Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PGdnUftHyR1C72vndk1xloc9nwk.roa
File: PGdnUftHyR1C72vndk1xloc9nwk.roa (raw, json)
Hash identifier: 0b90jOFnZ/tgbFV4oRwVTg0WP1LPXjUpAcPNV/YB6tM=
Subject key identifier: 3C:67:67:51:FB:47:C9:1D:42:EF:6B:E7:76:4D:71:96:87:3D:9F:09
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DF2FDC7BC8BB6A1D58FEF89802C7FFB07
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PGdnUftHyR1C72vndk1xloc9nwk.roa
Signing time: Mon 04 May 2026 12:36:51 +0000
ROA not before: Mon 04 May 2026 12:36:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150249
IP address blocks: 151.242.133.0/24 maxlen: 24
151.247.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f2:fd:c7:bc:8b:b6:a1:d5:8f:ef:89:80:2c:7f:fb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 4 12:36:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3c676751fb47c91d42ef6be7764d7196873d9f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:97:b0:12:29:dd:50:ef:70:22:d2:a2:6a:
c7:dc:37:3e:6a:82:42:48:5c:5a:c7:be:f3:f6:74:
cd:ee:65:34:d2:e2:8e:d2:67:66:b9:fd:40:54:5c:
cf:ee:2f:24:0f:e7:36:8f:59:cb:ea:d4:9f:b7:34:
55:27:21:c0:3a:a6:10:05:27:52:4d:4d:26:6b:5f:
67:69:7b:df:0d:14:17:1d:85:69:b4:75:86:d3:7d:
27:0f:f5:e8:49:8c:e9:46:f7:68:1b:42:12:d0:b8:
f1:fd:ef:d2:fd:cb:52:09:4d:6f:ff:8e:fc:8e:a9:
8a:97:10:e7:b2:5e:6d:0b:f3:0c:aa:0a:d0:f1:59:
4d:bf:15:5e:ba:fe:6c:bf:f5:c4:68:a5:9e:22:a3:
40:21:b9:d7:df:4f:be:67:63:65:ff:c1:e7:30:36:
c7:ed:12:55:8a:45:69:3b:77:b8:de:c7:6b:3d:f7:
2d:14:27:0c:5d:d5:d3:67:6f:b2:5c:ad:4e:10:4d:
cf:3e:12:42:1d:fd:38:32:9a:6d:0f:2a:fc:55:2a:
50:d4:eb:c2:67:2a:5a:f5:1b:ac:97:ba:75:4e:18:
76:23:67:18:f6:6f:25:9c:f6:b4:bd:99:28:13:14:
f4:ee:3e:5f:19:79:52:65:bf:5f:a6:6d:f9:26:57:
1e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:67:67:51:FB:47:C9:1D:42:EF:6B:E7:76:4D:71:96:87:3D:9F:09
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PGdnUftHyR1C72vndk1xloc9nwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.133.0/24
151.247.5.0/24
Signature Algorithm: sha256WithRSAEncryption
41:8f:b5:1b:fe:f6:25:7f:4a:f6:48:68:ae:be:a0:40:e8:f8:
64:39:bb:01:f0:59:dd:68:a2:f4:fc:2a:f7:15:91:d3:cc:e1:
ef:50:02:19:2e:a1:64:61:36:80:1c:05:1d:08:79:aa:91:f8:
51:80:53:70:70:f2:78:41:c1:47:c8:48:27:68:cc:85:87:6e:
21:48:31:36:0f:b3:86:d5:10:47:1c:c2:4e:67:e6:bb:90:c4:
9d:48:16:1f:10:db:c7:b2:19:95:56:b6:dc:2d:a4:ec:37:cf:
36:ff:33:cc:2f:44:dd:41:a9:15:5c:bc:ff:de:09:5f:33:1a:
7a:c3:3a:72:93:45:0a:29:a2:0a:d1:27:98:09:a4:af:4a:7f:
21:18:70:3a:42:91:cd:88:25:04:9b:e4:3c:40:4b:f7:33:94:
9e:ea:04:c3:12:e6:d9:2b:7d:68:24:a3:e7:0b:ea:df:c0:19:
e4:ae:90:20:2a:de:a8:4f:2b:0b:1a:88:07:8f:2f:cf:30:8c:
da:87:65:38:fc:a1:ae:62:89:ad:3f:11:2a:82:aa:32:0a:c9:
f2:ec:40:49:71:e3:94:06:4b:3e:d8:67:8e:fc:e2:ce:4d:1c:
0c:e7:07:a6:ed:e2:77:0b:32:1f:a9:df:7f:ed:a1:30:92:66:
fe:c8:c2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:37:11 2026 by rpki-client