Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3WzwRubj_rJ5Q5jXQ9YDZJeE3Nw.roa
File: 3WzwRubj_rJ5Q5jXQ9YDZJeE3Nw.roa (raw, json)
Hash identifier: Lcw86eQL0xmANSP4XmZYcyVVi3W3r0H/3MWjQU9PO3E=
Subject key identifier: DD:6C:F0:46:E6:E3:FE:B2:79:43:98:D7:43:D6:03:64:97:84:DC:DC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F4C1A1499DA5E94957F567B6AED18BEFA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3WzwRubj_rJ5Q5jXQ9YDZJeE3Nw.roa
Signing time: Fri 10 Jul 2026 12:56:45 +0000
ROA not before: Fri 10 Jul 2026 12:56:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147200
IP address blocks: 151.245.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:1a:14:99:da:5e:94:95:7f:56:7b:6a:ed:18:be:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 10 12:56:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd6cf046e6e3feb2794398d743d603649784dcdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:cb:67:66:ca:bd:f2:1f:8f:ea:17:8d:10:
0c:36:0c:de:70:ed:3d:e5:8a:00:6b:e6:42:ee:7a:
09:58:c7:e9:9d:98:6a:7b:37:94:18:9b:d6:f9:5e:
91:03:d5:2f:d8:b2:13:dc:21:61:db:42:2e:f4:5e:
1e:56:96:09:37:e0:48:1a:b4:65:74:89:4c:92:92:
31:41:61:b7:04:96:26:f1:13:db:56:f2:75:80:07:
0d:28:e5:95:a4:59:81:08:73:89:36:8c:04:df:21:
c2:99:75:b1:50:a0:6d:0a:a9:58:19:36:3e:1e:52:
56:04:b6:f5:1a:39:2d:55:5c:bf:b8:a1:41:7b:48:
fa:eb:c6:32:2e:52:3d:bf:15:0e:f7:57:5d:5a:f3:
57:33:2c:09:0c:c0:cd:36:b7:75:c1:f0:59:0c:f3:
a4:21:70:03:b4:5f:1a:dc:e8:c8:a7:e6:83:49:d7:
13:0c:6d:7a:12:f4:40:f4:7d:ab:02:b8:b5:16:1a:
a8:23:58:de:4d:2e:76:ae:fc:62:18:5c:93:89:89:
17:c3:5c:f3:63:5c:91:7e:45:e7:5d:23:35:b5:45:
2e:fa:7d:c5:dc:fd:3c:d0:63:a8:c3:44:cd:a1:26:
1b:8b:72:6b:9b:90:5f:25:82:21:2a:1e:b1:ce:59:
46:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:6C:F0:46:E6:E3:FE:B2:79:43:98:D7:43:D6:03:64:97:84:DC:DC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3WzwRubj_rJ5Q5jXQ9YDZJeE3Nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.166.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:0c:0d:ac:a2:0e:7f:b9:60:59:d0:be:0d:7e:a2:14:ed:95:
9d:ea:be:02:a2:8a:d2:e5:1e:e3:37:ca:ac:99:3a:14:e3:c6:
33:dd:ad:1c:69:1e:ed:62:a3:d7:77:4c:09:1b:11:f3:28:54:
39:78:db:6b:66:d4:bb:40:bc:a2:f6:55:52:68:70:e0:bd:3c:
19:78:82:68:09:16:f7:5b:dd:1d:d2:02:36:66:fe:96:b2:c5:
14:e3:07:ca:d7:ed:ce:30:99:bf:1f:4c:af:f8:9d:3f:55:be:
a2:a1:37:17:fa:65:f6:eb:05:5b:fa:20:f2:3a:5c:53:cd:78:
40:c0:d3:8a:17:25:07:8a:7e:b5:db:d9:50:d0:4f:50:ee:38:
8c:f2:a1:52:74:83:e3:ad:51:03:44:6d:ae:d1:0b:88:8d:0f:
d2:51:53:57:d1:d9:9a:a5:e4:b2:25:0b:ed:2f:3b:50:b5:77:
69:5f:5b:d0:0d:de:f8:f8:44:c0:cb:49:21:50:b2:df:de:58:
c6:c8:3c:e1:b8:47:13:ee:df:05:f7:c9:9f:dc:6b:ec:83:de:
50:78:ee:e7:2d:af:c9:2e:b6:e6:85:70:08:43:a5:7a:b6:d8:
ed:f4:f8:d2:98:0a:76:72:8f:3a:d2:ad:b8:ab:a0:e4:e1:54:
1f:91:85:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 21:45:38 2026 by rpki-client