Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tGN0SctOMvNAv9Fc9aO6ZOsYYb4.roa
File: tGN0SctOMvNAv9Fc9aO6ZOsYYb4.roa (raw, json)
Hash identifier: /jjXcv0cSYOqMV9wxe2he16W7H9qQtVElt3N5PYO5Ww=
Subject key identifier: B4:63:74:49:CB:4E:32:F3:40:BF:D1:5C:F5:A3:BA:64:EB:18:61:BE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DE21C7B3533297680E548C74095DE6065
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tGN0SctOMvNAv9Fc9aO6ZOsYYb4.roa
Signing time: Fri 01 May 2026 05:56:50 +0000
ROA not before: Fri 01 May 2026 05:56:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51847
IP address blocks: 151.242.66.0/23 maxlen: 24
151.243.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:04:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e2:1c:7b:35:33:29:76:80:e5:48:c7:40:95:de:60:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 1 05:56:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4637449cb4e32f340bfd15cf5a3ba64eb1861be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cb:c9:f5:8c:3e:65:a3:e3:fd:2b:ff:cf:fd:
6d:b6:f4:12:d3:1f:54:65:68:3a:9c:96:fe:22:3f:
a5:5e:97:dd:48:57:1c:a4:c1:ae:39:54:3d:9d:33:
a0:1b:fc:33:57:f5:16:e5:4b:02:18:8c:bd:f6:dc:
81:3f:de:99:ef:85:d3:3c:71:44:1c:04:c2:aa:39:
54:1d:37:48:5a:c6:8a:84:95:70:e0:20:14:37:d2:
49:9b:40:af:5f:f2:bf:b7:96:3c:59:4a:0a:6c:a7:
7e:70:c2:ad:70:29:bf:4d:c5:c2:f4:6b:98:80:72:
71:2a:88:87:d2:27:ef:e4:2f:eb:1c:75:3f:df:3f:
24:99:e5:c8:73:a7:cd:54:ab:d6:11:fa:da:36:ba:
4a:b8:f4:a3:ee:80:84:b0:f3:a8:6c:00:19:f2:e5:
1a:38:b1:e9:6a:60:25:5e:6f:84:07:6e:03:e9:db:
e8:9d:d3:3e:84:d1:d9:d6:e2:ea:61:0e:eb:1e:ac:
b4:4f:0e:c1:3a:f9:55:51:0c:82:62:a7:18:85:2d:
dd:e1:9d:47:4e:6a:aa:ab:c7:d8:e4:41:af:b8:15:
54:23:f1:cb:2a:da:33:44:51:dc:f0:73:3d:52:fb:
32:3d:1b:a6:33:a6:b6:b1:20:19:57:50:c0:dd:64:
27:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:63:74:49:CB:4E:32:F3:40:BF:D1:5C:F5:A3:BA:64:EB:18:61:BE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tGN0SctOMvNAv9Fc9aO6ZOsYYb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.66.0/23
151.243.20.0/24
Signature Algorithm: sha256WithRSAEncryption
55:c6:47:96:0a:62:80:c9:d5:e2:37:15:ab:e0:d9:d8:23:b3:
bc:86:0d:56:a9:3a:e7:1d:e7:21:c8:17:4d:90:00:55:e9:f1:
df:fe:5a:89:45:82:20:78:02:58:05:ff:b5:68:45:e1:67:a0:
53:b2:1b:73:47:5f:05:10:27:0b:2a:63:b7:d0:48:de:34:a8:
cb:c9:88:c4:54:8d:12:c3:e2:8e:0f:95:3e:39:07:ee:7b:2b:
4d:89:c2:85:38:99:28:88:d5:01:4a:5f:22:0e:e5:d4:d3:f0:
15:ad:e5:a7:c8:a3:7a:32:56:32:31:5a:12:01:34:ed:9b:62:
c9:9c:82:ff:76:63:c7:91:61:e2:82:56:a3:be:82:ca:83:14:
69:a9:df:f8:6b:57:72:6e:72:5b:5a:cb:cd:c9:1a:ae:a6:a0:
7e:da:a9:ae:29:5a:f9:6a:74:70:c2:f6:9f:63:69:26:94:80:
57:ef:06:aa:45:88:d4:e2:b6:77:d7:4b:fb:c0:b4:55:72:cd:
5d:fb:69:1f:c9:35:28:77:4a:d7:13:58:47:ac:4f:e2:6d:f3:
70:a0:c8:2a:c9:92:20:be:11:d9:fa:82:d4:71:48:18:be:6c:
02:9c:d7:ec:4d:ea:b6:a3:ec:88:11:bc:a5:4b:89:0a:13:82:
6e:ec:ab:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:13:39 2026 by rpki-client