Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DNQfelC0CbgsOV2rAsqiO0aYi_U.roa
File: DNQfelC0CbgsOV2rAsqiO0aYi_U.roa (raw, json)
Hash identifier: JrrIhBO5TX87nbeqMso0PSRqUbjZXV+yxi/UGD7z2H0=
Subject key identifier: 0C:D4:1F:7A:50:B4:09:B8:2C:39:5D:AB:02:CA:A2:3B:46:98:8B:F5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0C7F7EAC4589DE804EE6FA43F27E25BEF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DNQfelC0CbgsOV2rAsqiO0aYi_U.roa
Signing time: Tue 22 Sep 2026 07:15:08 +0000
ROA not before: Tue 22 Sep 2026 07:15:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 151.243.147.0/24 maxlen: 24
151.244.135.0/24 maxlen: 24
151.246.151.0/24 maxlen: 24
151.247.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:f7:ea:c4:58:9d:e8:04:ee:6f:a4:3f:27:e2:5b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 22 07:15:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0cd41f7a50b409b82c395dab02caa23b46988bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:91:e2:7e:5b:29:a0:59:0f:1c:1b:55:a7:e3:
56:78:b6:2a:43:68:fb:35:f4:1c:dd:56:a2:89:83:
88:cb:3a:c6:f2:a7:c8:e6:b8:be:cd:2e:3d:c3:f6:
27:cb:49:75:c7:f5:7d:43:6f:66:72:95:f4:53:4b:
c0:7e:78:94:c5:5a:72:5f:e7:b3:15:5d:63:65:f4:
dd:e5:7b:79:13:92:26:3c:91:4b:47:15:c2:f1:e1:
d5:a3:7b:7f:bd:51:37:2d:ac:3a:f6:d7:b8:c5:42:
7a:c1:95:9e:5d:60:2c:9b:08:d0:0e:d4:d9:66:b1:
49:fb:e7:15:b8:a2:90:a5:0e:d9:5c:c3:14:9d:68:
4d:c7:3f:7e:16:83:d3:82:08:46:cf:b9:2b:c4:a9:
cd:43:2d:ef:79:35:4b:9b:fc:ba:d1:b3:d1:d0:c3:
b3:d4:5b:1f:6c:2a:79:4e:e0:ef:28:43:fd:6c:a0:
c5:fe:62:fa:ee:b9:9f:75:75:99:98:87:97:77:72:
91:e7:89:8b:08:4d:d6:a7:d0:83:e0:0d:f3:0f:dc:
b5:b5:23:c7:7c:7e:fc:b3:a0:fc:1a:41:a2:8a:f9:
68:61:52:b2:ab:ca:67:84:48:f6:9e:ae:28:58:88:
3c:03:59:c0:ac:90:f6:01:92:b6:50:55:63:d4:ee:
98:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D4:1F:7A:50:B4:09:B8:2C:39:5D:AB:02:CA:A2:3B:46:98:8B:F5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DNQfelC0CbgsOV2rAsqiO0aYi_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.147.0/24
151.244.135.0/24
151.246.151.0/24
151.247.10.0/24
Signature Algorithm: sha256WithRSAEncryption
68:89:07:c6:b8:07:30:c1:57:44:00:a8:7a:f3:8e:85:89:62:
c1:5b:10:f9:11:2d:58:d5:c9:71:ab:b7:50:c8:23:57:21:09:
75:e1:10:6a:c4:23:85:b8:b6:6f:06:3a:d3:06:f5:24:5b:0e:
d4:9d:c8:04:ce:9a:f8:05:d7:2c:6e:50:12:e5:61:58:89:de:
b2:d5:28:12:71:81:34:24:94:bb:0f:1e:d1:4e:4b:04:c2:a1:
b7:c4:f0:97:3b:57:a3:46:61:0d:27:44:ff:6e:a2:ce:2e:76:
df:e9:97:76:96:a4:1f:98:10:d4:be:e6:6e:e0:fa:cd:6d:a8:
09:9a:ce:d2:3e:75:02:f6:0e:65:ef:11:27:98:84:24:b4:c3:
10:65:07:bc:16:0c:d8:f7:bc:2d:f0:45:69:f8:5e:83:52:10:
35:80:d4:a0:7b:db:99:33:a8:37:a2:d8:e4:a8:a2:2b:c0:16:
54:50:e2:f4:3e:75:21:61:79:bd:fe:55:4f:34:d4:cd:bb:e5:
0b:70:fb:02:82:4d:9b:50:33:d1:52:20:b4:84:7f:87:ae:cc:
0d:19:01:c9:89:ed:2e:1a:d5:ca:75:b9:2f:04:ca:e5:5c:b2:
15:ad:ce:32:d9:6a:12:83:d9:fd:51:dc:4d:1a:1a:a9:30:95:
45:99:fe:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:46:55 2026 by rpki-client