Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/mKX9BGqDk4WQ_J6ZL5Ph-ThXhs0.roa
File: mKX9BGqDk4WQ_J6ZL5Ph-ThXhs0.roa (raw, json)
Hash identifier: Rbsj8UMzARveBm41gVgcHiWZPkc8tCzAKZEps1XxJPs=
Subject key identifier: 98:A5:FD:04:6A:83:93:85:90:FC:9E:99:2F:93:E1:F9:38:57:86:CD
Certificate issuer: /CN=a8b31004df135aa1a8b943033db14691b11a63dd
Certificate serial: 019F8F592F215CF3F63AA9F2D9FBE6ED8E3A
Authority key identifier: A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/mKX9BGqDk4WQ_J6ZL5Ph-ThXhs0.roa
Signing time: Thu 23 Jul 2026 14:20:14 +0000
ROA not before: Thu 23 Jul 2026 14:20:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3242
IP address blocks: 151.1.0.0/18 maxlen: 18
151.1.0.0/23 maxlen: 23
151.1.0.0/24 maxlen: 24
151.1.1.0/24 maxlen: 24
151.1.2.0/23 maxlen: 23
151.1.4.0/22 maxlen: 22
151.1.7.0/24 maxlen: 24
151.1.8.0/21 maxlen: 21
151.1.16.0/20 maxlen: 20
151.1.24.0/21 maxlen: 21
151.1.32.0/19 maxlen: 19
151.1.32.0/21 maxlen: 21
151.1.40.0/23 maxlen: 23
151.1.42.0/23 maxlen: 23
151.1.44.0/23 maxlen: 23
151.1.46.0/23 maxlen: 23
151.1.48.0/24 maxlen: 24
151.1.49.0/24 maxlen: 24
151.1.50.0/24 maxlen: 24
151.1.62.0/24 maxlen: 24
151.1.66.0/23 maxlen: 23
151.1.68.0/22 maxlen: 24
151.1.72.0/24 maxlen: 24
151.1.74.0/23 maxlen: 23
151.1.76.0/22 maxlen: 22
151.1.80.0/20 maxlen: 20
151.1.84.0/24 maxlen: 24
151.1.96.0/22 maxlen: 22
151.1.104.0/21 maxlen: 21
151.1.112.0/20 maxlen: 20
151.1.128.0/18 maxlen: 18
151.1.192.0/18 maxlen: 18
151.1.192.0/22 maxlen: 22
151.1.192.0/24 maxlen: 24
151.1.194.0/24 maxlen: 24
151.1.195.0/24 maxlen: 24
151.1.196.0/22 maxlen: 22
151.1.200.0/21 maxlen: 21
151.1.203.0/24 maxlen: 24
151.1.208.0/21 maxlen: 21
151.1.212.0/24 maxlen: 24
151.1.216.0/21 maxlen: 21
151.1.224.0/19 maxlen: 19
151.1.227.0/24 maxlen: 24
151.1.232.0/21 maxlen: 21
151.1.244.0/24 maxlen: 24
151.2.0.0/20 maxlen: 20
151.2.32.0/19 maxlen: 19
151.2.36.0/24 maxlen: 24
151.2.96.0/20 maxlen: 20
151.2.102.0/24 maxlen: 24
2a01:65c0::/32 maxlen: 32
2a01:65c0:100::/48 maxlen: 48
2a01:65c0:101::/48 maxlen: 48
2a01:65c0:200::/40 maxlen: 40
2a01:65c0:e00::/48 maxlen: 48
2a01:65c0:e01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:59:2f:21:5c:f3:f6:3a:a9:f2:d9:fb:e6:ed:8e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b31004df135aa1a8b943033db14691b11a63dd
