Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/B2zhjMFkUEO9HNcL6j-9kQP-Q08.roa
File: B2zhjMFkUEO9HNcL6j-9kQP-Q08.roa (raw, json)
Hash identifier: WKmERxGvaK0fnN7eYQYA9fvUHw+GMGlrY5Ck1/MUWgc=
Subject key identifier: 07:6C:E1:8C:C1:64:50:43:BD:1C:D7:0B:EA:3F:BD:91:03:FE:43:4F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019C2DBB481CAB22A2D995DCF1FD7B758C9F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/B2zhjMFkUEO9HNcL6j-9kQP-Q08.roa
Signing time: Thu 05 Feb 2026 12:16:14 +0000
ROA not before: Thu 05 Feb 2026 12:16:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135391
IP address blocks: 151.242.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2d:bb:48:1c:ab:22:a2:d9:95:dc:f1:fd:7b:75:8c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 5 12:16:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=076ce18cc1645043bd1cd70bea3fbd9103fe434f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8a:8f:7c:27:fe:6a:06:a6:f6:c4:ec:99:c7:
e7:4c:a6:64:fc:18:e9:17:d0:bd:18:86:5b:14:d0:
fa:e4:4a:5e:3d:35:f1:69:d2:c0:67:65:c0:e4:b5:
86:24:0b:fd:d4:59:9b:b4:35:61:93:e8:9a:90:01:
61:55:b6:8c:5c:46:f9:39:2b:55:db:38:13:89:d5:
4b:c3:f2:4b:85:c0:71:c1:23:39:46:1c:0f:0e:62:
19:a7:42:0f:5c:07:62:a2:2a:e1:f8:b1:cb:e5:f8:
fd:aa:f1:6a:16:d1:f7:ee:6c:62:e9:a2:a0:c2:00:
b1:9f:b1:f6:06:02:ae:10:70:dd:6d:be:c1:56:a0:
b4:f7:65:a4:fb:ae:23:a6:03:af:04:79:7f:8f:91:
10:21:d7:42:12:b8:49:4e:58:c9:0b:19:58:2c:fc:
19:a9:e9:d2:87:fe:40:d0:f8:50:b1:a7:35:25:01:
65:85:b0:0c:f8:dc:ca:e7:88:28:0d:b9:dd:ef:79:
00:d8:ad:de:c0:76:b9:da:73:6a:7b:9a:2f:16:bd:
9d:50:4a:c6:58:56:ba:ff:05:cd:d3:c0:e1:54:a3:
c3:ee:eb:9c:86:a6:d0:bf:b7:a2:67:e7:4f:96:b1:
8e:16:11:f6:65:42:84:85:c2:11:d9:78:1f:bb:fa:
3a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6C:E1:8C:C1:64:50:43:BD:1C:D7:0B:EA:3F:BD:91:03:FE:43:4F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/B2zhjMFkUEO9HNcL6j-9kQP-Q08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.66.0/24
Signature Algorithm: sha256WithRSAEncryption
58:04:27:f9:b3:5d:67:27:d8:56:a9:5a:88:fb:07:82:9a:00:
28:65:8c:2f:b6:72:66:17:d4:95:a6:c1:4f:6a:16:9c:70:89:
d8:05:80:ca:fd:f4:d9:cb:e8:44:7e:ca:aa:e8:c0:ee:df:4e:
dd:5a:9d:76:86:c2:6e:89:64:d5:c0:74:3b:6f:d9:a4:7f:09:
f7:d9:50:03:65:f9:69:d9:43:4f:56:6d:e2:46:4a:8b:e1:f2:
a2:b9:f2:84:3a:6e:ad:7a:8e:2e:db:23:eb:50:9d:78:12:21:
92:ad:78:1e:ef:a1:dd:c9:c6:d8:fe:e6:9b:2d:b8:e6:7f:10:
e5:2b:ff:40:43:6a:03:1e:61:45:1b:8b:b7:bb:27:99:17:1d:
7b:fd:e6:d1:8b:b2:32:61:e4:50:c1:ac:9d:85:a1:c1:5f:71:
87:dc:79:2b:a8:5e:bb:da:41:37:d3:01:48:bb:e1:4b:d6:32:
0a:19:d7:00:9a:fd:90:47:e4:97:2f:bf:ba:25:1b:4f:2a:bc:
82:57:f9:25:84:38:1e:21:6d:1c:e1:c7:23:f2:02:88:f3:8f:
81:e7:0a:d0:da:91:ff:a3:0c:db:ca:e3:85:7a:41:f3:ce:9d:
86:86:72:db:54:5e:6e:79:84:94:21:2a:f0:81:ff:23:11:d9:
2f:90:e4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:40:48 2026 by rpki-client