Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/D1JFBd32IEyDn5CdnXiJCwZal5g.roa
File: D1JFBd32IEyDn5CdnXiJCwZal5g.roa (raw, json)
Hash identifier: tPgelQWPNSvrVGjIEbO8gvG9Js9Iu6WNoVRcHTJNMR0=
Subject key identifier: 0F:52:45:05:DD:F6:20:4C:83:9F:90:9D:9D:78:89:0B:06:5A:97:98
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A07FA126294ED87A244457CDFF35497D65
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/D1JFBd32IEyDn5CdnXiJCwZal5g.roa
Signing time: Tue 08 Sep 2026 06:07:42 +0000
ROA not before: Tue 08 Sep 2026 06:07:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219160
IP address blocks: 151.241.12.0/24 maxlen: 24
151.246.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:a1:26:29:4e:d8:7a:24:44:57:cd:ff:35:49:7d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 8 06:07:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0f524505ddf6204c839f909d9d78890b065a9798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:80:8e:74:45:33:bf:6a:bf:95:6b:e8:60:68:
2a:25:d1:36:02:fa:f5:a6:82:fc:d9:f5:56:6a:14:
b7:9f:8c:38:5b:cd:8e:87:9a:07:ec:a5:09:23:93:
55:cc:ee:9a:af:a5:04:c4:ec:60:51:ab:af:70:72:
e5:2a:a3:53:ff:38:20:b4:8c:1f:9d:e9:54:ca:23:
9f:8a:c4:29:5d:64:38:87:a2:c7:50:53:5d:5a:c8:
14:48:10:63:8b:6b:2b:80:90:f3:a0:34:a8:6c:68:
a6:dc:a2:fb:88:c0:8a:9c:0d:4a:a4:91:05:2c:c2:
5b:2e:dd:dd:b4:b5:74:dd:e6:57:fa:4d:7f:bb:e5:
95:97:2e:a1:ce:d8:95:73:68:5a:fb:87:5c:a4:e5:
f5:40:09:19:4b:99:fb:57:3a:ec:83:2b:0f:f1:5c:
98:d1:7f:e3:27:d3:b0:f9:ef:67:77:eb:07:83:04:
b5:d3:f9:c8:ce:3d:7b:b8:7a:1b:37:3b:b9:c9:e0:
12:68:0c:9c:ae:2d:ea:e5:ff:d3:93:65:4d:01:7a:
9d:24:06:52:53:32:d6:e1:bd:85:8a:5d:f7:7e:89:
4f:f8:db:e4:51:d8:ad:3d:a0:8b:a5:e5:80:d4:d5:
84:ca:9c:f3:d4:91:5c:70:16:26:a9:32:84:7b:51:
2f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:52:45:05:DD:F6:20:4C:83:9F:90:9D:9D:78:89:0B:06:5A:97:98
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/D1JFBd32IEyDn5CdnXiJCwZal5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.12.0/24
151.246.181.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ec:1e:df:f4:11:d0:62:39:57:f7:03:7c:f8:94:06:e0:b9:
d7:2b:d9:83:2b:37:7c:0e:f7:26:29:7a:53:a0:31:a4:e9:1d:
35:1f:e4:02:d7:d2:88:4b:37:2b:2d:cf:b0:bc:75:a0:77:e8:
73:76:86:95:00:bb:ae:c1:31:e9:93:4b:18:2b:8e:d6:5e:23:
53:a4:bb:c7:fb:9e:f6:43:c3:11:53:ac:00:bf:80:6e:8f:d9:
2e:d6:67:76:b2:71:09:78:42:0f:77:ee:a8:25:96:d6:73:f2:
53:57:31:ed:e7:fc:af:17:4b:9c:f6:07:de:e1:b2:02:af:e3:
56:5e:44:74:d1:f7:42:69:6a:2f:d4:52:88:5d:8d:32:33:08:
a8:65:ed:95:94:cc:99:ff:b9:7a:f5:f4:81:db:a2:90:6d:ef:
72:39:be:5d:f9:a7:1c:7f:dc:a0:98:fa:ca:71:4f:c0:fc:0b:
ad:dd:8d:c9:53:a4:4a:40:41:a4:c4:06:6f:02:84:34:c2:4c:
0b:38:64:cb:a2:34:67:5f:d7:9d:45:fc:56:30:f3:e1:9b:93:
9b:c2:ba:3a:fd:15:b4:53:2b:6f:7c:98:12:6a:88:f9:6c:4c:
0e:74:ab:2b:1e:23:0c:c8:30:56:c7:ad:9c:29:33:ff:fc:c7:
0e:0a:74:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 21:03:41 2026 by rpki-client