Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9Uo-JLxvyt66VfyQbMyrQgVZEaw.roa
File: 9Uo-JLxvyt66VfyQbMyrQgVZEaw.roa (raw, json)
Hash identifier: YAgY7vyDHIA2F367RpubM1f6OfBIsBf5N/FGNa/vkWQ=
Subject key identifier: F5:4A:3E:24:BC:6F:CA:DE:BA:55:FC:90:6C:CC:AB:42:05:59:11:AC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0E81094F4E0B04631FD7CF6ADE61A6D8F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9Uo-JLxvyt66VfyQbMyrQgVZEaw.roa
Signing time: Mon 28 Sep 2026 12:49:55 +0000
ROA not before: Mon 28 Sep 2026 12:49:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219268
IP address blocks: 151.241.165.0/24 maxlen: 24
151.247.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:10:94:f4:e0:b0:46:31:fd:7c:f6:ad:e6:1a:6d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 28 12:49:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f54a3e24bc6fcadeba55fc906cccab42055911ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7a:e1:a9:a7:51:db:e8:b1:b7:f5:5a:2d:1a:
12:f9:5a:ff:9e:11:d4:83:a4:6c:54:e9:64:0d:aa:
a0:e0:b1:ed:6b:64:a5:62:6e:dc:c0:22:00:4a:90:
9d:42:47:11:72:d2:69:75:1e:b7:fb:ac:fd:d2:ee:
67:4e:b5:e9:be:ee:4c:3e:6a:6a:f5:99:69:ba:d0:
c8:a6:29:05:4b:cf:40:07:0c:91:30:f5:e0:39:7b:
cd:a3:9c:82:11:b3:34:ed:2a:06:47:08:41:4f:aa:
79:74:c0:22:ca:ea:55:23:e4:c8:93:27:33:ff:b5:
3d:07:2b:10:0f:fd:35:e5:b5:a3:40:79:e3:1d:8d:
0c:e5:e6:40:13:b8:42:d4:98:a2:a0:aa:07:1d:b6:
81:4a:77:2c:0e:88:72:3f:01:e4:1f:59:4f:a9:8a:
c7:22:d4:10:b9:63:97:4e:03:0c:2e:a2:a2:bf:a2:
18:5e:00:ac:34:9f:d0:c8:52:53:cf:33:e3:fa:d9:
7c:9a:d5:ba:44:45:6f:79:d0:48:58:45:1f:20:37:
60:da:39:d0:d0:47:26:11:5d:df:f6:8b:17:5a:f5:
5c:47:e4:9e:2d:b9:24:58:ca:f5:df:89:c0:06:b4:
16:a8:56:24:55:18:d8:cc:07:5e:05:1a:90:fe:48:
3c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4A:3E:24:BC:6F:CA:DE:BA:55:FC:90:6C:CC:AB:42:05:59:11:AC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9Uo-JLxvyt66VfyQbMyrQgVZEaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.165.0/24
151.247.84.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:ec:f0:5d:87:0c:63:84:92:b5:d7:a4:e7:20:65:c3:87:0d:
71:85:f2:0f:cb:38:9c:c0:37:12:b2:9a:a4:76:35:91:62:71:
fb:4b:b3:20:f9:d8:65:5d:26:39:e2:09:9c:29:2f:c9:08:8c:
60:96:8f:e1:6e:50:ac:59:19:67:00:89:c2:f3:df:70:7e:ed:
06:0e:36:0d:c4:b7:d9:43:0f:44:66:38:e2:51:d6:15:d1:3a:
93:02:69:f6:95:90:83:89:ad:91:a5:3b:83:8f:1f:ea:c0:98:
e8:8a:69:c1:e3:25:dd:f2:45:b0:d7:25:e9:26:72:0c:18:3b:
f3:43:d5:59:88:f5:ad:bd:39:fa:c4:e1:96:3d:08:8b:15:42:
f3:96:2d:a5:56:5f:79:2c:17:e1:84:02:b1:ad:c5:51:c5:65:
df:a2:5e:e9:ed:98:54:ee:92:a1:e1:cb:f7:cd:da:9b:2d:48:
48:62:ab:7e:21:24:55:c2:7b:6d:a9:9a:24:db:24:8d:ce:c1:
3f:e2:62:95:47:8f:02:c9:d5:ad:86:52:9a:25:46:e3:4b:be:
a1:4d:b6:5c:81:7c:e6:a5:0c:b8:0f:38:b3:2b:7b:d8:17:9b:
44:5f:f5:bf:e5:f4:7c:ae:8e:57:20:ff:e0:e7:67:04:be:a4:
c1:48:95:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:29:11 2026 by rpki-client