Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0PAb3m7bzwlrU1oqF-sE5L-XnUU.roa
File: 0PAb3m7bzwlrU1oqF-sE5L-XnUU.roa (raw, json)
Hash identifier: qQMNifv5bf6+095PtiHh/Bq3MrCVTfxTQmzdD150zNA=
Subject key identifier: D0:F0:1B:DE:6E:DB:CF:09:6B:53:5A:2A:17:EB:04:E4:BF:97:9D:45
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DDEA9B9FCCB8FEE526173C04EBE41AB7B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0PAb3m7bzwlrU1oqF-sE5L-XnUU.roa
Signing time: Thu 30 Apr 2026 13:52:38 +0000
ROA not before: Thu 30 Apr 2026 13:52:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399955
IP address blocks: 151.241.232.0/23 maxlen: 24
151.245.222.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:a9:b9:fc:cb:8f:ee:52:61:73:c0:4e:be:41:ab:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 30 13:52:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0f01bde6edbcf096b535a2a17eb04e4bf979d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ce:a0:1f:c7:47:7d:d9:f8:f5:70:f7:8a:df:
71:20:a9:ff:63:cc:07:14:47:eb:17:29:fa:6a:63:
53:64:78:b0:0f:4d:04:69:bb:e7:ce:e5:2f:e1:89:
fc:6e:1a:b1:50:a1:6b:c8:ee:16:cf:8e:29:91:e5:
73:27:d6:ba:92:1b:3e:d9:2f:24:e1:8a:88:78:cc:
ae:81:dc:51:da:11:db:83:24:86:04:27:e7:65:0e:
5f:5e:b3:4d:33:ec:c3:6a:98:1f:26:38:29:14:29:
58:f0:90:56:15:48:24:dd:94:6b:e5:c7:cb:71:bb:
14:8d:7a:4b:32:46:db:6e:25:f5:45:65:a8:60:35:
38:1e:ae:e7:50:fa:69:46:b7:bd:f1:cb:48:00:04:
ce:62:ec:9e:95:d1:9a:77:f9:71:70:8a:85:5e:4b:
0d:2a:9a:90:c5:48:fe:db:4b:d4:b2:f4:45:9f:5d:
47:9d:dc:74:9e:2a:ea:14:1a:79:22:b6:ae:0c:54:
44:5b:0a:b9:c1:a4:09:cf:16:65:37:0a:7f:28:89:
12:2a:a9:db:33:4c:e0:5b:4d:51:13:45:dd:ce:1d:
82:30:cb:cf:3e:b0:07:ac:5a:99:3b:8b:74:d2:08:
c8:23:e8:93:2f:19:6d:a3:8e:a2:7f:ef:19:ac:cd:
67:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F0:1B:DE:6E:DB:CF:09:6B:53:5A:2A:17:EB:04:E4:BF:97:9D:45
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0PAb3m7bzwlrU1oqF-sE5L-XnUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.232.0/23
151.245.222.0/23
Signature Algorithm: sha256WithRSAEncryption
63:e6:68:fe:d3:64:c4:b3:f7:81:53:fd:a7:a8:d1:be:bd:58:
e6:05:21:ef:05:6f:88:ac:b5:6b:39:bf:40:06:7d:a9:6b:36:
e4:5b:1b:b2:ef:29:9d:5c:88:96:0d:12:f7:6c:b7:d4:ef:2b:
df:42:6e:2b:92:4e:aa:01:dd:d4:2c:e5:05:c0:ec:1e:1d:e1:
90:15:47:43:8e:37:97:4b:a0:27:57:24:32:f3:20:73:43:e7:
3c:a6:ef:0a:c7:f8:fb:74:ce:2f:d5:1d:87:5a:7c:cf:17:3c:
fa:ac:4d:8b:a7:6d:d8:cb:c5:87:63:5e:87:86:1d:1e:a3:db:
b9:c3:4b:d8:8e:29:d6:3a:e7:6c:39:c4:57:5c:53:5a:e4:6e:
5e:cd:e4:49:af:62:07:10:3a:7d:d5:3a:79:9b:d4:fd:2c:4a:
28:1d:50:b5:28:a9:95:f6:03:eb:30:23:7b:b2:3f:0b:bd:e4:
78:71:86:19:4f:a1:81:e2:b0:ad:5f:d3:77:32:53:5c:2f:56:
de:95:04:a2:38:25:a0:d5:59:23:74:d0:bd:8c:a8:58:6d:9f:
d7:6d:0d:48:9d:c1:9a:9f:dc:3e:26:af:d7:ea:a3:cf:45:a7:
17:85:32:e1:7a:bf:24:45:9d:89:fe:2d:f6:fa:7c:9b:e0:fb:
ec:07:98:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:11:23 2026 by rpki-client