Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/w8uNBk7vaXdBFQkrPt_7P-cZosc.roa
File: w8uNBk7vaXdBFQkrPt_7P-cZosc.roa (raw, json)
Hash identifier: o5PYNYP4M9FRzPc3Va/9FGmSc081b5xeHTA3hnJh27w=
Subject key identifier: C3:CB:8D:06:4E:EF:69:77:41:15:09:2B:3E:DF:FB:3F:E7:19:A2:C7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DD401A66125F58B614B0031EF3D8DE6A9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/w8uNBk7vaXdBFQkrPt_7P-cZosc.roa
Signing time: Tue 28 Apr 2026 12:12:50 +0000
ROA not before: Tue 28 Apr 2026 12:12:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213659
IP address blocks: 151.245.160.0/24 maxlen: 24
151.246.240.0/24 maxlen: 24
151.247.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:01:a6:61:25:f5:8b:61:4b:00:31:ef:3d:8d:e6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 28 12:12:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3cb8d064eef69774115092b3edffb3fe719a2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:04:9a:56:14:d2:5a:fd:b1:7e:f8:13:94:
e8:ab:e2:8e:51:f5:39:24:5b:3b:74:44:7d:b7:53:
5f:4d:1d:1e:a4:65:4e:61:f0:c2:ad:c5:5a:98:f9:
0e:e6:b9:f3:ee:0c:56:3f:0b:27:6e:5e:34:21:30:
49:bd:f5:b8:04:6a:f1:f4:33:89:38:6a:26:d8:9b:
a5:41:dd:66:9b:f5:e1:30:f8:8a:a8:17:2a:77:b1:
25:f4:a8:5c:ae:5f:40:20:cd:e2:df:ca:05:62:ab:
92:22:26:c0:68:63:a6:4c:45:15:e9:43:15:0c:44:
76:84:bb:5b:cf:79:c7:ed:81:21:e9:94:10:db:ba:
4f:38:54:d6:f0:08:ae:83:80:57:41:04:30:bf:ab:
b1:6f:fd:ba:05:49:c3:b7:26:50:23:69:51:fd:49:
25:39:77:60:b2:0e:43:9a:aa:8e:02:bd:d6:01:4e:
d6:7d:56:b3:46:7e:34:66:b5:c8:9d:df:e2:46:03:
d7:d3:30:3c:79:08:82:67:8e:67:21:f3:37:54:c7:
93:2e:fd:8b:a8:85:1f:7d:18:58:0f:7c:c7:97:28:
38:7b:78:0e:75:cd:cc:ff:5a:d3:f0:f7:96:6d:e6:
82:ad:0c:61:ff:17:8b:0b:50:d5:06:cc:c6:bd:9b:
b1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CB:8D:06:4E:EF:69:77:41:15:09:2B:3E:DF:FB:3F:E7:19:A2:C7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/w8uNBk7vaXdBFQkrPt_7P-cZosc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.160.0/24
151.246.240.0/24
151.247.115.0/24
Signature Algorithm: sha256WithRSAEncryption
37:65:ef:db:d4:7b:98:5a:36:d7:ff:b0:a7:62:1d:ac:cc:52:
b7:1b:d7:01:cf:f2:6f:01:a6:08:99:9f:45:0c:4e:52:05:46:
29:e5:9e:99:54:9a:ea:3d:6c:3c:da:6d:aa:26:9b:16:ca:11:
81:04:9c:49:cb:5b:7d:48:e5:4b:a2:8f:af:41:e8:ba:75:a6:
75:f5:a1:f8:8b:f3:88:2b:9b:67:c1:61:47:d7:1c:dc:cf:1d:
57:c3:39:af:9d:0c:b2:f2:ea:29:3a:dd:12:9a:63:d2:e1:10:
7e:97:3e:c7:91:be:5c:6f:40:dc:96:89:2a:a2:bd:12:60:9c:
9a:72:f8:35:94:15:b7:18:78:36:c7:c4:7b:90:dd:90:d4:61:
ea:d3:5f:2e:c2:69:f6:1b:65:32:20:1a:d8:5c:34:df:b3:28:
10:30:65:66:19:d9:e6:de:c0:9f:e9:30:70:54:1c:85:83:79:
fb:d2:6b:9d:08:bf:3a:2b:dd:92:69:53:d5:52:ac:34:1f:6d:
c9:34:68:aa:9a:ba:20:ca:de:ac:bf:45:8d:85:56:3f:f6:ff:
51:b9:92:99:af:23:cb:54:98:48:f8:6e:11:17:ae:b6:4c:eb:
ab:d7:7f:00:29:ea:85:5f:dc:89:0e:82:a2:ba:65:a3:49:69:
40:36:ca:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:15:21 2026 by rpki-client