Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6tfDEwIFa8Zqk36NQoO5fkPIwM8.roa
File: 6tfDEwIFa8Zqk36NQoO5fkPIwM8.roa (raw, json)
Hash identifier: aj6tTey2BSRpt6jsHddb4lcpQXrisEIvUCpMObjrD3A=
Subject key identifier: EA:D7:C3:13:02:05:6B:C6:6A:93:7E:8D:42:83:B9:7E:43:C8:C0:CF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0430A6AAD63DE630F547EB8DA78A391D5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6tfDEwIFa8Zqk36NQoO5fkPIwM8.roa
Signing time: Thu 27 Aug 2026 11:45:51 +0000
ROA not before: Thu 27 Aug 2026 11:45:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 151.242.143.0/24 maxlen: 24
151.247.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:13:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:0a:6a:ad:63:de:63:0f:54:7e:b8:da:78:a3:91:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 27 11:45:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ead7c31302056bc66a937e8d4283b97e43c8c0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ad:04:c9:d4:b5:95:b8:4b:12:84:69:84:c6:
f1:16:26:41:aa:42:09:98:ee:d0:68:16:fa:a1:dc:
8b:23:85:11:ff:ab:36:6e:8d:17:ea:3e:b2:fa:e4:
f0:49:93:25:b6:25:b8:3e:70:41:82:35:87:f9:3a:
74:8e:5b:b3:67:05:9f:46:59:45:0a:38:e6:48:d5:
25:21:f8:a6:be:24:15:44:80:cb:2a:f7:93:fe:26:
14:82:97:4b:68:8d:bf:c5:ec:33:49:05:9d:12:4f:
11:43:61:64:93:c1:ad:25:07:94:2c:de:f2:a3:40:
87:3a:ff:ef:a5:a1:0d:d6:db:86:5b:45:d5:97:ee:
3d:71:88:1b:40:1b:ba:1d:31:92:5f:9f:c8:ff:cd:
f8:0b:96:95:6a:ca:53:69:a9:f2:24:88:89:f3:8a:
c1:c1:84:a6:c4:dc:99:0d:33:32:30:5e:39:7f:f1:
3c:c0:d3:82:2b:53:58:50:8d:82:e6:a1:7a:95:a0:
0e:38:04:5c:ca:42:c0:01:9a:6c:4d:1d:e6:00:d8:
53:f3:77:d4:5c:09:7e:0b:0d:d5:b6:a2:a0:c9:a5:
69:94:dd:bc:1d:36:ac:1e:e0:f1:73:fb:5e:0d:2e:
76:c9:76:46:8c:66:a4:c3:59:52:80:4a:92:7a:d1:
2e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D7:C3:13:02:05:6B:C6:6A:93:7E:8D:42:83:B9:7E:43:C8:C0:CF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6tfDEwIFa8Zqk36NQoO5fkPIwM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.143.0/24
151.247.182.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:4f:4f:b8:bb:5b:11:92:e7:68:48:74:86:91:36:dc:4d:5d:
15:30:e3:47:cc:75:23:bc:00:76:ba:f8:2c:27:f4:43:c5:59:
90:16:08:4e:87:30:c7:42:d2:a2:2a:57:b2:0c:03:65:54:04:
90:c9:b0:b7:02:b5:c0:70:a1:64:50:6c:0e:06:92:0c:cb:86:
4d:e7:9f:6a:5c:99:df:c0:73:b5:67:36:53:7a:d5:bf:dc:94:
af:59:ee:67:3a:82:cb:85:82:49:8c:11:a0:ce:28:aa:ff:9b:
2f:04:f3:b0:46:52:a5:97:32:20:24:16:59:3f:6d:54:f1:c2:
26:97:9b:86:84:a4:b6:54:56:05:17:c6:85:99:19:d7:7a:cf:
c6:87:45:42:02:db:db:9e:45:f2:bb:4d:fe:a9:43:31:8e:81:
c6:cc:08:e9:35:e0:d4:f7:41:a9:52:8a:80:87:1e:e9:30:19:
d3:c4:62:2d:6a:ae:e9:ff:a6:e0:d4:77:d6:70:fa:30:6f:e2:
5c:2e:78:82:96:de:07:59:32:1f:60:48:23:ee:62:03:e0:66:
66:76:5f:c6:50:71:c3:e8:1d:67:5f:06:17:cc:63:aa:a3:90:
bb:a0:fe:f4:e1:12:17:fb:18:2e:fa:4f:f5:ad:26:ca:a2:20:
05:ee:c9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:55:41 2026 by rpki-client