Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0UPG7afjEBxeH6p-eWdFDiBTvP0.roa
File: 0UPG7afjEBxeH6p-eWdFDiBTvP0.roa (raw, json)
Hash identifier: TkmtdbE2MAgokZI3hrwns3skACT6p6g2XXwz8d9klHc=
Subject key identifier: D1:43:C6:ED:A7:E3:10:1C:5E:1F:AA:7E:79:67:45:0E:20:53:BC:FD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FBBA4A61B51BEF81F758CD215A477E3E2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0UPG7afjEBxeH6p-eWdFDiBTvP0.roa
Signing time: Sat 01 Aug 2026 04:45:57 +0000
ROA not before: Sat 01 Aug 2026 04:45:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205960
IP address blocks: 151.245.119.0/24 maxlen: 24
151.247.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bb:a4:a6:1b:51:be:f8:1f:75:8c:d2:15:a4:77:e3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 1 04:45:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d143c6eda7e3101c5e1faa7e7967450e2053bcfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bc:67:93:46:d3:3b:a8:8f:9d:6a:8d:e5:e0:
4d:02:cb:25:72:67:8b:e1:0b:05:4e:b1:e9:c9:64:
1b:ba:c6:d6:d3:8b:5c:a0:27:58:13:71:b1:52:03:
b2:f5:88:91:82:8c:10:49:79:90:f2:c1:57:ed:1d:
22:cb:51:65:f7:45:ce:a8:77:07:3e:5e:81:6b:78:
00:08:1b:33:55:30:52:0d:06:df:8b:4e:9d:b0:89:
20:a9:f1:69:35:23:b2:68:e0:c7:2c:ff:d8:6d:9c:
c4:c7:a0:10:9e:66:11:1b:a4:27:03:93:e0:5a:3d:
25:1b:bc:eb:2c:ab:5a:41:f9:dd:88:84:bb:8b:7a:
0b:34:b4:0b:3a:52:43:46:c9:59:e4:d6:8f:85:89:
a5:70:4c:86:ad:97:96:2e:3d:83:04:92:6f:8d:92:
87:7a:46:50:24:7f:ae:24:cf:e9:57:9a:c6:5e:f9:
8b:f7:2a:06:79:d9:a4:9a:f1:f3:9f:60:72:0b:8a:
75:c0:01:a0:1e:5c:d6:4c:c5:7f:6d:c7:98:41:37:
26:46:43:b8:df:02:13:74:75:a5:2a:61:d3:5b:36:
ca:84:a4:d2:20:7e:f2:51:71:dd:b5:1a:3a:d6:c7:
b8:4e:33:c7:a8:3f:ee:c5:e1:c0:f7:93:25:41:9e:
a9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:43:C6:ED:A7:E3:10:1C:5E:1F:AA:7E:79:67:45:0E:20:53:BC:FD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0UPG7afjEBxeH6p-eWdFDiBTvP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.119.0/24
151.247.7.0/24
Signature Algorithm: sha256WithRSAEncryption
04:60:19:50:e8:cf:e4:2a:1b:e9:d7:22:e4:72:fd:0f:0a:0d:
9f:34:26:61:33:82:8a:78:c8:43:20:21:b3:3f:f3:dc:8b:b0:
74:2a:f2:04:b1:75:a0:35:a7:ec:28:77:12:17:7c:f0:24:32:
ae:60:91:dc:05:60:23:76:af:eb:9f:ac:6e:3d:68:cd:65:69:
73:8d:3d:9a:e0:fa:21:9a:ba:3f:26:8f:ff:f8:14:58:7e:1a:
f3:74:be:79:7f:2e:e2:c2:67:51:a9:5b:73:97:8a:f2:12:15:
30:ca:04:e5:2c:ab:44:64:6c:6d:6b:90:2b:48:65:a4:75:d5:
6e:9f:1f:08:f8:ec:43:96:9e:03:6c:46:5d:80:04:25:25:79:
a5:a8:63:a3:b3:69:29:79:cc:f1:64:db:92:e6:01:cd:3e:d7:
4d:8f:76:13:1f:79:51:c3:a1:f0:71:c2:9a:7f:c5:f7:c4:49:
4d:38:4e:59:be:f2:b8:63:d6:4c:c4:27:34:1a:c5:ed:c3:88:
49:89:0e:79:17:4b:54:09:0c:bb:5c:b3:1e:6c:f6:16:c1:b9:
9f:e3:36:89:95:05:51:fd:41:b3:f2:9f:b0:e4:dc:6b:fc:47:
19:7f:26:39:cb:de:3c:44:b6:73:cc:13:d8:5f:61:3f:8b:bd:
5a:3b:32:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:07:06 2026 by rpki-client