Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UUO08uga1j9uqXnIJDoEsScValk.roa
File: UUO08uga1j9uqXnIJDoEsScValk.roa (raw, json)
Hash identifier: VTU6o5kfKrW+2kEO7FtNG+OtkJnzKvyYLnsn+iXxg4M=
Subject key identifier: 51:43:B4:F2:E8:1A:D6:3F:6E:A9:79:C8:24:3A:04:B1:27:15:6A:59
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DCF7695467F8D999036052116DF099AD3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UUO08uga1j9uqXnIJDoEsScValk.roa
Signing time: Mon 27 Apr 2026 15:02:28 +0000
ROA not before: Mon 27 Apr 2026 15:02:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210554
IP address blocks: 151.243.24.0/24 maxlen: 24
151.244.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:76:95:46:7f:8d:99:90:36:05:21:16:df:09:9a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 27 15:02:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5143b4f2e81ad63f6ea979c8243a04b127156a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:60:06:b4:e4:49:f7:e7:2a:4b:08:c3:fa:9b:
7e:7e:b1:e9:19:e8:5e:d0:1c:3d:8f:34:fa:4a:86:
2f:0c:a7:cb:e7:62:52:58:fd:a0:23:2e:a9:b2:d3:
0f:2e:fc:1a:cf:d9:34:2f:a2:b6:0b:d8:d2:90:71:
86:9b:db:19:67:7e:bf:f6:cc:10:2d:e5:54:21:cb:
ac:e7:4a:e4:30:5c:4a:cc:19:dc:de:ca:94:cd:1a:
48:a3:57:8f:b1:88:cf:8a:0c:3e:17:b9:ad:44:93:
bc:99:fc:8a:87:95:2e:ff:6a:de:be:42:b1:02:da:
49:b3:b0:6d:af:b5:ff:ed:45:a1:dd:6f:a1:0f:bc:
8d:bf:d4:c2:73:ef:5f:4b:d9:e7:f6:a5:bd:b0:72:
b8:99:a0:08:42:26:ab:8b:62:bc:7c:77:2f:91:db:
ea:f4:fd:a0:9e:a6:e5:d4:7f:84:55:2f:cc:e1:80:
60:3c:18:12:d9:e3:47:71:67:2d:90:41:8d:5f:52:
48:6a:79:51:07:ac:83:53:40:74:24:79:ea:e2:39:
be:35:b6:b4:fc:85:f5:79:76:0f:c1:87:dd:f8:4e:
71:b9:cf:25:61:fa:40:41:52:1b:4d:a0:bc:be:33:
db:5a:a3:c6:9c:89:14:c7:13:4f:f9:c0:e5:fc:63:
69:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:43:B4:F2:E8:1A:D6:3F:6E:A9:79:C8:24:3A:04:B1:27:15:6A:59
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UUO08uga1j9uqXnIJDoEsScValk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.24.0/24
151.244.40.0/24
Signature Algorithm: sha256WithRSAEncryption
68:7a:aa:50:82:c4:b5:53:18:ec:36:c4:be:bd:a2:25:55:47:
3c:05:04:1d:be:10:9b:57:b6:7f:93:f2:f2:82:aa:7d:3a:31:
5f:4c:23:92:a6:de:fc:94:b7:48:b5:cc:80:dd:1d:2a:ec:3c:
f9:0e:c2:5f:e7:09:df:8a:a0:f4:85:3a:c4:04:69:8a:5a:b4:
6b:1f:9a:22:84:8c:c9:2f:5e:98:b3:5f:f8:d8:24:d7:0c:6d:
d7:d7:19:6d:c2:3a:53:aa:bd:d3:d3:fa:7a:21:56:66:a3:b9:
42:f2:b0:b8:f8:88:f2:04:f5:a4:62:f5:6e:b3:58:99:f9:5f:
aa:e4:0e:e1:9f:8a:77:41:56:58:7f:4a:6e:a9:63:14:66:5d:
02:7c:17:a7:53:27:69:07:69:7a:25:bd:f1:ce:71:b5:97:ba:
af:c3:26:90:4d:f6:c3:d8:fa:da:79:d6:c6:6d:e9:ce:92:5b:
ea:e6:ac:a3:3d:c0:3a:d5:48:4e:d2:b6:73:66:fd:b3:e4:37:
0b:fd:f1:75:8d:e1:18:af:76:ec:7b:24:f0:5b:3d:cc:9b:f2:
54:45:5b:a7:da:48:36:81:fe:27:84:9f:98:f4:c7:ca:49:87:
04:1c:06:8d:61:cf:2c:f0:20:bc:15:31:3d:0e:9d:e7:26:c5:
6c:ed:5f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:45:54 2026 by rpki-client