:39:fb:1f:cc:14:cb:f4:85:4b:16:7e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 14 16:14:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c15999277cd54a77cec7622cdf17a94518443b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e5:ae:6a:95:db:e0:75:36:95:40:f5:12:3f:
cc:92:22:83:06:db:9a:df:67:ae:48:e6:d0:5d:08:
38:34:b1:4c:38:0e:46:26:27:9c:42:bf:b2:32:b9:
be:fa:dc:73:89:7c:b4:2a:22:bf:f4:47:56:be:d5:
a6:9f:65:dc:a8:f8:bb:ec:f4:0a:1b:95:f7:63:54:
c2:76:12:02:c2:43:db:2b:1d:28:91:85:d8:7d:1b:
46:fa:6a:05:c1:0f:c2:b9:23:1f:4a:82:e4:ac:33:
a6:9a:e7:b0:af:9c:f4:46:72:87:c8:82:45:99:a8:
64:f7:07:8c:fd:e0:58:8c:4f:c4:fe:f2:64:71:39:
24:39:71:f3:8e:97:bd:50:a1:94:56:ce:c4:b5:e5:
f2:e9:ae:96:4a:db:95:a0:a8:0a:e6:43:9e:ac:8d:
a1:e6:37:8d:c9:aa:eb:47:d6:8d:35:2d:87:60:95:
37:cf:fb:43:62:06:e8:2f:40:95:eb:f0:1d:88:5f:
c1:bc:c4:81:82:2a:a0:32:19:be:f1:f4:cb:8f:bd:
18:50:80:29:03:93:52:43:e8:cf:e3:80:75:c0:94:
45:6e:c8:f0:d5:33:42:3c:37:5c:c3:27:0a:3a:a8:
bb:ed:13:15:f8:9f:8b:31:72:ee:77:a7:f2:ef:ce:
8a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:59:99:27:7C:D5:4A:77:CE:C7:62:2C:DF:17:A9:45:18:44:3B:88
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wVmZJ3zVSnfOx2Is3xepRRhEO4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.65.0/24
151.241.178.0/24
151.243.21.0/24
151.243.244.0/24
151.244.2.0/24
151.244.136.0/22
151.244.160.0/22
151.244.171.0-151.244.179.255
151.245.8.0/21
151.245.149.0/24
151.247.132.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:0a:3b:0d:90:2a:2f:1c:6b:6c:06:8c:29:e7:83:ff:be:ed:
1b:ee:cc:ed:68:3f:fa:24:8a:70:22:ef:2f:0e:4e:d0:98:96:
41:0e:96:7c:39:d3:f5:49:a7:e3:48:5b:b9:4d:8f:4b:5c:fd:
30:50:7c:b2:e5:98:ce:fc:f4:0d:28:41:f2:bc:6a:1c:71:c0:
b3:d1:26:54:a9:cf:11:42:f6:23:00:f6:41:ba:04:1e:fc:2f:
b7:12:6e:0f:69:e6:30:e0:07:1d:a7:05:02:a0:d9:c0:70:2b:
d9:a2:fc:ed:50:c5:f9:b2:cc:12:02:ad:a2:ba:42:ad:2f:dc:
d9:5f:69:0a:c5:6f:41:06:4b:e6:66:fd:d9:df:61:19:75:3e:
6a:e9:91:c5:52:8a:29:9e:68:ae:76:d0:fc:25:91:ed:e6:0f:
0c:c0:01:39:55:13:87:a3:2c:00:e0:ec:09:f3:d3:6a:33:fe:
62:c6:a3:78:ad:8f:fb:24:b0:04:c4:9b:0f:92:37:95:5d:65:
07:b0:2a:8a:65:dc:08:89:75:2b:da:ad:7f:93:f7:c2:82:7e:
fd:7f:90:d4:83:59:ab:05:f8:d4:a2:5e:88:5b:59:3a:6d:7c:
2c:69:28:c7:ca:3d:36:7d:4e:f2:66:49:2d:03:ad:13:b6:5d:
15:04:88:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:02:23 2026 by rpki-client