Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/o_FwM16aSTYHJEYPJGp-gO-cLk8.roa
File: o_FwM16aSTYHJEYPJGp-gO-cLk8.roa (raw, json)
Hash identifier: VqOlUlc7d7r8BOQhOAt9uWq/IKBIwvW5NjkTVTNCsT4=
Subject key identifier: A3:F1:70:33:5E:9A:49:36:07:24:46:0F:24:6A:7E:80:EF:9C:2E:4F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D0B3D7A9E13325ED1CF9C8D27DF3D82BF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/o_FwM16aSTYHJEYPJGp-gO-cLk8.roa
Signing time: Fri 20 Mar 2026 12:34:31 +0000
ROA not before: Fri 20 Mar 2026 12:34:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 151.244.38.0/24 maxlen: 24
151.244.52.0/24 maxlen: 24
151.244.221.0/24 maxlen: 24
151.244.238.0/24 maxlen: 24
151.247.91.0/24 maxlen: 24
151.247.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:3d:7a:9e:13:32:5e:d1:cf:9c:8d:27:df:3d:82:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 20 12:34:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3f170335e9a49360724460f246a7e80ef9c2e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:73:21:e6:b5:84:e3:8c:fe:39:7b:48:20:
bc:ce:d9:1f:23:f4:b8:68:d7:20:24:1c:13:06:c1:
c7:72:8b:6a:ff:f2:fb:e3:35:32:78:8f:7f:6a:27:
12:b3:3c:87:da:57:91:e3:d3:5e:c2:73:8f:ec:c7:
62:ba:0e:21:23:4f:6f:d9:19:a2:92:86:ff:79:36:
51:03:0e:d8:d5:f3:df:8f:d4:00:a6:7f:0e:f0:77:
12:70:de:76:a8:68:b2:c9:9b:06:ff:71:bf:37:b1:
81:0d:7a:30:91:e2:10:a5:f3:45:fa:fe:45:ad:48:
9b:39:bb:27:ce:f4:3b:47:89:9e:13:8d:e9:14:e0:
ea:63:4d:7d:74:6b:14:68:e3:8b:c0:00:b3:e2:1a:
78:b9:1e:63:db:61:01:20:70:61:be:09:ed:95:07:
49:86:38:43:9d:f1:e9:6f:7d:d5:49:39:34:d8:8d:
30:dd:55:13:67:85:5c:61:b9:de:58:04:b2:c9:60:
69:7f:0a:e9:54:a1:ec:3c:e8:8b:4a:e2:f0:62:c5:
a7:05:cd:0a:b6:84:55:f1:b2:91:68:f4:89:6f:63:
a9:71:ba:66:02:cc:5d:8e:03:58:39:ee:f4:41:67:
f9:f8:00:7e:f9:2b:64:90:cd:10:bd:dd:b5:3b:36:
e5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F1:70:33:5E:9A:49:36:07:24:46:0F:24:6A:7E:80:EF:9C:2E:4F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/o_FwM16aSTYHJEYPJGp-gO-cLk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.38.0/24
151.244.52.0/24
151.244.221.0/24
151.244.238.0/24
151.247.91.0/24
151.247.151.0/24
Signature Algorithm: sha256WithRSAEncryption
98:2c:f5:c7:61:02:5b:40:c2:34:71:bf:f5:9c:ec:33:47:a1:
12:da:be:4f:e2:94:26:83:42:ef:24:49:08:cb:d5:ae:e5:7f:
bc:f5:25:d7:fb:99:9d:bb:bd:a9:04:da:16:12:4d:1f:88:e4:
dc:30:0e:86:34:84:b2:d0:7a:ec:2d:49:7c:46:13:c6:dc:b1:
02:62:b9:60:9a:eb:0d:d3:be:48:b9:0d:25:09:68:fe:12:a7:
17:39:8c:6a:d7:e1:2e:1e:0b:e3:55:42:53:e1:98:c4:77:b6:
fa:6a:17:9b:0d:c4:f0:7b:c6:cb:c0:d3:c4:32:5e:8b:9f:a8:
36:3a:e7:09:f2:b2:41:69:fa:4d:93:50:f1:39:83:9e:6d:6b:
a7:35:58:1e:4e:5e:ea:79:fb:6b:07:de:98:b8:c3:f2:aa:fb:
b3:3b:19:3e:5b:b1:e2:dc:d3:4e:b8:d1:d0:4a:18:92:1a:67:
dd:9d:41:99:48:5a:ac:b5:24:31:31:d6:f8:e9:0c:47:4b:40:
e9:48:6e:56:be:fb:5f:07:d7:8f:d5:02:79:67:46:9e:c3:0f:
32:25:44:99:e5:c8:10:55:16:8f:42:24:ef:c6:af:0b:70:69:
b9:91:94:53:5f:ba:0e:98:21:d6:e6:0a:de:a4:f3:ef:16:53:
65:07:67:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:36:54 2026 by rpki-client