Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CdKTz2pjRR2JMeA49CBbeE4bGuQ.roa
File: CdKTz2pjRR2JMeA49CBbeE4bGuQ.roa (raw, json)
Hash identifier: ytp7A+12tioAzgLgqgU5i7MIHDYlh4zoSHFCOIQ25oo=
Subject key identifier: 09:D2:93:CF:6A:63:45:1D:89:31:E0:38:F4:20:5B:78:4E:1B:1A:E4
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F11F37DB6ABD92FD4D4AE38EE61AF43F2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CdKTz2pjRR2JMeA49CBbeE4bGuQ.roa
Signing time: Mon 29 Jun 2026 05:56:37 +0000
ROA not before: Mon 29 Jun 2026 05:56:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 151.242.112.0/24 maxlen: 24
151.244.3.0/24 maxlen: 24
151.246.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f3:7d:b6:ab:d9:2f:d4:d4:ae:38:ee:61:af:43:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 29 05:56:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09d293cf6a63451d8931e038f4205b784e1b1ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e3:8d:51:d9:f8:b8:00:a0:b6:4f:41:04:d4:
c7:b7:06:d3:a7:98:e7:72:a9:41:9e:3c:50:df:f6:
c2:c2:b0:bd:41:fc:6c:fb:10:89:53:c1:18:c0:bc:
5b:39:ea:81:00:4e:28:02:74:07:0f:09:cf:11:5f:
94:60:78:d4:c7:f3:7c:f3:bd:49:da:82:60:b9:23:
dc:54:bc:82:b0:73:ce:81:6e:ce:54:27:7b:e0:9e:
14:c5:c2:d4:01:be:07:62:0f:2c:f3:a3:9b:47:25:
2c:7e:af:03:1d:8c:26:de:51:aa:f1:12:7e:79:64:
23:67:af:94:cd:58:dd:88:3d:eb:8f:1e:fc:68:ba:
bc:d2:7c:5b:a9:c8:0d:6d:51:b4:65:80:36:37:88:
72:11:89:ef:77:24:7b:57:4e:bf:02:8b:a7:96:74:
ea:00:b8:97:a9:fd:33:a2:94:93:0d:36:bb:72:04:
f8:ab:6b:74:79:7d:81:1c:56:ac:05:8f:fd:d2:b8:
13:01:6b:10:34:27:e7:45:45:d4:e7:71:b1:1d:00:
a6:c9:b7:34:48:95:61:0e:3a:df:ee:ec:1c:5e:8c:
91:73:1b:9b:ca:15:6b:1e:f1:9f:71:e5:81:cb:16:
67:a2:38:f4:75:d3:fb:ab:0e:ba:15:ef:b3:62:a5:
06:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D2:93:CF:6A:63:45:1D:89:31:E0:38:F4:20:5B:78:4E:1B:1A:E4
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CdKTz2pjRR2JMeA49CBbeE4bGuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.112.0/24
151.244.3.0/24
151.246.130.0/24
Signature Algorithm: sha256WithRSAEncryption
72:9a:cd:25:33:c0:aa:2a:b5:4b:e9:b2:83:a2:08:02:9e:b5:
a5:56:a3:14:7d:f1:81:29:ef:7b:8f:b8:13:c5:55:43:b6:67:
1f:56:f7:8f:95:2a:f1:f3:95:a6:3d:eb:86:16:e6:59:e7:95:
ac:a9:6d:81:99:0d:1b:52:92:e1:e5:37:a9:84:b6:8e:eb:80:
cd:e0:09:e6:9c:0c:18:f4:63:38:f2:db:5c:5d:e8:0a:ac:0c:
0b:cc:2a:52:20:76:ed:09:aa:af:74:e1:03:86:fb:85:97:6b:
57:09:55:4b:a3:1b:b5:59:9a:19:d6:f1:8a:17:0c:ad:9d:17:
b5:44:98:ce:28:ad:3f:c4:50:93:78:4f:29:09:a2:87:8a:99:
6f:a9:a6:37:57:d1:ae:bf:fa:73:9f:43:35:68:b8:31:08:10:
7c:4e:b3:25:d5:39:23:b8:a7:ac:09:97:07:d1:79:01:86:ac:
fb:49:97:47:4f:96:14:a3:ef:ef:54:11:66:65:ca:6e:76:d2:
c5:98:2e:ae:25:81:9a:47:b2:33:78:28:32:6d:91:e5:07:bc:
f2:0f:ca:c6:4a:29:6b:b2:43:ae:28:9f:31:5f:46:89:03:a1:
1c:1c:cd:20:3b:07:a6:94:ab:e4:3c:dd:c6:4b:cf:a2:41:55:
51:33:4b:6b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ8R8322q9kv1NSuOO5hr0PyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNjI5MDU1NjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWQyOTNjZjZhNjM0NTFkODkzMWUwMzhmNDIwNWI3ODRlMWIxYWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuONUdn4uACgtk9BBNTHtwbTp5jn
cqlBnjxQ3/bCwrC9Qfxs+xCJU8EYwLxbOeqBAE4oAnQHDwnPEV+UYHjUx/N8871J
2oJguSPcVLyCsHPOgW7OVCd74J4UxcLUAb4HYg8s86ObRyUsfq8DHYwm3lGq8RJ+
eWQjZ6+UzVjdiD3rjx78aLq80nxbqcgNbVG0ZYA2N4hyEYnvdyR7V06/AounlnTq
ALiXqf0zopSTDTa7cgT4q2t0eX2BHFasBY/90rgTAWsQNCfnRUXU53GxHQCmybc0
SJVhDjrf7uwcXoyRcxubyhVrHvGfceWByxZnojj0ddP7qw66Fe+zYqUGYQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAnSk89qY0UdiTHgOPQgW3hOGxrkMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvQ2RLVHoycGpSUjJKTWVBNDlDQmJlRTRiR3VRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/JwAwQA
l/QDAwQAl/aCMA0GCSqGSIb3DQEBCwUAA4IBAQByms0lM8CqKrVL6bKDoggCnrWl
VqMUffGBKe97j7gTxVVDtmcfVvePlSrx85WmPeuGFuZZ55WsqW2BmQ0bUpLh5Tep
hLaO64DN4AnmnAwY9GM48ttcXegKrAwLzCpSIHbtCaqvdOEDhvuFl2tXCVVLoxu1
WZoZ1vGKFwytnRe1RJjOKK0/xFCTeE8pCaKHiplvqaY3V9Guv/pzn0M1aLgxCBB8
TrMl1TkjuKesCZcH0XkBhqz7SZdHT5YUo+/vVBFmZcpudtLFmC6uJYGaR7IzeCgy
bZHlB7zyD8rGSilrskOuKJ8xX0aJA6EcHM0gOwemlKvkPN3GS8+iQVVRM0tr
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:34 2026 by rpki-client