Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Q8qrQDfGFVH3pu8x-salAsL5djE.roa
File: Q8qrQDfGFVH3pu8x-salAsL5djE.roa (raw, json)
Hash identifier: I9fT3Vnhm+jwNnmwYHOXG4KCaZ8gfu0sQGPK4l2Is1A=
Subject key identifier: 43:CA:AB:40:37:C6:15:51:F7:A6:EF:31:FA:C6:A5:02:C2:F9:76:31
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D1A39877430F29CD9CDCAC08F7E9617C0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Q8qrQDfGFVH3pu8x-salAsL5djE.roa
Signing time: Mon 23 Mar 2026 10:24:30 +0000
ROA not before: Mon 23 Mar 2026 10:24:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202651
IP address blocks: 151.246.136.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:39:87:74:30:f2:9c:d9:cd:ca:c0:8f:7e:96:17:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 23 10:24:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43caab4037c61551f7a6ef31fac6a502c2f97631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:1e:a0:19:6e:be:86:26:a8:22:a4:af:c4:
27:34:62:36:fc:6f:f0:7f:b2:53:06:92:55:02:bf:
b5:8a:9d:c6:d7:0f:30:30:52:da:2b:e4:ce:7a:b9:
ee:a9:65:6e:8c:84:5a:6f:2e:8d:c5:c2:71:a4:04:
33:8b:02:6c:31:b5:f9:36:75:a9:f9:bf:e2:e0:87:
3a:cf:f1:10:47:f5:cc:4e:f7:98:39:9e:02:27:1a:
31:28:04:ea:f0:01:50:9e:87:63:ab:e2:7c:79:5c:
15:78:28:fd:59:c7:68:b1:a2:a2:0e:e2:39:cc:6e:
c1:e1:57:f1:fd:49:fa:f7:0f:9d:56:c3:2c:24:7a:
45:07:34:54:c2:bf:f9:81:21:2e:6d:bf:7b:05:57:
1b:06:6f:42:bb:46:25:b3:e4:e4:59:00:a0:3a:b0:
37:eb:1a:cd:9a:c8:5b:2b:ef:26:0e:c8:0b:10:44:
db:55:ad:ae:ab:2a:10:5e:32:75:2a:e8:98:5f:32:
4b:7f:b1:50:f4:68:a9:d7:98:16:9c:25:f6:69:35:
28:98:25:7e:e1:90:bb:dd:37:3c:6f:d2:e1:1c:60:
8f:f9:31:d6:03:bc:75:c7:3f:0f:8a:9f:1f:7a:3a:
f2:4e:2f:6b:1c:05:02:a5:e4:22:df:fe:db:b7:62:
d8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CA:AB:40:37:C6:15:51:F7:A6:EF:31:FA:C6:A5:02:C2:F9:76:31
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Q8qrQDfGFVH3pu8x-salAsL5djE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.136.0/21
Signature Algorithm: sha256WithRSAEncryption
08:f2:7a:e2:cf:e4:0a:54:39:f5:af:25:ff:73:8e:2b:68:ba:
67:c5:ca:a7:65:4a:6e:d6:42:98:0d:b7:75:3f:5e:35:21:a4:
b7:41:c4:ec:5a:8f:64:ec:e0:32:32:3b:27:ae:df:6f:06:b3:
68:d6:11:83:25:6a:d0:ad:ad:96:85:4f:59:7c:69:a0:df:f7:
39:dc:5f:d6:c1:c9:c9:50:18:7d:ee:88:cc:9f:23:25:b3:67:
bc:bf:39:b7:94:ea:9b:b8:67:a0:b9:fc:19:fa:7c:f0:77:21:
3d:4b:44:72:f6:1d:fc:ea:2e:f9:d4:83:f2:9d:db:00:ed:72:
ef:3e:f2:73:43:3d:15:98:14:ae:7a:4e:d6:f4:0f:8c:01:22:
f8:e9:ad:c9:fa:d3:eb:f0:15:a6:66:a4:1c:56:79:da:4a:ab:
61:60:c6:f7:74:36:11:7c:e8:59:09:20:c3:43:2d:bc:3e:b1:
c0:2a:dc:ba:06:b4:a1:d1:01:14:96:4a:7c:86:7b:2a:8c:0f:
07:bc:4f:89:79:a7:09:f4:3d:9b:a5:97:61:83:01:5a:b1:d0:
ae:c7:00:67:20:d6:23:af:52:78:51:05:15:af:96:92:d4:4b:
96:7b:8c:bf:18:11:c2:b9:c2:e2:53:39:9d:e4:95:6f:1c:19:
f5:8c:46:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:38:46 2026 by rpki-client