Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5A39IimFzRXXbFdj-fSTb5_m5JU.roa
File: 5A39IimFzRXXbFdj-fSTb5_m5JU.roa (raw, json)
Hash identifier: EEvbzZBkurUHRQhw6n4BkSFMlKEqjefYOhcAxLq4Rg0=
Subject key identifier: E4:0D:FD:22:29:85:CD:15:D7:6C:57:63:F9:F4:93:6F:9F:E6:E4:95
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E459841D088400EBF76170F4CAC6842EF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5A39IimFzRXXbFdj-fSTb5_m5JU.roa
Signing time: Wed 20 May 2026 13:34:26 +0000
ROA not before: Wed 20 May 2026 13:34:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400342
IP address blocks: 151.243.49.0/24 maxlen: 24
151.243.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:45:98:41:d0:88:40:0e:bf:76:17:0f:4c:ac:68:42:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 20 13:34:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e40dfd222985cd15d76c5763f9f4936f9fe6e495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:20:71:20:29:ac:da:4d:a1:cb:39:29:e2:aa:
ef:27:5e:00:a9:9a:b2:60:e8:7e:ed:28:b4:85:ef:
6d:71:fd:79:47:c6:61:e0:3f:ad:dd:f1:7d:20:24:
07:16:9c:55:16:bf:fb:bf:bf:b7:88:b4:48:0a:14:
75:4c:07:da:35:d0:11:b5:08:de:c1:4e:e1:b7:2e:
d4:86:cb:e9:05:20:f0:90:83:36:89:00:e8:e1:e8:
01:ee:3f:6a:63:c0:50:0f:9f:a5:02:3c:8a:f1:76:
3e:ad:9e:dd:d0:03:c3:75:53:ce:42:d5:82:20:e4:
73:b6:7e:47:69:35:26:50:79:0f:7f:b1:34:e7:d1:
09:39:b2:32:46:9a:54:b6:60:af:c9:3a:d2:37:f5:
af:99:77:cb:64:70:cf:e9:7b:f5:78:f1:45:8e:ae:
53:cb:10:28:5f:35:25:e8:eb:46:9e:f8:26:96:e2:
da:1f:3b:da:38:b0:fa:76:a8:07:73:5c:55:8a:19:
01:e3:df:06:84:b1:eb:2f:19:8a:84:61:c5:d3:9f:
18:a1:06:76:88:df:17:48:cb:13:c5:df:ed:5b:1a:
b9:24:45:a0:45:85:02:58:bc:24:e6:d1:0f:dd:e3:
41:54:ba:14:d6:0f:1d:1d:ac:02:12:9f:03:1d:41:
f3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0D:FD:22:29:85:CD:15:D7:6C:57:63:F9:F4:93:6F:9F:E6:E4:95
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5A39IimFzRXXbFdj-fSTb5_m5JU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.49.0/24
151.243.95.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:1c:9a:b7:8e:47:dd:ea:02:a0:98:3a:d4:72:cc:82:f9:27:
df:cc:9f:85:d0:fc:77:18:8c:27:2b:7c:44:8d:68:5f:ff:46:
87:04:4c:83:89:04:ce:6f:52:fe:47:68:ca:e5:2b:be:28:80:
6d:e6:2f:eb:32:2b:ea:7b:e5:1f:88:29:27:78:7a:cb:8a:0a:
09:ac:ab:d5:ac:c6:14:65:2f:35:45:96:1e:07:2c:c5:12:ac:
73:be:17:34:6a:a8:b9:e4:a5:78:37:96:a1:19:ab:f4:ef:a5:
0c:57:b1:81:0e:7b:ab:51:f2:02:ae:c6:1d:17:d4:56:01:01:
5e:43:c1:89:9e:a9:12:d6:22:60:35:8d:5c:54:ca:77:74:cf:
25:99:20:2f:25:d0:f9:9a:d5:76:c8:13:8d:92:17:07:74:8f:
da:98:d6:fb:6e:78:a7:49:ba:3b:b6:3d:46:50:be:cd:a4:a2:
47:f2:f5:42:d4:1c:2d:92:9c:0d:d0:05:c8:1f:07:1f:3d:8f:
a6:d9:a7:e5:7f:69:fc:98:f6:e4:9b:98:56:a2:db:59:d2:be:
65:c8:86:63:07:89:a5:f8:11:89:29:53:d1:4a:a7:8d:9f:30:
42:fd:31:3c:27:92:0a:75:2a:02:c1:92:a6:37:2d:ec:fa:4f:
a6:60:04:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:04:31 2026 by rpki-client