Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bwkuPYNJrUcybV3toPquG2NNSN8.roa
File: bwkuPYNJrUcybV3toPquG2NNSN8.roa (raw, json)
Hash identifier: h9L5sTliZLW/YmwVdFSaJsfEkroM4kW3nyatCnno8qU=
Subject key identifier: 6F:09:2E:3D:83:49:AD:47:32:6D:5D:ED:A0:FA:AE:1B:63:4D:48:DF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0C95CFAA26E5875C26DD0FCE7B54B942B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bwkuPYNJrUcybV3toPquG2NNSN8.roa
Signing time: Tue 22 Sep 2026 13:45:08 +0000
ROA not before: Tue 22 Sep 2026 13:45:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 151.242.185.0/24 maxlen: 24
151.244.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:5c:fa:a2:6e:58:75:c2:6d:d0:fc:e7:b5:4b:94:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 22 13:45:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f092e3d8349ad47326d5deda0faae1b634d48df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:08:6b:da:23:fe:8b:ea:99:33:97:05:cc:e1:
71:80:3f:e4:fc:32:49:37:29:0f:82:a8:d5:e2:01:
d6:32:ff:02:d5:b1:3c:11:96:52:0e:a4:31:d3:15:
4c:4d:59:90:2b:e2:34:72:a0:22:db:0b:ab:d6:b2:
fb:da:84:7e:73:27:8a:fd:ac:ef:9f:84:e7:e1:e8:
93:07:45:56:85:4e:b5:7c:23:0d:43:a9:a5:4c:5d:
82:8b:b9:37:d6:cb:c2:b6:7f:d1:06:4f:a7:35:08:
79:90:27:7c:70:6a:96:a1:63:f7:0d:36:8e:32:a8:
b4:6e:b8:9a:8b:31:18:98:47:dd:cf:23:42:f4:c6:
11:49:87:6b:cf:4b:92:01:d1:b6:fd:c4:8b:e8:82:
1b:b9:d7:8c:90:1b:a1:36:14:43:17:c4:3f:53:59:
dc:b3:cc:a6:49:cc:64:47:e6:3b:b6:ca:97:5f:63:
3c:37:f8:0f:ce:3c:42:54:9f:29:df:3a:ed:a5:f3:
e3:2b:3b:57:0b:a4:52:2c:8b:6a:50:b2:35:f2:a7:
b4:24:fd:65:fd:cf:84:46:a1:72:f5:46:dd:b4:39:
67:eb:7f:40:3b:a5:a4:1d:ff:09:b2:05:e5:e0:66:
5c:91:96:03:40:b3:24:81:f2:2a:fb:d2:37:0b:85:
cd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:09:2E:3D:83:49:AD:47:32:6D:5D:ED:A0:FA:AE:1B:63:4D:48:DF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bwkuPYNJrUcybV3toPquG2NNSN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.185.0/24
151.244.138.0/24
Signature Algorithm: sha256WithRSAEncryption
17:fb:c5:6a:56:da:e7:46:c7:33:66:75:25:da:83:d1:12:84:
05:fb:aa:e2:85:fa:9b:f2:75:f3:43:b9:c0:54:1b:6e:59:73:
19:94:29:e7:83:55:fd:45:ea:2d:29:fa:a4:5a:73:28:5d:05:
38:c8:df:a6:8b:cf:cd:6e:00:90:35:4f:1e:06:1e:1a:85:29:
10:17:7a:8c:79:1b:71:69:1f:6b:ca:b5:34:44:50:cc:af:c4:
49:49:f8:3a:ff:2c:f5:3a:9e:8c:18:e5:2b:cb:1a:65:93:17:
01:a1:60:06:aa:10:ad:11:35:16:2c:9c:9e:8e:d7:b2:b5:7c:
c0:f4:5f:06:f3:a1:6d:72:7d:1a:83:7a:09:30:0f:76:82:cc:
fc:59:f4:eb:7e:8f:fa:2e:7d:94:14:3f:7d:66:f0:82:d6:3a:
b5:50:58:8c:d5:5c:93:4f:0d:52:5d:1a:9b:48:76:7d:2c:72:
06:f4:53:8e:d8:ac:e7:9a:3b:5b:48:4c:a0:21:ad:21:d4:e6:
fd:49:b7:b3:b5:2f:37:29:88:ae:1f:a5:21:37:f1:c5:66:59:
2b:b6:93:56:8e:7d:b3:ee:03:42:88:37:7f:a3:fa:61:2f:2e:
da:69:7b:1e:69:6a:4f:6d:96:a0:1b:b7:2b:32:5e:b6:96:97:
ce:28:2e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:14:45 2026 by rpki-client