Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TOWU27bri9CpIn0H1SHOsmbuRp0.roa
File: TOWU27bri9CpIn0H1SHOsmbuRp0.roa (raw, json)
Hash identifier: iZOXE7GdhYt/NFPyxNDrY/yc+To1doH9U9QGULE5hNM=
Subject key identifier: 4C:E5:94:DB:B6:EB:8B:D0:A9:22:7D:07:D5:21:CE:B2:66:EE:46:9D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D00752814CEBB7B48D25B7170AD1296D7
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TOWU27bri9CpIn0H1SHOsmbuRp0.roa
Signing time: Wed 18 Mar 2026 10:19:31 +0000
ROA not before: Wed 18 Mar 2026 10:19:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402203
IP address blocks: 151.243.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:75:28:14:ce:bb:7b:48:d2:5b:71:70:ad:12:96:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 18 10:19:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ce594dbb6eb8bd0a9227d07d521ceb266ee469d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:17:37:7d:49:59:a4:ce:b9:4e:c3:99:57:4e:
dc:48:d4:60:69:57:89:e5:90:ff:78:8e:88:8a:34:
f9:f8:3f:55:62:33:e9:3c:15:c8:12:13:8f:40:ab:
07:ac:62:d5:1a:46:d4:31:51:d4:b7:c7:2c:44:3d:
e8:c8:c7:eb:41:48:2c:aa:ad:ac:ca:d7:fa:88:ed:
12:12:2e:75:5a:60:3f:74:cb:59:d2:4b:6a:4b:85:
77:b7:21:a0:52:40:71:43:11:fb:34:da:5c:76:84:
33:8c:fe:96:9a:7a:70:12:16:60:8a:d1:6a:83:c1:
f8:ab:2b:b6:f8:d6:26:6b:5e:ab:54:33:a0:24:23:
c4:1a:e7:f5:5b:b1:a7:87:10:7a:d3:89:73:04:0c:
dd:e1:38:26:8d:c1:95:37:7a:a3:45:3a:e3:8d:48:
47:07:b6:99:82:68:33:34:20:8a:9c:c8:90:56:5b:
28:a7:6a:42:3d:65:9e:b7:ec:50:3c:ee:e8:94:39:
51:5a:47:12:9d:6d:64:93:db:6e:cb:8b:e2:ef:59:
84:36:75:ac:af:0b:48:9a:24:18:8c:ae:d9:dd:f9:
b3:4b:17:c1:4c:eb:e1:c9:cc:ef:b2:6d:f6:7c:83:
2a:6c:bf:cf:f1:33:20:54:af:e8:0b:16:4b:9d:c1:
1b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E5:94:DB:B6:EB:8B:D0:A9:22:7D:07:D5:21:CE:B2:66:EE:46:9D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TOWU27bri9CpIn0H1SHOsmbuRp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.19.0/24
Signature Algorithm: sha256WithRSAEncryption
99:06:07:f2:b7:95:85:25:4e:e9:e4:69:dd:20:d9:3e:ac:f2:
7b:ad:15:16:fb:6d:d4:0b:88:4d:27:0e:20:78:cc:5c:e8:41:
41:dc:48:0f:0d:17:43:ce:6b:0e:71:1d:2e:e0:b6:8d:6f:d1:
42:7d:87:09:1a:20:57:70:75:2e:8e:75:1b:a7:37:be:88:da:
8d:b0:64:16:51:53:b9:d8:4e:17:87:cd:37:50:99:34:e0:c6:
91:d2:66:f4:b5:79:f1:f2:3e:59:14:ba:16:83:09:60:92:95:
e3:04:ab:52:cf:1a:50:e4:63:91:0f:82:f6:dc:33:5d:3d:0a:
ad:46:4f:b3:24:b2:0f:93:97:20:c7:f0:73:9e:d0:08:cf:29:
71:0e:9e:a0:d0:74:f9:b3:69:ff:0c:a6:82:8f:df:48:13:37:
31:99:05:b0:61:0d:da:fa:02:cb:84:b5:ba:5b:95:cd:43:fd:
e1:8f:fe:4d:53:3d:85:72:c2:89:8f:f0:20:55:cf:12:93:ed:
a4:b0:83:65:3c:69:d3:24:f0:f0:3c:73:0c:ae:61:1a:21:3f:
dc:c1:88:e8:3e:79:bc:72:8c:39:de:0a:51:fe:ef:9d:a4:f1:
c0:0e:37:37:8f:02:38:d7:a5:52:03:55:7c:de:16:63:76:21:
0d:ed:b5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:26:36 2026 by rpki-client