Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GeBpgPxiqmoQlzJsrxMrabxo1rs.roa
File: GeBpgPxiqmoQlzJsrxMrabxo1rs.roa (raw, json)
Hash identifier: koTOwvU1CrhkzFK2lfr3e1iCVwR+wD9rgwVleh78PFA=
Subject key identifier: 19:E0:69:80:FC:62:AA:6A:10:97:32:6C:AF:13:2B:69:BC:68:D6:BB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E4E32455B0A27A3CA05D828FC0A367745
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GeBpgPxiqmoQlzJsrxMrabxo1rs.roa
Signing time: Fri 22 May 2026 05:39:37 +0000
ROA not before: Fri 22 May 2026 05:39:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153568
IP address blocks: 151.243.183.0/24 maxlen: 24
151.243.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:32:45:5b:0a:27:a3:ca:05:d8:28:fc:0a:36:77:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 22 05:39:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19e06980fc62aa6a1097326caf132b69bc68d6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a4:46:b9:f6:9f:cd:1a:a7:c5:33:33:3a:09:
b3:1c:35:3d:19:59:32:68:be:7e:55:be:46:78:2f:
3a:ef:69:bc:b4:64:d6:d4:c3:13:8d:69:43:93:d1:
43:0c:95:95:b4:e7:69:d1:46:f2:d8:09:b3:7e:10:
29:e0:67:fd:cf:72:62:26:92:68:3d:b9:48:75:f9:
ac:07:cc:04:76:d6:0d:60:fc:fe:29:ef:c4:36:50:
9e:fe:43:5a:18:bc:3f:7b:33:92:8d:e1:18:cc:fb:
66:c2:93:5c:a2:96:00:74:e4:85:bf:29:b8:28:0d:
e6:db:5b:e8:11:69:c6:68:3d:bf:f9:59:2b:b2:80:
51:c6:9d:68:43:aa:39:f5:69:13:cb:90:7e:9e:e2:
74:72:7e:d5:66:06:27:98:a6:09:77:ab:50:64:c4:
03:74:68:a7:a5:a2:6d:b8:a6:80:75:85:72:e4:a0:
a5:7e:b1:ad:c7:24:b7:8d:79:da:94:24:91:53:3d:
bf:3d:8c:43:c3:e9:77:d7:79:ee:99:fb:03:4d:b1:
60:19:f1:e1:60:02:b1:cd:50:ab:88:bd:c6:49:c7:
1c:22:d6:46:82:27:70:dd:f9:82:ff:6a:83:f4:76:
94:97:3f:6e:d3:b8:c3:1e:70:1f:cc:a8:96:e6:d1:
01:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E0:69:80:FC:62:AA:6A:10:97:32:6C:AF:13:2B:69:BC:68:D6:BB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GeBpgPxiqmoQlzJsrxMrabxo1rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.183.0/24
151.243.234.0/24
Signature Algorithm: sha256WithRSAEncryption
44:e2:f9:77:07:72:75:6a:3c:67:64:fb:5f:7b:c6:45:08:2d:
94:3b:f4:0b:8e:9d:0b:ab:56:91:d6:f3:03:d4:b9:73:8f:f4:
79:e2:48:46:a8:5f:d1:d3:b8:dd:e2:fa:d5:cb:b8:55:68:ff:
e7:4d:01:22:67:54:7f:db:4c:72:63:cf:af:92:4f:cc:26:92:
5a:ed:e3:d2:d3:24:00:37:d5:2c:ad:87:3f:37:12:a4:10:de:
4d:a4:bc:d3:07:11:ac:69:4d:ad:1d:ee:bf:e3:4e:f3:64:57:
28:8f:67:a3:a0:4b:f2:88:40:fb:78:a5:67:7e:59:2e:0d:a0:
de:59:67:d3:c6:7e:e3:10:be:b8:25:8a:76:b6:e8:a2:34:7b:
ba:5a:be:c2:49:d1:c7:bf:83:47:8a:e5:9d:92:6a:09:66:7c:
46:70:a1:b8:41:53:99:cf:49:3d:4c:45:9b:9e:e9:9d:7b:9f:
b3:eb:ca:80:ba:42:d7:f1:19:66:bb:e2:c0:c9:e1:ee:f6:56:
95:08:be:cc:c1:37:be:77:ca:6c:b0:5e:cb:25:aa:36:31:90:
7d:0b:fd:d8:76:3f:02:b0:f3:19:ec:9f:17:2e:19:81:30:2b:
b6:8e:70:f7:3d:92:d8:a7:ec:02:a4:fc:3a:19:f6:be:7f:15:
e2:0f:ea:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 08:31:45 2026 by rpki-client