Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mDsZJRM3RHdzNX6fUiJ7VFJDjqQ.roa
File: mDsZJRM3RHdzNX6fUiJ7VFJDjqQ.roa (raw, json)
Hash identifier: g7oG9FsxPqY8NtGVIx3FcFy7cTafxqgZEkae3f56HCM=
Subject key identifier: 98:3B:19:25:13:37:44:77:73:35:7E:9F:52:22:7B:54:52:43:8E:A4
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E17CE03C16731A499CA3FD12E0C8064B3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mDsZJRM3RHdzNX6fUiJ7VFJDjqQ.roa
Signing time: Mon 11 May 2026 16:10:37 +0000
ROA not before: Mon 11 May 2026 16:10:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26769
IP address blocks: 151.240.26.0/24 maxlen: 24
151.244.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:17:ce:03:c1:67:31:a4:99:ca:3f:d1:2e:0c:80:64:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 11 16:10:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=983b19251337447773357e9f52227b5452438ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4e:70:c4:f3:1d:42:e7:73:f3:65:54:95:b5:
f4:c2:12:61:c1:ea:84:e3:b0:d3:76:77:61:57:27:
ae:b7:22:14:d2:e5:97:9e:4c:bc:a8:78:ad:3b:62:
84:dd:07:b1:03:d1:f2:b7:34:52:1a:cc:5d:43:1b:
1f:7d:48:d0:b4:32:7e:4e:1c:f9:ca:52:4c:a7:6b:
9b:09:91:76:93:5b:83:15:b5:71:ee:13:be:ca:55:
be:1d:8d:61:01:0d:b2:bf:6d:db:65:2a:78:8b:21:
0c:1d:70:a7:d8:9f:81:2a:d1:20:ce:fe:42:bd:e9:
74:a8:46:6f:af:8a:eb:16:24:ad:3e:9b:5f:1e:49:
bf:d7:22:61:c4:e6:d5:51:5e:38:bd:7c:84:89:d9:
4e:e5:a7:c9:e1:97:9f:b4:d8:20:0f:99:26:75:2d:
f2:84:dd:ec:82:0e:d7:5b:6a:6a:65:af:fa:b7:09:
83:85:28:ec:3f:13:c8:ea:a7:6b:17:64:cc:93:cd:
ea:1e:71:5d:a9:49:2f:65:06:c5:76:22:85:db:15:
88:61:cc:34:46:62:cb:b4:5c:8f:7c:08:00:09:d1:
da:85:34:47:f1:73:e2:56:3c:4b:0e:d8:ba:98:1e:
96:7f:00:99:18:0d:f7:ef:97:84:44:de:aa:dc:f6:
65:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3B:19:25:13:37:44:77:73:35:7E:9F:52:22:7B:54:52:43:8E:A4
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mDsZJRM3RHdzNX6fUiJ7VFJDjqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.26.0/24
151.244.133.0/24
Signature Algorithm: sha256WithRSAEncryption
83:a7:32:f6:ee:7d:fa:39:28:d9:03:05:de:98:f5:54:a8:4c:
60:a7:75:8c:4c:ff:11:0f:4b:57:8a:83:90:84:73:fb:02:47:
ac:ce:dc:d7:73:dd:20:44:17:76:6e:03:48:a3:0c:87:b9:7f:
c7:69:55:ad:f3:e3:2c:a9:1f:20:41:9f:a7:d6:49:01:f4:a4:
4d:55:da:21:50:ec:0b:20:9e:d9:b5:fb:38:e1:32:36:8e:4c:
66:ca:66:8b:4f:91:40:1a:a9:07:9b:78:96:a5:f1:1a:5c:d4:
4f:90:38:38:6c:b3:f9:44:ef:b8:9b:5e:0b:f5:69:38:c3:e3:
a6:ff:02:37:84:fc:e7:42:ca:d0:ec:7c:d7:f4:67:78:a2:2c:
88:01:c0:77:4c:f9:20:a6:05:3b:40:58:a7:6e:4b:45:35:9a:
d3:75:3f:75:71:da:8c:2b:95:25:71:15:a3:c4:6b:fc:ea:50:
bb:12:74:ba:8e:cb:51:21:03:f6:97:ea:37:52:5d:a7:85:08:
d0:27:91:6b:f6:86:1a:e7:1b:0f:c5:03:15:8a:ad:1e:db:ee:
5f:ab:aa:1b:ec:c7:82:61:4c:ac:ed:c1:8a:20:e1:1d:3f:78:
7b:bf:b5:b5:dd:e3:29:36:ba:57:97:ad:15:8c:77:fe:ab:45:
33:5a:64:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:13 2026 by rpki-client