Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PliCRq05EtGcMsFt76cqlLzhDII.roa
File: PliCRq05EtGcMsFt76cqlLzhDII.roa (raw, json)
Hash identifier: jqOyo5gPyXzOSirxSTpd/X/HUYgCKeKI7I8WPsgwyNI=
Subject key identifier: 3E:58:82:46:AD:39:12:D1:9C:32:C1:6D:EF:A7:2A:94:BC:E1:0C:82
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A1B9FA953E0BC80F00AD2C88CFBA0A27BB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PliCRq05EtGcMsFt76cqlLzhDII.roa
Signing time: Sun 08 Nov 2026 07:06:09 +0000
ROA not before: Sun 08 Nov 2026 07:06:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 151.243.51.0/24 maxlen: 24
151.246.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b9:fa:95:3e:0b:c8:0f:00:ad:2c:88:cf:ba:0a:27:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 8 07:06:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e588246ad3912d19c32c16defa72a94bce10c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7c:ec:fe:4f:80:b9:dc:e5:bb:86:5c:e8:aa:
37:5d:0c:a6:32:ad:86:d7:47:2d:85:9c:a3:4a:32:
6d:d9:2e:c3:64:3b:64:fe:36:54:42:c1:a8:55:63:
d2:c3:53:e0:4f:4c:23:01:85:4b:18:3f:33:68:85:
3d:9a:b0:32:10:e9:71:a0:e0:e5:c9:96:ae:f4:f8:
e1:be:ab:f4:18:43:5d:4e:be:5f:c9:9d:b7:63:81:
01:79:6d:04:46:d5:e4:19:1b:c5:5f:0f:16:ff:16:
3b:79:0c:ae:d7:05:12:5c:9e:02:7b:47:3e:3c:33:
8d:d0:a1:60:c6:67:38:12:a4:c4:06:8f:3e:57:38:
d7:58:a6:cc:5f:d3:03:a7:c6:6f:bb:2b:dd:77:49:
9b:56:45:ed:40:73:4c:a5:c2:ab:4f:43:10:11:9d:
f3:41:57:8f:5b:c6:a6:e2:b3:f3:1d:9e:b0:a6:b0:
a5:4b:d3:88:95:3a:3e:b2:d8:bd:cb:1f:de:9f:e6:
6b:b0:4f:30:0b:3f:03:7c:a0:ef:77:b5:24:d4:6d:
0d:cd:fb:ad:b9:91:52:90:7f:ee:1b:28:43:bf:7d:
78:c7:36:cb:42:9d:6c:22:24:52:ac:10:66:3d:46:
20:77:bd:4d:dd:24:4f:e4:15:98:e0:2c:3f:62:4e:
6e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:58:82:46:AD:39:12:D1:9C:32:C1:6D:EF:A7:2A:94:BC:E1:0C:82
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PliCRq05EtGcMsFt76cqlLzhDII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.51.0/24
151.246.180.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:da:61:c9:ac:f0:b0:9b:93:4a:d6:cb:5f:5c:d8:c9:b6:e3:
52:31:44:5e:db:87:0f:65:14:80:9e:8d:13:d4:85:2a:6e:5e:
9d:c1:97:b6:c2:ae:1b:c6:c6:4f:55:77:9a:04:f7:23:62:08:
1c:e9:e7:92:b2:77:31:9e:53:f7:6c:f9:d2:21:2f:ad:a4:cc:
08:54:44:bf:46:8f:f2:82:0f:0d:f4:af:1c:c0:28:61:d3:37:
50:b4:90:f5:b8:e3:08:d1:54:6e:73:0b:76:6d:47:1a:b9:e4:
b0:0c:07:fd:43:e1:4f:14:4c:9c:83:85:21:88:47:d2:2e:a1:
54:a9:40:3e:ba:fd:2c:9b:d5:39:2e:de:57:2b:48:a5:38:34:
eb:95:f8:f4:ec:c7:ce:1f:5b:9f:91:95:da:85:c1:fd:f4:04:
f3:58:3a:32:8d:f8:78:f2:4d:82:8b:d1:12:61:68:e6:b2:b5:
a2:aa:ef:39:4f:16:df:e4:c3:58:f9:ed:98:6d:57:1d:73:93:
08:c3:a3:d9:a6:5e:71:99:bc:b4:a1:da:4f:d9:8c:3c:92:08:
dd:d5:48:0c:c6:82:13:dd:47:62:3a:86:b3:3d:b3:74:12:87:
0a:a1:18:4c:29:83:07:21:42:23:0f:38:9b:53:95:56:f4:ed:
2e:b7:7c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:25:02 2026 by rpki-client