Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kBLxxipXHpZB8PgOsurRifkT9p8.roa
File: kBLxxipXHpZB8PgOsurRifkT9p8.roa (raw, json)
Hash identifier: Jr4LSO/K7wXh7dTSIMJI636KfI9W9vruLi9F9VioXOY=
Subject key identifier: 90:12:F1:C6:2A:57:1E:96:41:F0:F8:0E:B2:EA:D1:89:F9:13:F6:9F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D28E3558EA50A114C8A676B35621845B4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kBLxxipXHpZB8PgOsurRifkT9p8.roa
Signing time: Thu 26 Mar 2026 06:44:40 +0000
ROA not before: Thu 26 Mar 2026 06:44:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150293
IP address blocks: 151.243.165.0/24 maxlen: 24
151.243.166.0/24 maxlen: 24
151.247.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:e3:55:8e:a5:0a:11:4c:8a:67:6b:35:62:18:45:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 26 06:44:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9012f1c62a571e9641f0f80eb2ead189f913f69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e4:45:4d:66:73:da:aa:81:89:f9:68:66:0e:
72:52:9c:c9:74:9b:e5:48:4e:f6:8b:4c:96:86:10:
51:60:d2:46:1f:18:11:de:25:80:d1:6a:da:13:44:
bf:e6:83:8a:67:ef:50:26:79:a4:7e:4b:4d:de:98:
65:11:78:df:09:f5:1b:4c:bd:24:d7:79:da:a8:89:
bb:97:99:67:10:17:9e:a9:29:2b:7e:01:a0:6a:8a:
66:2f:fd:91:e1:bd:1e:63:79:c7:29:ac:02:4f:cf:
79:5d:04:98:5a:ce:52:63:eb:81:f2:7d:03:50:96:
3d:a7:4f:2e:f9:d6:28:fa:79:ee:6c:1d:8b:e6:8a:
33:1c:e5:1f:49:33:5b:98:91:21:9e:eb:ae:3c:e0:
bc:17:52:7c:d7:37:ee:69:4b:44:31:14:16:84:75:
10:6a:c6:75:3d:78:66:d2:34:f3:67:ef:44:1b:d9:
d6:bd:fa:71:05:67:06:af:0c:52:6a:25:61:ea:13:
fb:57:b3:cf:7d:f3:89:33:f7:33:f0:67:bb:36:b9:
52:f5:45:1b:10:64:44:ba:76:fb:7d:62:f0:9f:5b:
e6:6e:14:d0:7b:b2:ea:a9:59:7b:c8:88:20:89:a0:
7a:fa:f3:bc:81:93:6d:ff:80:92:c9:20:72:d3:54:
cc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:12:F1:C6:2A:57:1E:96:41:F0:F8:0E:B2:EA:D1:89:F9:13:F6:9F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kBLxxipXHpZB8PgOsurRifkT9p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.165.0-151.243.166.255
151.247.136.0/24
Signature Algorithm: sha256WithRSAEncryption
09:34:c3:64:1c:17:2d:6f:52:de:82:17:93:be:f7:d7:d0:e8:
19:73:ef:00:78:c3:fe:e5:47:5d:37:79:64:06:5b:ce:67:7e:
60:af:3a:4f:8a:9e:ab:29:b8:62:75:d0:82:1f:c4:74:de:04:
14:d7:14:32:ec:2e:4f:d0:fa:21:1d:4d:bf:a7:a8:23:0b:08:
1b:40:64:1c:71:59:89:84:f7:fe:4a:5b:7f:96:72:e1:67:56:
2a:70:11:86:1e:62:31:f2:d7:bb:7b:6d:61:53:c0:0c:09:99:
4b:e3:c7:e5:24:1b:f8:4f:b7:5d:d5:50:ac:3e:64:f7:6b:f6:
24:d1:20:c4:9b:c8:69:df:f1:64:32:6a:8c:96:7c:a6:d3:8c:
d9:28:27:69:9c:f4:0d:95:88:b4:ad:93:a3:01:14:a4:1f:82:
c7:21:7d:ef:87:6d:a0:1c:f3:e9:52:46:18:2e:2b:7d:d4:8a:
28:60:8d:ed:9f:ee:8c:9d:77:3f:fa:c9:ab:11:60:4e:9e:5e:
04:0d:16:aa:e0:41:6f:7b:7b:61:43:5b:ea:12:85:58:19:c8:
ca:31:a2:fc:11:9c:73:8d:75:79:c1:28:7b:eb:21:08:84:1d:
83:9c:c9:98:36:ea:e3:3c:a1:16:09:c1:a0:25:16:2d:a5:6d:
c3:e7:4a:65
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:36:21 2026 by rpki-client