Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/KAltvpawgV1iJ0fnMCKzK8M-ZcM.roa
File: KAltvpawgV1iJ0fnMCKzK8M-ZcM.roa (raw, json)
Hash identifier: DswvHDX2EO0fYrl9sOT/kMzodvF3kQoGV1M9SIEp3Mo=
Subject key identifier: 28:09:6D:BE:96:B0:81:5D:62:27:47:E7:30:22:B3:2B:C3:3E:65:C3
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 019E11D427A1DB80C8CE2DCAC0448DC82922
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/KAltvpawgV1iJ0fnMCKzK8M-ZcM.roa
Signing time: Sun 10 May 2026 12:19:36 +0000
ROA not before: Sun 10 May 2026 12:19:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198250
IP address blocks: 151.123.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:11:d4:27:a1:db:80:c8:ce:2d:ca:c0:44:8d:c8:29:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: May 10 12:19:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28096dbe96b0815d622747e73022b32bc33e65c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0e:f5:35:45:b4:89:7e:09:17:50:b2:bf:e3:
f2:a0:54:91:a9:b8:7c:79:a3:81:54:97:a9:77:43:
7b:9a:97:74:dc:a1:d5:d2:db:24:e1:92:57:1a:39:
8c:34:b2:22:b5:51:08:59:3e:b0:b7:c2:bf:86:30:
da:0f:55:99:88:d8:9f:41:a4:63:bf:6d:54:31:fb:
db:1e:8a:c1:5d:85:c0:43:29:fb:0c:45:f9:69:3a:
b0:63:bc:8c:f0:1d:e2:02:dd:14:db:66:8e:97:43:
24:93:fe:04:eb:57:36:4e:e8:bd:fc:fc:a8:3c:19:
05:a5:14:15:69:f6:a9:f5:2a:4a:07:2b:44:73:e3:
45:dd:7d:03:85:82:ac:e5:a3:d0:6b:f8:02:bd:fd:
86:32:e4:3c:09:95:91:99:d5:06:08:ca:f3:be:91:
2a:b9:fd:7a:93:ac:3f:1e:ce:5c:1d:87:8d:65:6c:
1f:dd:9c:32:c7:5e:4c:d4:f1:67:4b:6a:2e:65:94:
cf:24:60:0f:8e:60:82:ff:e8:00:04:00:0d:97:15:
ae:1b:af:e9:a4:92:cb:8c:a2:a6:89:a7:54:8e:31:
3e:79:c3:a4:37:f9:8a:0b:7d:e1:06:fc:7b:4a:33:
59:70:13:ca:2a:12:c3:b3:4a:c6:c2:b1:e4:e4:b1:
9f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:09:6D:BE:96:B0:81:5D:62:27:47:E7:30:22:B3:2B:C3:3E:65:C3
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/KAltvpawgV1iJ0fnMCKzK8M-ZcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.123.181.0/24
Signature Algorithm: sha256WithRSAEncryption
10:89:82:b5:f3:08:a8:55:41:53:68:a2:65:a7:7e:62:76:c5:
5a:f8:be:bf:65:9d:62:c4:89:47:03:9a:93:24:23:26:68:54:
d4:ff:16:53:08:ce:e0:ff:d2:8a:f1:f2:50:b2:e5:80:12:e1:
bd:a2:56:b1:97:6c:84:c3:19:e5:09:67:05:00:78:b8:ea:86:
ba:95:b6:2c:65:f4:1b:a0:c2:4d:2d:0a:c4:7f:a0:62:fb:50:
96:5c:a7:94:e8:4b:06:ac:91:7b:ef:7f:ee:6e:6a:f7:54:b1:
98:28:8b:07:81:3a:82:91:c4:8b:0f:73:2b:82:ac:d2:01:73:
08:98:60:e6:14:66:3c:30:af:d6:9f:81:66:5d:bb:6d:78:7a:
b8:10:ed:7e:e1:9f:94:c5:8c:5b:1c:17:a5:69:1b:0b:d1:ab:
6e:14:65:0a:f6:71:19:64:31:ee:aa:5b:d9:11:0e:e1:ea:07:
93:d0:c2:71:dd:30:df:19:96:b2:50:c1:67:13:43:a6:97:29:
59:8b:49:90:b2:bf:55:90:73:0b:46:85:cf:68:9e:75:74:9b:
2b:bc:d9:65:e0:34:49:c3:72:44:fb:a0:f2:71:14:84:64:6a:
b0:bf:04:29:dd:b2:27:fa:c1:b0:82:7c:2d:16:7b:8e:38:59:
3e:03:61:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:36 2026 by rpki-client