Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4M4QJbbWQP0fmklBpo4rPxKmduc.roa
File: 4M4QJbbWQP0fmklBpo4rPxKmduc.roa (raw, json)
Hash identifier: AdzjW/CvdQAEkhnPXiVzPY92cKg+NUKdiX33XTVVNKU=
Subject key identifier: E0:CE:10:25:B6:D6:40:FD:1F:9A:49:41:A6:8E:2B:3F:12:A6:76:E7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0F77781EF2E6FBC7723120F2BDF97C080
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4M4QJbbWQP0fmklBpo4rPxKmduc.roa
Signing time: Thu 01 Oct 2026 12:36:39 +0000
ROA not before: Thu 01 Oct 2026 12:36:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402133
IP address blocks: 151.246.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:77:81:ef:2e:6f:bc:77:23:12:0f:2b:df:97:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 1 12:36:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0ce1025b6d640fd1f9a4941a68e2b3f12a676e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:08:32:2d:cd:5f:14:bf:5b:e3:d9:44:2f:62:
fa:b4:84:b5:22:aa:3c:5b:40:90:7d:3f:82:3d:5f:
3e:57:5b:97:15:24:98:bb:9d:9a:a5:26:f6:70:24:
9e:5e:06:b4:fb:fb:ec:09:a2:73:42:5b:10:6d:9c:
e0:53:46:f4:f0:78:64:54:c3:a6:64:9e:91:81:82:
6d:7f:b8:29:8c:b9:15:a9:bb:02:2a:10:96:1d:cd:
4e:3d:33:ce:46:43:cc:e2:4a:85:e8:e1:ad:ef:30:
25:42:5e:8a:a1:5a:5a:ec:7c:69:64:c0:84:88:3c:
eb:33:a8:a3:09:4d:64:de:6b:62:92:03:21:1d:e7:
38:19:1f:97:2b:89:22:fe:cb:3b:14:cf:49:d2:3d:
e7:61:ad:d3:77:74:c8:5d:bc:b5:b8:3d:54:dd:4a:
72:dc:fd:01:9a:b1:e4:a7:b0:48:5e:7b:c6:28:c9:
49:47:8d:01:da:fb:fd:f2:ca:e4:fd:82:58:fd:eb:
c9:0a:6e:62:44:35:fe:e7:81:f3:99:3d:ce:47:b6:
83:94:17:ea:20:7b:98:78:e0:48:f3:32:ef:9c:33:
0d:f3:f1:7a:40:a6:aa:62:28:7c:0a:3b:f8:1f:04:
06:bb:93:49:c8:ca:3a:aa:f6:44:e7:6c:d1:a7:a6:
19:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CE:10:25:B6:D6:40:FD:1F:9A:49:41:A6:8E:2B:3F:12:A6:76:E7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4M4QJbbWQP0fmklBpo4rPxKmduc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.191.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:42:8b:18:bd:e1:e4:60:26:5d:07:0e:d1:87:07:36:53:2d:
11:36:2b:8a:e7:3b:dc:52:c1:e3:0b:d0:e0:6d:91:57:f4:11:
17:1f:51:ee:c0:fb:2a:bc:13:5d:5a:f2:f8:96:f3:a0:30:4b:
11:7c:1a:1e:c6:a6:ad:a7:96:13:a5:92:7d:81:a8:81:88:37:
81:74:50:7b:a0:bf:87:dd:c5:c0:7c:91:45:dd:8d:06:6f:90:
ee:83:8e:36:24:d2:61:02:3e:96:14:cc:c1:32:d2:32:d6:e4:
bc:9e:ba:7f:0e:9a:32:0d:71:32:17:78:76:bc:24:72:05:03:
b6:ef:c9:93:ab:99:2f:42:e5:d2:a4:de:1b:1b:a4:84:18:8f:
3c:22:1b:3e:31:6c:d0:4e:ed:12:be:f2:fb:81:4d:35:bd:0c:
b3:d7:51:06:ef:10:7b:3e:2a:a8:d3:e6:7b:a1:3a:d6:a7:87:
68:01:02:7d:99:b1:d2:2d:66:27:3b:09:bf:b3:e9:10:64:f1:
9f:45:76:d0:46:77:11:f8:4b:e1:de:51:b7:4f:a5:7b:3b:46:
1d:b5:80:73:e4:cb:ca:87:09:85:79:19:b8:43:57:26:7c:0a:
01:5d:52:3e:6c:eb:09:6e:62:b5:e1:b5:cf:72:4e:aa:b7:b7:
e0:2e:90:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:12:06 2026 by rpki-client