Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wvF0m5wwGHPD6QTymOOUrr-WWkI.roa
File: wvF0m5wwGHPD6QTymOOUrr-WWkI.roa (raw, json)
Hash identifier: 5ofkbuxhC0rCxDtjjUXjLWmX9XYyGNR/TfFXJhsG1Lk=
Subject key identifier: C2:F1:74:9B:9C:30:18:73:C3:E9:04:F2:98:E3:94:AE:BF:96:5A:42
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EACE3533FE31922A2D9A452063196ED0E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wvF0m5wwGHPD6QTymOOUrr-WWkI.roa
Signing time: Tue 09 Jun 2026 14:57:19 +0000
ROA not before: Tue 09 Jun 2026 14:57:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207343
IP address blocks: 151.241.21.0/24 maxlen: 24
151.242.96.0/24 maxlen: 24
151.243.194.0/24 maxlen: 24
151.244.137.0/24 maxlen: 24
151.246.204.0/24 maxlen: 24
151.247.199.0/24 maxlen: 24
151.247.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:e3:53:3f:e3:19:22:a2:d9:a4:52:06:31:96:ed:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 9 14:57:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2f1749b9c301873c3e904f298e394aebf965a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9a:f4:d9:4b:61:cf:9a:93:58:dd:0d:93:3f:
16:94:17:3f:b9:72:04:0c:8d:24:78:97:44:b0:58:
78:e3:a5:52:79:6e:5f:69:e0:d3:b6:63:8b:8f:db:
f0:82:f0:c6:e5:9c:96:83:49:14:7e:04:4a:a1:31:
19:33:9b:73:0a:89:b8:58:64:8b:8e:d5:c9:20:ce:
0f:7d:ca:55:08:9d:90:ee:92:a7:00:23:ac:fc:f9:
89:87:4b:6e:d0:20:a7:00:ea:2b:f7:ad:e5:7c:46:
f7:3f:7f:8f:30:41:1f:ce:f2:d7:27:51:24:7f:dd:
5a:5c:5a:12:37:23:e2:36:e3:27:45:a7:54:97:11:
5f:ed:79:f4:0e:9a:d0:5a:04:31:f6:39:65:24:1f:
f1:8a:f5:a1:d7:c7:2d:fe:32:6b:4a:66:ba:8b:11:
9d:be:a7:52:d8:d0:fe:22:e2:cf:b6:64:d2:db:3f:
a7:b1:60:2d:0d:86:5d:e8:1a:09:15:17:2b:26:1c:
e5:98:30:a8:75:41:78:c9:5c:20:50:79:66:7f:bd:
b1:68:a6:3b:da:cb:e1:26:c9:cc:9c:1c:5b:25:b9:
16:b2:84:87:cd:41:36:f8:cf:fe:f6:7f:11:4a:55:
1e:36:6e:0b:41:c3:f4:37:74:2d:d4:64:e3:f6:f6:
19:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F1:74:9B:9C:30:18:73:C3:E9:04:F2:98:E3:94:AE:BF:96:5A:42
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wvF0m5wwGHPD6QTymOOUrr-WWkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.21.0/24
151.242.96.0/24
151.243.194.0/24
151.244.137.0/24
151.246.204.0/24
151.247.199.0/24
151.247.215.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:dc:49:ac:20:e1:47:e2:67:0b:36:7a:61:73:72:61:67:cf:
63:21:17:41:b8:7c:07:d1:06:4e:ec:bf:3e:97:c8:9b:d2:2c:
39:38:c7:0e:53:1c:78:3b:c5:ff:38:02:e5:6a:5c:8b:ea:44:
f4:7a:54:9a:ac:9d:e7:ba:8d:63:97:71:52:35:2e:e0:90:76:
1a:ce:e7:8f:1f:a8:1d:7d:9b:a1:e9:92:e5:9f:b1:ef:99:4b:
3a:5c:37:6a:05:06:e3:c0:13:e5:34:18:20:06:64:2d:4f:52:
2e:13:48:27:b8:3a:6f:b4:8c:3c:cd:a2:dd:8d:44:36:95:4e:
9b:76:0c:f4:eb:df:9e:3b:15:c1:43:58:41:e0:c4:ae:2d:b7:
2e:c4:b9:7b:22:34:77:33:02:c1:80:c8:f4:18:b2:46:8b:fb:
7a:eb:16:de:47:6a:fd:87:ac:13:7c:34:2b:f4:4e:10:5a:e8:
5a:fa:25:23:cf:76:b2:ca:45:77:6b:d8:41:4f:d7:b9:d3:2e:
6a:b4:ac:c8:65:87:58:5c:29:87:82:6f:91:1b:d4:31:8e:ed:
96:db:e9:fa:5c:02:08:ea:44:dd:4f:28:15:79:12:7b:8a:ec:
ad:4a:00:7a:af:73:f7:9f:e2:c9:05:93:79:88:29:b2:d7:c4:
8c:f2:18:44
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZ6s41M/4xkiotmkUgYxlu0OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNjA5MTQ1NzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmYxNzQ5YjljMzAxODczYzNlOTA0ZjI5OGUzOTRhZWJmOTY1YTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5r02Uthz5qTWN0Nkz8WlBc/uXIE
DI0keJdEsFh446VSeW5faeDTtmOLj9vwgvDG5ZyWg0kUfgRKoTEZM5tzCom4WGSL
jtXJIM4PfcpVCJ2Q7pKnACOs/PmJh0tu0CCnAOor963lfEb3P3+PMEEfzvLXJ1Ek
f91aXFoSNyPiNuMnRadUlxFf7Xn0DprQWgQx9jllJB/xivWh18ct/jJrSma6ixGd
vqdS2ND+IuLPtmTS2z+nsWAtDYZd6BoJFRcrJhzlmDCodUF4yVwgUHlmf72xaKY7
2svhJsnMnBxbJbkWsoSHzUE2+M/+9n8RSlUeNm4LQcP0N3Qt1GTj9vYZuwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFMLxdJucMBhzw+kE8pjjlK6/llpCMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvd3ZGMG01d3dHSFBENlFUeW1PT1Vyci1XV2tJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAl/EVAwQA
l/JgAwQAl/PCAwQAl/SJAwQAl/bMAwQAl/fHAwQAl/fXMA0GCSqGSIb3DQEBCwUA
A4IBAQAM3EmsIOFH4mcLNnphc3JhZ89jIRdBuHwH0QZO7L8+l8ib0iw5OMcOUxx4
O8X/OALlalyL6kT0elSarJ3nuo1jl3FSNS7gkHYazuePH6gdfZuh6ZLln7HvmUs6
XDdqBQbjwBPlNBggBmQtT1IuE0gnuDpvtIw8zaLdjUQ2lU6bdgz069+eOxXBQ1hB
4MSuLbcuxLl7IjR3MwLBgMj0GLJGi/t66xbeR2r9h6wTfDQr9E4QWuha+iUjz3ay
ykV3a9hBT9e50y5qtKzIZYdYXCmHgm+RG9Qxju2W2+n6XAII6kTdTygVeRJ7iuyt
SgB6r3P3n+LJBZN5iCmy18SM8hhE
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:52 2026 by rpki-client