Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1QlIOLUCw_wca-iE5rRkfSkapN8.roa
File: 1QlIOLUCw_wca-iE5rRkfSkapN8.roa (raw, json)
Hash identifier: CMopg17XNjOeP2tDfly61sU3Gzn1hQFOxexxHFC+BTY=
Subject key identifier: D5:09:48:38:B5:02:C3:FC:1C:6B:E8:84:E6:B4:64:7D:29:1A:A4:DF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FD146A8F3E29AFEC5DDBDE4205F2EFAF8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1QlIOLUCw_wca-iE5rRkfSkapN8.roa
Signing time: Wed 05 Aug 2026 09:34:56 +0000
ROA not before: Wed 05 Aug 2026 09:34:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7346
IP address blocks: 151.246.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:46:a8:f3:e2:9a:fe:c5:dd:bd:e4:20:5f:2e:fa:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 5 09:34:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5094838b502c3fc1c6be884e6b4647d291aa4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:24:f7:ba:ca:85:71:ad:36:00:84:15:55:5c:
6c:ec:e6:67:98:19:fc:8c:bc:8a:68:5a:69:8b:24:
67:36:4d:9a:59:c3:cc:56:74:91:89:88:ac:e1:04:
70:d2:23:1f:3c:5b:ff:57:c0:44:b6:b0:fb:5b:85:
0f:bc:92:0c:1b:8f:44:8c:30:b4:88:2f:4d:b3:74:
52:9b:d9:3b:33:e5:94:bf:6b:50:ee:4c:d2:cb:6d:
04:45:10:43:a9:5d:96:18:b0:65:47:3f:cc:4d:79:
7e:08:0b:16:47:83:55:c8:d6:1f:df:ab:a7:40:d6:
5b:eb:82:66:57:a3:9f:36:d8:c6:01:f6:74:8d:86:
a0:ee:99:b0:e6:58:1d:f1:c6:94:e9:f0:52:c7:a1:
eb:d9:f3:52:eb:77:4e:56:41:34:a3:5e:9f:e0:73:
98:b6:29:a7:9b:a8:10:f1:01:ac:bd:87:7a:17:a7:
91:5a:29:1e:9e:63:3b:3a:6e:54:98:3c:92:11:4f:
22:08:2d:37:ab:16:31:ba:e8:98:98:c6:ce:0e:13:
54:4c:88:8a:b4:7e:4b:33:81:58:1a:03:35:90:92:
72:0e:c6:78:70:47:0f:20:aa:b8:17:90:25:fd:89:
35:d6:22:33:5a:9e:ab:f5:f5:4a:bc:31:d8:9b:11:
50:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:09:48:38:B5:02:C3:FC:1C:6B:E8:84:E6:B4:64:7D:29:1A:A4:DF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1QlIOLUCw_wca-iE5rRkfSkapN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.183.0/24
Signature Algorithm: sha256WithRSAEncryption
49:1e:4c:a9:be:56:f5:b1:3e:63:26:d7:0a:ad:77:72:f3:d9:
94:6e:f2:79:03:bc:a8:fe:7f:96:91:5f:82:a4:09:12:6b:09:
a1:aa:71:7d:cc:6e:1d:81:78:68:ac:1b:06:d2:9a:3e:7c:43:
78:0e:5a:28:cb:43:6d:08:91:8a:2d:88:d0:a1:f4:9c:16:b3:
dd:b4:c1:29:98:f6:da:9a:0a:ce:58:14:81:73:96:5f:3c:dd:
f6:c4:bd:b5:48:a4:09:fe:e3:09:fd:8f:df:93:ad:2b:78:2f:
0b:a9:24:2a:ec:20:b9:0d:ce:ed:11:d4:32:ef:e2:f8:cb:ec:
e6:6b:c9:bd:59:89:77:02:3e:2f:94:44:be:69:7b:43:eb:e4:
43:7d:73:94:9f:9b:b5:4f:d3:9b:d5:48:32:37:12:5d:c3:8a:
b2:ec:ac:95:3c:e7:0e:30:ca:6b:cf:ea:b7:cc:9a:15:df:44:
46:1f:fd:d1:60:b6:78:37:94:a4:1e:d5:37:0d:06:e2:63:25:
de:0e:88:bc:32:ff:fc:83:5f:b2:e9:e9:55:15:ad:88:d2:06:
36:72:25:db:86:54:18:50:a9:b6:31:ab:4f:e2:c9:15:dc:51:
bd:79:4f:57:ea:45:fa:3c:df:c9:8f:5a:b9:41:20:2e:eb:05:
4b:5e:03:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:06:50 2026 by rpki-client