Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IQpiCzShqURcXV8E2DPXeYi938I.roa
File: IQpiCzShqURcXV8E2DPXeYi938I.roa (raw, json)
Hash identifier: AwEh/k3XkQiVGmcSZ/4458NzdBVXr7k7ZxWD2A6Ba4U=
Subject key identifier: 21:0A:62:0B:34:A1:A9:44:5C:5D:5F:04:D8:33:D7:79:88:BD:DF:C2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CDB95CAA1CB11ED3C3EC2F0E292C88EC4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IQpiCzShqURcXV8E2DPXeYi938I.roa
Signing time: Wed 11 Mar 2026 06:29:12 +0000
ROA not before: Wed 11 Mar 2026 06:29:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 268624
IP address blocks: 151.243.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:db:95:ca:a1:cb:11:ed:3c:3e:c2:f0:e2:92:c8:8e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 11 06:29:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=210a620b34a1a9445c5d5f04d833d77988bddfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a9:dd:42:ab:ca:75:f5:b5:0e:d1:ed:a4:00:
09:79:d2:36:c8:da:dd:6d:6c:2a:d0:53:ab:f4:03:
6b:e0:3b:42:f3:67:93:8c:35:20:74:72:8f:bf:82:
fa:29:1e:f8:03:49:b7:a6:27:dd:32:d7:b5:17:bb:
bf:db:ac:f5:0e:87:c2:70:70:f4:3a:53:0c:20:2b:
72:b0:ae:e9:f8:a1:88:d2:f9:88:04:94:97:ad:6f:
79:85:f6:35:f5:02:80:f2:95:bd:84:77:23:69:ce:
38:4d:9d:ae:76:00:7d:9e:97:ae:bf:a5:00:b9:21:
3c:e5:1d:64:5c:00:1e:07:13:72:56:34:a4:4d:8f:
43:79:1c:e9:cc:6a:17:ec:d4:c4:55:54:01:12:37:
17:e9:9b:e9:5a:df:b7:db:0f:23:7c:82:e4:64:aa:
60:8e:13:d7:a8:c8:4f:75:b9:44:41:15:79:4f:34:
9e:35:2c:b2:91:3f:50:d9:0a:42:91:5d:69:35:8c:
ac:14:2f:85:3c:f4:9a:a2:f3:3a:d2:73:34:c8:da:
10:d7:61:fd:ea:57:db:24:ce:87:20:dd:41:9a:db:
79:09:b1:0c:e9:5b:4a:2f:ef:56:68:81:4b:89:bb:
be:7e:c0:4a:0c:60:37:02:96:6b:19:8d:f8:89:43:
40:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0A:62:0B:34:A1:A9:44:5C:5D:5F:04:D8:33:D7:79:88:BD:DF:C2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IQpiCzShqURcXV8E2DPXeYi938I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.158.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:bf:e2:2e:a8:4f:b5:a6:58:43:fb:7b:b5:71:47:e6:6d:8a:
69:33:00:35:08:d4:41:14:74:60:31:4a:ac:ae:01:20:96:c0:
4d:5c:11:db:7f:a6:c5:19:64:72:a5:d9:05:e4:81:8d:d1:cd:
8e:c8:9b:c6:f7:50:5b:24:6a:32:b5:4b:3b:5f:79:44:d0:96:
e4:bb:e7:5b:73:ee:b9:44:7a:cc:0b:d8:2d:1b:52:7f:1b:b5:
34:1e:16:ba:e4:df:3f:b2:9a:3c:97:b3:7b:69:dd:cd:4c:fa:
1f:3c:8e:c9:1e:b1:6b:b3:5a:2e:be:6b:f4:b9:58:50:7f:d8:
eb:b3:ff:55:12:0a:2e:43:ff:d2:48:bf:f8:ed:4f:fb:8a:4a:
67:89:bd:73:89:ec:a5:8a:d2:3a:a2:b4:d7:c2:7c:fe:af:fb:
44:e9:86:59:6c:e7:95:bd:57:ca:46:9f:52:84:0b:ec:71:15:
37:2a:30:2f:2d:90:d0:4f:43:99:eb:74:b2:9b:f4:9d:f7:2e:
fc:f6:48:5d:04:d0:27:3e:e7:4b:cd:82:b1:db:21:be:d9:a2:
29:0e:e6:1e:bb:9b:78:ed:a5:bf:0e:55:c7:a7:33:4d:78:18:
16:b9:88:2a:d5:7e:8c:b5:db:7d:01:d2:9c:19:11:b4:d2:40:
70:71:5a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 19:04:13 2026 by rpki-client