Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PUMJAUnanVaJsiAFMwZCgOAVLqU.roa
File: PUMJAUnanVaJsiAFMwZCgOAVLqU.roa (raw, json)
Hash identifier: NmutGyAt17B3V1i57qNllnKlQPMASA9xxkc8iHRNhjI=
Subject key identifier: 3D:43:09:01:49:DA:9D:56:89:B2:20:05:33:06:42:80:E0:15:2E:A5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A1A0FAC3777E31655AC6585BD28FB86132
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PUMJAUnanVaJsiAFMwZCgOAVLqU.roa
Signing time: Tue 03 Nov 2026 10:35:50 +0000
ROA not before: Tue 03 Nov 2026 10:35:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218911
IP address blocks: 151.247.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a0:fa:c3:77:7e:31:65:5a:c6:58:5b:d2:8f:b8:61:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 3 10:35:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d43090149da9d5689b2200533064280e0152ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e8:48:62:81:38:35:a9:6e:46:3c:8d:3d:4c:
dc:6b:a1:b5:2a:0e:0a:81:05:37:60:d6:89:14:b9:
28:97:cf:e3:9c:54:9e:bd:c9:19:9f:89:f4:4c:1c:
86:66:a4:b6:7a:e3:9b:b4:4a:4a:04:65:bb:ad:70:
25:87:a3:22:84:29:48:f8:bd:15:53:f1:30:07:d8:
a0:03:23:13:f2:22:72:04:2b:4f:79:43:d1:da:5f:
33:df:c9:38:d8:86:1c:4e:a5:33:e0:b1:e6:6a:e9:
0e:e9:d1:e2:46:af:05:89:00:d7:45:d6:b6:79:b0:
cd:72:f0:e9:16:3d:93:d9:d8:c2:15:ba:8c:29:9c:
d2:f0:c7:2e:a8:74:9c:15:eb:ab:bc:ee:bc:01:3b:
66:a0:a5:2d:32:e2:7f:39:5a:bb:94:23:25:ec:ed:
cc:5e:3d:a7:7c:2a:07:f4:a8:fa:21:fc:f1:18:77:
fc:c1:40:3f:59:de:b5:ae:34:3d:9b:17:8c:d8:73:
15:2c:a8:e5:d4:fc:ee:56:e2:f0:84:42:2d:cf:aa:
34:57:63:0e:fd:f8:d8:59:b8:89:50:cf:98:c1:5f:
05:5e:c7:f9:04:31:91:60:71:1d:8b:ee:5a:ee:0e:
6d:5f:d6:48:f6:11:72:df:28:a0:eb:6d:fc:f4:c4:
e9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:43:09:01:49:DA:9D:56:89:B2:20:05:33:06:42:80:E0:15:2E:A5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PUMJAUnanVaJsiAFMwZCgOAVLqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.92.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:4a:c8:4b:29:0a:32:83:8c:76:82:a9:96:6d:c0:07:08:2a:
ab:5e:84:24:4b:e2:65:5d:84:4a:6e:bb:1c:f2:b7:e7:a0:68:
9a:37:1a:6e:f7:48:70:cb:5a:97:5e:4e:38:24:ee:a4:b6:9c:
82:fa:4d:09:f1:e8:e6:d4:55:57:f3:e8:15:d4:a1:06:16:90:
67:86:e1:48:04:c6:59:a9:e6:90:8c:85:06:0c:eb:f4:29:14:
c9:40:2d:0e:20:07:1d:f4:53:17:f4:a0:49:44:93:2c:3b:75:
f4:d5:f1:67:a2:7b:00:c1:47:b2:94:49:28:6d:14:a4:38:fb:
03:89:ae:1d:ca:6f:47:0d:06:39:f4:af:c8:e9:83:c7:93:40:
d9:72:6f:49:5f:00:94:2c:34:ab:4b:30:a1:d1:82:5a:6b:00:
1f:3f:b3:cd:a7:fc:5c:c0:de:52:63:bc:1c:dc:94:2c:af:94:
0c:bd:3c:04:af:e1:8b:7e:75:f6:25:b2:c8:73:d9:88:f7:8e:
01:19:5b:9c:7d:c7:d4:09:2f:bf:ff:19:0b:7f:ff:75:12:ba:
e6:71:94:ec:c6:46:11:3b:72:c4:64:f9:1a:ce:dc:ef:a4:fd:
80:96:7d:01:59:8e:de:b3:00:39:d4:3f:97:e9:f6:cc:11:8a:
3d:38:c3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:20:01 2026 by rpki-client