Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/INaz9rZ0cSfIa7fhQwwCoG_JtGc.roa
File: INaz9rZ0cSfIa7fhQwwCoG_JtGc.roa (raw, json)
Hash identifier: kZUTiGitPJxDXfiW0xYcKETLLAgzryZ2L3s8eAXGbuY=
Subject key identifier: 20:D6:B3:F6:B6:74:71:27:C8:6B:B7:E1:43:0C:02:A0:6F:C9:B4:67
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A10AF2F5E3C3EB73A3A2FBBB56E7C49F13
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/INaz9rZ0cSfIa7fhQwwCoG_JtGc.roa
Signing time: Mon 05 Oct 2026 07:24:17 +0000
ROA not before: Mon 05 Oct 2026 07:24:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 151.246.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:f2:f5:e3:c3:eb:73:a3:a2:fb:bb:56:e7:c4:9f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 5 07:24:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20d6b3f6b6747127c86bb7e1430c02a06fc9b467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:81:e1:bc:1a:c3:7a:f1:8f:7f:68:12:30:
16:22:9a:f4:b6:7c:8b:39:8c:46:2d:82:be:65:29:
21:01:ea:22:91:3b:17:d9:bc:0b:77:38:ac:bf:02:
62:96:ef:69:2b:c8:d8:65:3f:44:71:0f:08:8b:20:
43:1c:76:4d:67:6c:f0:27:57:42:f0:4a:0c:3f:22:
4e:aa:32:64:70:a8:63:65:3f:62:e2:e2:f3:b8:1c:
cf:46:1d:17:49:14:5e:5b:f2:a0:62:0c:ee:bb:78:
40:05:84:12:80:6e:37:cf:be:f9:61:84:53:41:90:
6a:1d:c5:06:61:41:df:46:51:55:12:e9:d6:f9:2b:
67:f4:40:7e:04:11:34:7d:62:f1:1c:11:41:48:c8:
75:19:34:ac:43:82:7c:e7:24:47:3e:38:ef:52:bb:
c1:d6:77:e9:28:c3:6b:3e:2b:79:58:fb:8a:51:d1:
e5:be:97:d3:d3:a4:9e:b6:76:46:d9:22:2f:35:63:
28:1b:5e:f5:7f:d3:55:57:fb:ed:63:76:fd:a1:55:
d0:d9:7b:45:f7:0e:00:e2:5b:5c:f5:40:85:f8:3d:
96:ff:f0:62:67:6c:c8:34:85:e1:3e:e4:1f:d4:f9:
ad:31:a4:40:58:95:a4:dc:4b:ae:a0:3e:ae:2d:02:
07:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D6:B3:F6:B6:74:71:27:C8:6B:B7:E1:43:0C:02:A0:6F:C9:B4:67
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/INaz9rZ0cSfIa7fhQwwCoG_JtGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.132.0/24
Signature Algorithm: sha256WithRSAEncryption
60:e3:dd:91:94:35:c6:53:06:7d:7d:3c:6a:89:19:f0:a4:66:
cb:f5:3f:42:d3:e8:46:84:43:95:e3:fd:07:6a:0e:1a:32:10:
9b:86:2c:5e:29:84:a4:e8:fe:3b:ec:0b:91:f9:59:81:d9:d6:
30:b9:22:97:43:91:44:7d:e7:da:25:5d:9c:44:65:2f:0e:f4:
cc:ff:0b:b4:75:54:49:fd:dd:9c:1e:62:68:92:3f:30:1d:d4:
3c:b4:37:f1:c7:5f:7c:4a:f1:51:44:93:3e:6f:e1:e8:30:2b:
4b:6b:aa:e8:e0:dd:63:41:e7:ee:02:f5:2a:c0:15:c7:75:9d:
19:1d:09:ab:fb:93:bf:27:26:df:d7:21:30:15:69:4b:9d:05:
65:1a:30:16:6c:cd:c8:59:15:55:4d:77:ce:ed:39:58:ba:2b:
c1:e5:f2:8c:19:1e:ea:56:91:d4:10:a7:fb:cd:ab:bd:d5:65:
88:20:42:c8:ce:a6:95:4b:35:e4:7d:df:fd:ce:0b:99:6c:49:
59:14:5e:c6:1b:33:01:46:d3:58:9e:39:93:d0:bf:19:99:57:
0c:8b:ab:86:d5:05:fe:64:af:fa:20:23:1a:66:4c:6e:ad:e7:
12:60:51:63:d3:a6:93:60:1e:ad:2e:d2:76:63:61:43:6d:5e:
a6:6c:5c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:25:34 2026 by rpki-client