Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GQKS5CfTh3bBHltVXIo686Ivy3o.roa
File: GQKS5CfTh3bBHltVXIo686Ivy3o.roa (raw, json)
Hash identifier: QeZ3gB2X+7z9PY8N04Myl50TdyAfeu/wfi3Y9crDPoE=
Subject key identifier: 19:02:92:E4:27:D3:87:76:C1:1E:5B:55:5C:8A:3A:F3:A2:2F:CB:7A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CCA0234B969EEF48FB014A7C32CAC89C9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GQKS5CfTh3bBHltVXIo686Ivy3o.roa
Signing time: Sat 07 Mar 2026 20:34:28 +0000
ROA not before: Sat 07 Mar 2026 20:34:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4766
IP address blocks: 151.245.190.0/24 maxlen: 24
151.245.196.0/24 maxlen: 24
151.245.240.0/24 maxlen: 24
151.246.254.0/24 maxlen: 24
151.247.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ca:02:34:b9:69:ee:f4:8f:b0:14:a7:c3:2c:ac:89:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 7 20:34:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=190292e427d38776c11e5b555c8a3af3a22fcb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:de:85:09:56:2c:89:ce:94:c8:ce:33:d6:
cf:f1:f8:47:4c:9b:06:d1:7d:ab:04:75:0e:9e:a2:
90:99:43:0f:f6:c7:72:25:8f:1d:9a:13:16:3c:f4:
49:c2:15:5a:29:87:37:bf:75:90:24:39:0a:a9:a6:
ce:11:f8:d7:51:ac:c3:62:43:c6:b4:6a:99:91:97:
83:71:cf:2f:65:9f:f9:16:a1:0b:a6:b9:aa:1b:36:
32:22:f9:36:2d:50:1f:ed:f1:da:4e:5b:9d:8f:bf:
f6:a7:78:b2:9e:d8:b2:cd:21:2c:e3:90:cf:ec:be:
25:3a:12:87:c7:3f:9a:7d:e1:8f:f4:24:23:ba:7b:
33:6a:5c:fc:f1:d3:44:a9:75:3f:b6:78:87:a4:75:
93:6f:7d:9f:aa:cf:2f:ea:e7:0e:35:be:d3:b0:17:
58:42:04:4a:6b:7a:ad:2d:d0:b4:79:bd:2b:94:2c:
b4:25:3d:87:ab:a2:00:99:3f:53:00:fb:b3:e2:fd:
06:b8:cb:22:6b:b9:e4:7b:c6:30:93:0d:21:99:4b:
dd:50:0f:8f:48:7b:f5:c9:58:c0:40:36:19:c8:7c:
80:0e:9a:12:fd:92:4c:d7:42:48:79:61:80:0e:25:
ce:a8:03:0e:9f:61:14:f9:d6:a8:88:9e:56:fb:fc:
cb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:02:92:E4:27:D3:87:76:C1:1E:5B:55:5C:8A:3A:F3:A2:2F:CB:7A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GQKS5CfTh3bBHltVXIo686Ivy3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.190.0/24
151.245.196.0/24
151.245.240.0/24
151.246.254.0/24
151.247.140.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:b4:7f:0d:a9:9c:3f:aa:5e:a2:36:40:09:d2:da:43:ef:c1:
5a:dd:1a:bc:88:bd:76:94:54:d5:53:6c:e1:b5:f6:5b:52:57:
c1:be:4e:1c:10:e1:4d:5b:c1:7d:13:0d:70:00:56:0a:36:1f:
18:87:29:0a:a7:26:36:4d:99:74:d4:cb:f9:4e:51:d7:2d:5c:
43:1b:d8:0a:dd:1e:83:f7:1e:88:77:fb:bd:4a:cb:3a:e6:3b:
bd:30:ea:5a:f9:dd:7b:ca:8a:7c:6a:64:e6:59:e4:4e:ee:65:
d5:5b:d5:37:35:ef:23:7c:b0:e5:06:9c:a2:82:92:45:19:5f:
2b:bf:88:59:fb:25:89:99:b8:59:12:b7:a0:c5:90:e1:b2:44:
37:04:5b:16:e1:16:e6:93:8e:c0:6e:14:c4:5b:58:04:70:cf:
ac:88:f5:e0:31:97:84:d9:9c:91:90:76:d8:b6:d6:2d:88:87:
b6:97:10:08:ec:8c:27:54:2d:c2:e5:69:07:27:d7:28:6e:46:
03:22:52:cb:c6:39:0d:c0:2c:bb:cb:db:52:c6:8e:04:bb:42:
e4:3d:32:30:01:a6:8f:0a:40:e6:7d:12:fa:72:88:dc:95:db:
49:ea:b2:c8:c7:1c:15:36:8a:8b:7d:75:ce:6a:52:cc:14:2f:
ce:5d:63:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:33:48 2026 by rpki-client