Validity
Not Before: Jul 23 14:20:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98a5fd046a83938590fc9e992f93e1f9385786cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:28:95:ae:7c:48:27:d4:31:0f:07:16:be:54:
7d:c6:26:f7:2b:20:0b:17:7f:9d:0e:21:75:4e:79:
c2:26:41:88:4c:23:93:98:af:8e:1e:9b:bd:da:89:
4d:2d:52:0e:b1:be:ea:ac:7f:94:97:33:a1:5c:59:
47:4c:0c:a2:f6:fa:e8:08:5d:b1:f6:9c:2c:04:80:
1b:93:56:41:18:9e:4e:0c:5c:2b:11:a3:33:33:7c:
56:5b:17:b2:3f:db:9d:70:61:21:31:ce:22:16:49:
83:16:fe:03:fe:23:b6:67:7e:d8:3c:34:04:e8:8d:
b7:43:22:a2:92:c9:32:8c:99:96:08:cd:3b:68:d1:
a4:6f:1d:1a:37:f0:60:1a:70:a9:69:28:da:b0:0d:
f6:f0:f7:81:d1:f8:0c:1b:2a:4f:e0:6c:34:11:ec:
50:16:58:7a:37:00:33:86:02:c4:48:ce:0f:16:b4:
12:59:bc:1c:f6:72:b7:b0:5f:86:4a:01:32:9c:b9:
62:b7:c3:63:12:27:7d:3a:79:44:06:d8:e8:9b:aa:
69:76:ca:2f:40:0c:e4:9d:31:e8:b5:e2:0a:2d:9c:
90:81:5a:20:7d:57:2b:d8:6c:14:0b:f1:f1:f3:8e:
f7:a2:b8:2c:a1:6e:96:c2:5b:24:11:39:57:b6:af:
91:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A5:FD:04:6A:83:93:85:90:FC:9E:99:2F:93:E1:F9:38:57:86:CD
X509v3 Authority Key Identifier:
keyid:A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/mKX9BGqDk4WQ_J6ZL5Ph-ThXhs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.1.0.0/18
151.1.66.0-151.1.72.255
151.1.74.0-151.1.99.255
151.1.104.0-151.2.15.255
151.2.32.0/19
151.2.96.0/20
IPv6:
2a01:65c0::/32
Signature Algorithm: sha256WithRSAEncryption
0d:d9:b0:e6:77:de:78:7a:27:f9:3a:bc:3d:3f:e3:14:2f:41:
b8:ca:da:59:3a:9b:55:8a:36:d5:5c:4d:35:d2:6e:2f:c5:5f:
55:24:ca:03:22:64:fc:19:90:7f:76:2c:0b:5c:87:36:d4:83:
b4:20:9a:4c:71:b4:20:1e:12:9f:1d:41:95:ee:2f:c3:49:5d:
24:70:e8:23:10:31:e2:6b:b2:c5:d0:2f:4c:ca:40:90:c7:6d:
b7:ed:31:e0:67:3f:4c:c3:1f:50:b3:96:e5:ea:28:12:29:7e:
db:d1:48:79:48:67:4f:bd:ea:8c:af:d9:e3:31:35:25:aa:81:
d4:88:9b:75:08:7f:d5:03:e8:69:f0:41:6d:a0:12:ad:8f:a1:
db:a9:08:96:33:01:97:d8:7b:58:a6:54:2e:ce:54:9c:df:64:
79:68:1a:cb:99:16:f9:e7:9d:fa:8e:9e:40:02:fb:8b:24:a1:
e7:1e:cf:96:69:b4:9b:7f:da:86:3d:08:8f:1f:eb:7d:d8:fa:
d4:0e:d8:4d:09:73:a2:fa:1d:57:73:bf:e1:1a:dd:33:d9:ed:
dd:06:04:fa:8c:80:46:e5:4a:4a:99:5b:38:b2:19:f2:9b:bb:
e7:af:6f:f4:a1:f2:65:69:ff:2e:74:cd:81:fe:b6:13:d9:56:
82:27:de:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:56:39 2026 by rpki-client