Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xukvXZTtF7Bi2y8OLIo9dmcCDlU.roa
File: xukvXZTtF7Bi2y8OLIo9dmcCDlU.roa (raw, json)
Hash identifier: g3zu6vr/eK5v65aWvnxF7ZkfcXhbtNV5AlMXXFyDx2o=
Subject key identifier: C6:E9:2F:5D:94:ED:17:B0:62:DB:2F:0E:2C:8A:3D:76:67:02:0E:55
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CDB96B24DF1F0C87AE29B5D58B4E8B9CC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xukvXZTtF7Bi2y8OLIo9dmcCDlU.roa
Signing time: Wed 11 Mar 2026 06:30:12 +0000
ROA not before: Wed 11 Mar 2026 06:30:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19318
IP address blocks: 151.244.136.0/22 maxlen: 22
151.244.160.0/22 maxlen: 22
151.244.172.0/22 maxlen: 22
151.244.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:db:96:b2:4d:f1:f0:c8:7a:e2:9b:5d:58:b4:e8:b9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 11 06:30:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6e92f5d94ed17b062db2f0e2c8a3d7667020e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:92:16:97:7a:8f:9c:d0:b5:23:30:51:5f:
b2:32:67:8d:80:ec:3b:00:5a:20:0c:74:97:f2:94:
c1:af:d2:29:04:13:0d:39:e1:25:d5:c4:12:8b:80:
f6:89:ab:cd:a6:df:0c:7d:77:a3:aa:96:39:dc:f0:
bd:71:26:05:16:9c:dc:57:d5:15:41:25:6c:80:dc:
3d:05:97:eb:06:3e:43:68:dd:ef:43:cd:1d:d0:4b:
5e:06:62:e8:76:77:15:a7:2d:f3:12:91:50:13:5b:
19:2c:98:19:49:b0:d4:ec:47:5b:80:e7:6c:96:c6:
7b:a9:94:1b:31:f5:1d:82:aa:8b:9b:f5:f6:86:13:
02:08:ed:e2:aa:08:f9:1d:8b:27:e4:5c:bd:36:95:
87:8e:e4:44:b1:8b:11:cf:97:6e:35:15:b5:8d:f7:
15:78:76:cf:c1:35:7e:71:ae:d0:fd:ca:15:37:13:
3b:1d:3f:7c:80:f6:a2:fb:99:51:82:22:23:fb:62:
bc:fd:de:f8:b1:a3:b9:c0:40:29:ed:8a:9c:9a:82:
8a:c8:e5:75:83:da:32:c6:8a:ec:4c:ed:d1:fe:d0:
ec:67:7a:e7:78:a9:05:bf:96:78:4f:f8:1a:92:3b:
0b:12:d7:e9:8e:8a:17:78:b3:b7:9c:43:8c:26:f7:
c0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E9:2F:5D:94:ED:17:B0:62:DB:2F:0E:2C:8A:3D:76:67:02:0E:55
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xukvXZTtF7Bi2y8OLIo9dmcCDlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.136.0/22
151.244.160.0/22
151.244.172.0-151.244.179.255
Signature Algorithm: sha256WithRSAEncryption
1c:8c:16:d9:2f:90:01:b2:8f:f8:1e:1d:a2:bd:1b:3f:cc:fd:
7b:5a:63:e3:0a:2e:d6:ef:5e:71:a5:8e:c3:92:06:24:b5:17:
53:e7:13:71:ba:a3:95:b2:91:4d:6f:ef:5b:6c:15:46:3a:32:
7a:2a:b6:66:3d:d8:bc:9f:08:6e:c6:22:36:c2:ce:d1:a0:20:
1d:02:cc:dd:4a:3d:04:da:9b:4a:ff:32:83:46:38:74:18:be:
e5:36:da:84:83:af:22:fb:06:23:7c:39:3d:2f:d4:90:b0:5c:
1c:10:fa:a8:e0:b0:03:43:08:8e:1a:57:2a:55:fd:77:a5:74:
e6:b7:49:a9:3f:02:08:42:b8:46:2b:06:1c:0a:94:85:01:7c:
27:c7:4c:13:82:19:09:a6:08:b8:fc:d1:94:54:2d:d9:fa:51:
8b:45:0b:05:68:3b:81:8b:91:ce:6c:b7:31:ed:4f:02:3e:e0:
13:16:07:43:79:de:c9:37:89:53:bf:8b:ab:e2:4e:52:36:84:
8b:b3:65:c6:43:d5:c0:3d:e7:13:4a:1c:78:65:56:0f:e6:a0:
1d:79:37:ae:fa:c3:fa:f3:50:e9:b6:3c:54:bd:a1:b6:05:bf:
b7:bd:a2:d1:16:62:ee:bd:95:58:cf:b2:aa:d1:65:c2:68:ca:
f6:cf:02:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:36:23 2026 by rpki-client