Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FleqPLqJlgAUI3o62ikJI5S0F_A.roa
File: FleqPLqJlgAUI3o62ikJI5S0F_A.roa (raw, json)
Hash identifier: vPfJ+/rToD6vt6mDzDNypN/QeqLzUlB7yt2g5vbIzYA=
Subject key identifier: 16:57:AA:3C:BA:89:96:00:14:23:7A:3A:DA:29:09:23:94:B4:17:F0
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A12EDC0E1BB20632A9C1D0188988232FA3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FleqPLqJlgAUI3o62ikJI5S0F_A.roa
Signing time: Mon 12 Oct 2026 06:45:35 +0000
ROA not before: Mon 12 Oct 2026 06:45:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219105
IP address blocks: 151.241.23.0/24 maxlen: 24
151.246.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:dc:0e:1b:b2:06:32:a9:c1:d0:18:89:88:23:2f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 12 06:45:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1657aa3cba89960014237a3ada29092394b417f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8a:72:33:f4:ae:fb:ec:c1:41:3c:fd:4a:72:
60:28:22:3e:ff:2d:cc:bf:63:23:26:95:16:95:71:
63:5a:32:08:7f:5f:f7:d9:c1:2f:d7:28:1c:70:50:
09:08:46:6c:8c:42:e9:59:d8:2f:81:e8:74:4d:bd:
a2:3e:6e:b5:f1:54:94:cd:5b:ee:9c:07:eb:92:77:
c8:cd:6e:c2:a9:1d:d8:a4:f7:b0:45:84:59:53:74:
ee:3b:76:a5:6a:de:c8:6d:e7:cb:74:26:7a:31:0c:
25:8e:36:1c:d9:4a:04:09:ca:73:4e:97:ef:f8:28:
ad:0c:c7:0a:7e:f7:b2:e4:0e:57:8f:bd:a8:6b:4f:
a0:36:f2:a8:2a:65:2e:8d:53:73:e7:ee:63:3b:11:
7a:81:5c:d1:3c:d0:cf:49:ff:b2:67:08:af:44:de:
f0:93:4f:db:30:99:96:7b:2b:43:53:13:d8:07:58:
17:6d:83:24:4e:13:96:9c:14:4c:90:d8:d3:af:0f:
9f:04:d8:16:53:50:f8:d4:3e:1f:f4:08:6d:32:49:
6f:d8:1f:1e:63:cd:f3:91:6b:0a:b6:d5:d7:e6:ca:
6d:0f:00:70:40:69:67:d0:cf:f1:e0:10:7d:b7:7b:
1d:3c:91:a4:2c:c4:5e:a0:8f:28:19:e3:0f:6f:9e:
2e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:57:AA:3C:BA:89:96:00:14:23:7A:3A:DA:29:09:23:94:B4:17:F0
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FleqPLqJlgAUI3o62ikJI5S0F_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.23.0/24
151.246.5.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:cb:5c:b2:a4:1d:0f:d9:f4:79:83:60:35:ba:5b:78:ba:84:
2f:b6:5b:34:fc:0f:72:b9:75:81:c7:97:7b:5e:e7:c7:61:d0:
55:b6:1c:e0:bc:b9:6d:03:7d:5e:67:ee:cd:7a:d3:1b:4e:e1:
7c:ed:d6:18:56:fc:3f:e2:fd:c7:4c:44:69:ad:75:19:e3:79:
a2:d8:3c:00:db:e3:34:08:fe:96:fd:54:6d:b8:30:fd:44:fe:
26:52:cb:3e:86:e6:49:b0:04:8d:0b:0d:d5:b2:bc:65:12:b5:
5c:7c:ee:ce:12:b8:ff:55:6c:ef:4b:a7:4e:1a:1e:a6:99:eb:
a6:16:81:c3:29:06:99:5d:59:e8:49:22:55:68:5b:6c:5e:5f:
80:df:18:6f:b1:70:c5:a9:57:c4:07:6a:80:22:70:fb:08:a1:
d7:7b:42:5f:5d:29:ba:17:51:e5:49:66:62:f6:e4:98:f0:52:
ab:92:7a:d8:af:f8:e5:e8:a6:00:d7:d6:e1:dd:c3:0b:d2:a4:
c7:d6:5f:66:28:a4:96:32:44:2d:8a:64:c0:b3:c9:94:e8:42:
99:65:e3:32:7a:73:6a:e1:0a:92:f3:7d:5e:62:25:db:f5:59:
0e:4a:fd:56:8a:06:6e:62:d5:1c:04:80:76:7f:41:70:7c:b6:
2f:7b:84:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:44:10 2026 by rpki-client