Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pkZRlH6LpDyLpspSURqw7v1gi6U.roa
File: pkZRlH6LpDyLpspSURqw7v1gi6U.roa (raw, json)
Hash identifier: 4/w0FpDSVLnP7zpYnAi7YlhffT0fCOcTpubJgYcEHgE=
Subject key identifier: A6:46:51:94:7E:8B:A4:3C:8B:A6:CA:52:51:1A:B0:EE:FD:60:8B:A5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CDB95CA59EEEDA386211E2C96B90D2412
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pkZRlH6LpDyLpspSURqw7v1gi6U.roa
Signing time: Wed 11 Mar 2026 06:29:12 +0000
ROA not before: Wed 11 Mar 2026 06:29:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153786
IP address blocks: 151.243.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:db:95:ca:59:ee:ed:a3:86:21:1e:2c:96:b9:0d:24:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 11 06:29:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a64651947e8ba43c8ba6ca52511ab0eefd608ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:53:c7:5a:6b:ea:7c:29:4c:d8:85:04:34:54:
84:7e:1e:dd:2e:6a:11:9b:f9:36:11:0d:72:37:04:
f1:55:09:1e:71:b6:f8:c0:64:68:53:a8:e5:02:ea:
f2:b4:e1:6c:08:61:61:42:30:3f:83:67:73:9a:83:
5c:7e:7c:81:5a:92:89:3f:35:88:97:34:b0:a9:55:
0e:5a:9d:ed:aa:54:2b:91:dd:c7:6e:f7:5e:28:a6:
5d:b6:bf:28:82:33:05:67:66:ed:c9:1c:e4:71:a8:
fa:53:ed:be:60:b1:3f:4e:13:7f:40:46:67:bc:2c:
55:2d:3e:de:19:f8:15:31:21:41:15:cb:37:23:f4:
da:78:a9:ce:20:ff:b9:00:99:67:8a:a2:9f:b3:54:
60:3e:11:aa:25:cc:eb:dc:dd:d7:57:0e:d7:14:86:
d7:86:c6:a6:92:17:b4:af:59:19:dd:24:d4:e4:14:
50:e3:c2:a9:4a:73:7f:a1:a1:01:b9:e1:74:ed:26:
a9:9e:b0:39:db:14:07:69:2a:b8:82:d3:59:ad:a7:
8b:f5:84:bb:a3:a3:84:76:8e:1c:c9:a1:f8:50:9e:
5c:ef:7d:ed:17:1e:cd:44:c4:de:b6:73:cb:72:9e:
27:a5:9c:bd:9b:69:21:24:3b:66:d1:28:bc:b2:26:
1e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:46:51:94:7E:8B:A4:3C:8B:A6:CA:52:51:1A:B0:EE:FD:60:8B:A5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pkZRlH6LpDyLpspSURqw7v1gi6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.168.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:d2:7b:6f:df:23:d7:a3:95:f1:0e:48:d9:88:ba:8b:74:cf:
97:58:4d:58:48:40:62:92:27:f4:fa:8d:7d:a3:a8:8e:bf:b8:
15:5e:a1:4a:ba:a2:05:c9:fc:ab:8e:c3:ba:de:1d:69:8e:b8:
ca:8a:ab:79:42:a3:8d:41:e9:84:cd:22:26:1e:ae:90:af:2d:
37:20:0a:a4:d3:80:f4:86:87:00:5c:34:fe:15:a5:13:dc:f0:
8d:cf:11:24:76:34:d8:a2:03:af:88:a8:23:72:3e:15:ad:46:
b8:85:b5:02:62:cb:59:5e:56:df:88:0a:a6:15:a8:ff:9f:28:
c2:21:6c:d6:7e:6b:c6:58:cf:ac:09:a1:f9:bb:6c:0b:e5:70:
ad:39:28:2e:8e:59:cb:1e:00:11:11:7d:6f:10:1c:f2:22:10:
06:3c:49:a3:40:92:26:3a:9f:5c:7a:87:5b:6b:f0:ea:51:29:
66:c4:24:45:06:b7:34:0b:e5:44:eb:23:a4:f1:be:12:08:7e:
2b:91:a4:86:90:35:aa:48:1e:ff:e9:e0:3b:f2:90:0e:30:75:
67:d8:68:1c:b3:68:1f:98:47:15:39:0a:f5:d2:20:98:8d:be:
44:03:3e:72:37:7b:72:e3:b0:ac:24:ca:74:bc:72:7c:8d:45:
c3:d4:4c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:00:59 2026 by rpki-client