Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/09_kDImSZz6jmZXzSKVwx27eIZk.roa
File: 09_kDImSZz6jmZXzSKVwx27eIZk.roa (raw, json)
Hash identifier: bFEzi89q68/vcURIcHnlhqJOf7YIXZTxLUYpcW4qBs0=
Subject key identifier: D3:DF:E4:0C:89:92:67:3E:A3:99:95:F3:48:A5:70:C7:6E:DE:21:99
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F31A6D5C23EFDA213C0A4159170654DD7
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/09_kDImSZz6jmZXzSKVwx27eIZk.roa
Signing time: Sun 05 Jul 2026 09:40:45 +0000
ROA not before: Sun 05 Jul 2026 09:40:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151389
IP address blocks: 151.246.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 19:23:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:31:a6:d5:c2:3e:fd:a2:13:c0:a4:15:91:70:65:4d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 5 09:40:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3dfe40c8992673ea39995f348a570c76ede2199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ff:9d:b6:f4:41:98:65:54:fc:02:35:d1:fb:
ce:d3:c9:19:da:ec:1e:85:5d:79:c5:9a:65:c1:ea:
28:29:3c:0a:7c:64:7a:3a:d8:92:18:c1:42:d9:5a:
ee:28:c1:f9:13:a9:65:8a:4a:a3:02:de:ff:a4:ae:
d5:b2:06:d8:84:b8:0b:3c:c2:75:1b:3e:13:52:1c:
9f:1a:22:3c:1e:9a:39:48:d2:88:84:53:4e:a6:22:
7e:a3:62:a3:6b:5d:e1:77:91:90:2e:e6:5b:47:39:
f7:88:3a:ef:5e:6a:48:ba:f2:4d:a7:f4:ae:4a:05:
de:80:5a:27:83:69:aa:66:db:af:19:42:21:86:7d:
2f:a5:84:59:f2:70:a1:56:46:3c:63:85:72:fc:e0:
93:84:bd:e3:d5:97:76:c6:6d:94:a4:d2:80:8f:6b:
97:48:91:cd:70:ea:80:22:b4:58:ee:2f:16:b1:e7:
8a:44:83:cd:e1:fc:1b:e7:25:67:7d:11:d9:7f:8e:
63:fb:88:c3:a2:21:26:47:e5:34:00:3d:7a:66:59:
c1:71:8d:9c:7c:07:cd:58:12:ae:dd:46:3c:82:b1:
7c:54:db:06:fc:ff:5a:da:ed:dc:40:77:cf:60:80:
89:a4:5a:73:43:3d:28:aa:d0:2b:69:2f:3c:4b:fb:
34:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DF:E4:0C:89:92:67:3E:A3:99:95:F3:48:A5:70:C7:6E:DE:21:99
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/09_kDImSZz6jmZXzSKVwx27eIZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.192.0/24
Signature Algorithm: sha256WithRSAEncryption
85:c8:a5:9c:75:a2:f0:18:bf:ca:3c:b1:3d:08:d1:07:e2:ed:
72:2e:d5:81:37:47:3e:fc:ab:ca:4b:d1:3e:df:7a:1b:be:86:
55:0b:ab:db:15:2a:27:4e:e2:84:d0:f6:66:ad:91:fd:e3:52:
4e:ae:b7:85:1e:4a:10:e5:02:7d:79:a9:f3:f1:07:f4:02:92:
52:94:4e:38:da:6f:46:19:48:13:da:c6:c1:06:d3:fc:13:40:
f9:05:1e:d5:98:06:47:c9:57:a7:88:3a:07:f1:fc:d8:61:5d:
17:50:9c:b6:46:48:15:39:ad:fd:a7:0f:9f:54:2f:7c:2f:2c:
d7:ca:92:eb:79:8d:ba:2d:97:e1:06:33:9e:43:dd:38:a6:5a:
00:4e:dc:5c:11:ad:74:37:f2:ae:5e:a2:74:c1:1e:65:18:f9:
e6:d9:2c:4a:c9:45:86:11:52:25:0a:e2:bd:e8:21:98:8c:c0:
48:64:eb:38:49:ea:b8:94:da:78:58:ac:3e:5c:f5:35:f0:03:
5a:84:6c:8f:80:2e:6a:a9:f5:76:32:72:fe:d9:d2:fc:08:9f:
37:6c:9e:dd:cb:b5:fe:32:24:ef:ee:91:6b:58:05:be:44:6f:
ba:20:de:84:c8:7f:ae:5f:b8:8b:42:aa:10:3a:4a:eb:08:c0:
68:91:19:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 02:21:44 2026 by rpki-client