Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kMsSe810xrsrZ_EiKvHi1JmNTQM.roa
File: kMsSe810xrsrZ_EiKvHi1JmNTQM.roa (raw, json)
Hash identifier: t2Gm3tDOG8S1eODJChF2v79O44fCwfG0iRmI2ck0DrY=
Subject key identifier: 90:CB:12:7B:CD:74:C6:BB:2B:67:F1:22:2A:F1:E2:D4:99:8D:4D:03
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F45F2F6A6D429156526B398960BF02CA2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kMsSe810xrsrZ_EiKvHi1JmNTQM.roa
Signing time: Thu 09 Jul 2026 08:16:18 +0000
ROA not before: Thu 09 Jul 2026 08:16:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215607
IP address blocks: 151.243.32.0/24 maxlen: 24
151.243.223.0/24 maxlen: 24
151.245.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:f2:f6:a6:d4:29:15:65:26:b3:98:96:0b:f0:2c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 9 08:16:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=90cb127bcd74c6bb2b67f1222af1e2d4998d4d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4a:db:dd:67:a3:e3:f0:f7:2b:f9:8d:ca:ea:
94:92:2d:93:f8:ae:32:9c:b1:7e:14:19:53:91:18:
e2:98:aa:f3:4f:f7:93:c1:86:57:ed:ed:94:50:a4:
7b:fd:68:c8:2e:e0:0b:41:3f:69:fd:0c:4b:01:7c:
6a:06:9a:2d:06:8e:b5:51:ef:b1:ab:09:6c:3b:68:
8b:da:6b:59:68:e1:55:df:18:64:4c:81:ad:6a:9b:
d3:f6:6a:20:9f:0d:98:16:15:b5:88:63:9f:de:12:
c4:74:78:8c:84:54:3f:d3:7e:9a:78:06:26:29:3e:
c7:4a:9c:c0:ea:bb:01:41:dc:89:c8:2e:b2:87:71:
a4:13:5a:49:84:c8:38:23:d6:27:90:07:a9:90:7b:
6a:48:95:c0:f6:db:3f:12:dc:ca:87:23:6f:12:82:
ba:5b:8d:43:9d:8d:35:df:70:74:ef:c1:47:4e:dc:
0d:77:2b:c3:f5:61:11:da:a5:72:e8:61:5b:bb:53:
8c:22:33:5c:98:4e:ab:aa:41:cd:11:88:cf:81:4d:
8d:9e:59:88:59:ac:27:02:98:06:a1:40:f9:82:41:
80:1d:28:ad:f2:c7:3b:20:a8:21:90:27:21:de:cc:
61:98:53:9f:ca:9c:b0:10:81:d7:6d:64:43:f3:64:
53:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CB:12:7B:CD:74:C6:BB:2B:67:F1:22:2A:F1:E2:D4:99:8D:4D:03
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kMsSe810xrsrZ_EiKvHi1JmNTQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.32.0/24
151.243.223.0/24
151.245.165.0/24
Signature Algorithm: sha256WithRSAEncryption
06:af:fa:ff:9a:8d:ce:45:12:9e:66:2e:82:0d:a6:a5:fc:2b:
46:9e:d2:74:27:15:7a:cb:0f:d5:f4:d0:a7:ef:12:bb:1c:b2:
43:10:69:ec:50:89:a8:24:65:78:cb:1e:ed:0d:b4:a1:ad:6b:
e1:b7:e2:bd:fe:29:d1:20:d8:25:c6:d7:05:7f:5f:e0:06:c1:
89:e6:c5:ca:44:79:18:50:3a:ad:f5:72:b6:6d:e3:24:38:cb:
5d:fa:cf:4d:f3:a7:23:ee:62:6e:48:57:fc:11:1c:06:0d:47:
47:44:3d:27:6c:a0:ad:e9:9d:7b:65:07:22:ef:c2:80:0e:d5:
d5:39:c1:5b:c7:b7:d1:06:d3:95:84:ee:82:b9:d5:72:42:12:
a1:55:7d:6d:fb:32:01:d7:16:df:ef:25:50:d4:ae:f9:67:ce:
51:87:f1:4d:81:e3:c1:e8:07:7b:54:bf:72:df:51:61:71:ca:
9e:c0:c1:3e:e8:38:64:10:1f:44:9f:02:c6:71:fa:3b:ec:7b:
6d:28:74:c9:15:6d:5d:6f:2a:19:5a:0a:5b:79:b6:67:43:c4:
e2:a1:c5:20:4e:04:24:ff:5b:1b:9e:8d:5b:98:f9:8a:ff:e5:
c4:5a:fd:eb:33:4d:95:27:4d:31:67:be:1b:08:fb:dd:c4:09:
a8:cd:e8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:54 2026 by rpki-client