Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/48hJWnuIR6zkLRrP8kwNQwxkgY0.roa
File: 48hJWnuIR6zkLRrP8kwNQwxkgY0.roa (raw, json)
Hash identifier: PARyUMw4209az6z6ANxEjZ2FGAEesKDRoJjmKgM9BEg=
Subject key identifier: E3:C8:49:5A:7B:88:47:AC:E4:2D:1A:CF:F2:4C:0D:43:0C:64:81:8D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EF84C978D44DDBDDDAB48CC308088ED92
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/48hJWnuIR6zkLRrP8kwNQwxkgY0.roa
Signing time: Wed 24 Jun 2026 06:23:49 +0000
ROA not before: Wed 24 Jun 2026 06:23:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152726
IP address blocks: 151.245.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 18:08:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:4c:97:8d:44:dd:bd:dd:ab:48:cc:30:80:88:ed:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 24 06:23:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e3c8495a7b8847ace42d1acff24c0d430c64818d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:82:fa:1c:91:92:67:cf:ff:a2:88:b6:6a:13:
37:32:1d:b6:5d:71:33:00:f2:d1:c1:69:fc:9e:8f:
c2:1b:c2:57:da:b7:2a:1b:f9:0b:3c:59:f8:8f:ba:
0b:ca:28:91:b2:0e:63:64:1a:64:be:d3:70:00:12:
03:76:20:32:ae:4a:26:6c:6b:a6:44:80:0d:4b:bb:
6c:96:02:1e:7d:f5:b1:f3:2d:d0:0c:f9:02:94:0f:
e5:4e:e6:f9:a3:bb:08:23:4b:28:ba:13:71:3f:6d:
45:5b:b6:16:f0:3c:fe:5a:8f:b5:88:a1:98:4d:ae:
c2:ea:cf:ce:ca:8e:bd:52:74:61:6e:1a:c6:3b:ef:
fc:a9:30:ae:8d:39:61:02:4b:0f:7d:2e:ec:a9:b2:
54:4f:0a:76:b2:76:8f:bc:40:48:b4:47:f8:3e:17:
04:fe:20:70:5d:c5:e4:35:90:02:9a:d2:43:b6:7a:
bf:56:29:84:ac:f3:88:74:60:20:9f:9d:04:a8:4f:
7c:7e:84:ca:54:5c:a5:c9:17:62:b3:48:82:34:49:
6a:10:0c:fb:29:0a:18:eb:a3:27:31:af:42:6f:e9:
18:c2:68:f4:c1:12:5b:82:a9:b7:dc:34:51:36:b2:
9b:02:bf:44:36:b6:aa:d2:e7:43:2e:06:3e:c2:d4:
5c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C8:49:5A:7B:88:47:AC:E4:2D:1A:CF:F2:4C:0D:43:0C:64:81:8D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/48hJWnuIR6zkLRrP8kwNQwxkgY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.144.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:f6:ce:6a:44:b6:4c:4b:88:ae:e4:a1:40:db:75:79:97:f9:
68:b9:3d:20:f1:4c:a6:a3:8d:7c:71:44:17:ef:8b:76:fb:b1:
bd:a5:78:13:be:92:29:5a:14:a1:de:08:61:f8:ed:51:21:f6:
cf:60:c6:8b:d8:73:f6:42:0e:05:bd:a4:d1:97:fc:02:9c:76:
97:79:01:63:28:c6:82:b2:ea:4c:f5:f1:b1:d3:bc:5e:d4:4f:
5b:e5:2e:8c:78:c9:5d:a1:c6:98:86:cf:a0:8c:69:5c:66:d5:
8f:dd:b2:23:a5:97:94:fb:0c:fe:90:b6:59:79:3e:b6:be:83:
5a:7f:34:57:1b:d8:f5:b8:e2:f3:20:f2:75:1b:05:31:a9:8c:
aa:9e:98:91:67:5f:40:22:df:f2:cc:30:6a:bb:49:8b:27:a3:
6a:46:ac:7f:f5:77:23:3b:d6:f1:44:4b:b6:91:8a:01:39:be:
41:2d:c2:d1:2e:79:f2:73:99:39:ca:e9:7b:fe:fd:7a:d1:76:
dc:a3:99:5c:e6:c7:0c:23:70:41:e6:a1:e4:8a:42:21:d3:30:
41:7a:73:ed:82:de:3c:f0:3a:c8:a6:b0:ab:8d:a7:9b:96:ab:
25:25:74:43:29:2f:34:d3:15:56:e0:8d:2a:1d:3c:53:ab:05:
54:db:43:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 04:07:22 2026 by rpki-client