Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KK1OCoW3vpOoPR6bAIjHfhCawF8.roa
File: KK1OCoW3vpOoPR6bAIjHfhCawF8.roa (raw, json)
Hash identifier: qYj3nleSn7Xr2/cV4o3MVX1RXnBn/Lv8F7yUz7RqO2I=
Subject key identifier: 28:AD:4E:0A:85:B7:BE:93:A8:3D:1E:9B:00:88:C7:7E:10:9A:C0:5F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A11B5C28BEB997EEC83BDB1A23322B7F39
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KK1OCoW3vpOoPR6bAIjHfhCawF8.roa
Signing time: Thu 08 Oct 2026 11:53:06 +0000
ROA not before: Thu 08 Oct 2026 11:53:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 151.241.1.0/24 maxlen: 24
151.243.134.0/24 maxlen: 24
151.244.163.0/24 maxlen: 24
151.246.132.0/24 maxlen: 24
151.246.133.0/24 maxlen: 24
151.247.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:5c:28:be:b9:97:ee:c8:3b:db:1a:23:32:2b:7f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 8 11:53:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28ad4e0a85b7be93a83d1e9b0088c77e109ac05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1c:94:02:99:98:b1:5e:b2:5c:81:6c:fc:ad:
49:05:ff:61:44:02:60:ef:cc:a3:2d:97:a5:f3:bd:
ea:97:be:b8:d7:62:e7:1c:a9:38:1f:ba:fb:f7:31:
ce:87:04:a9:c4:df:85:54:43:bb:ef:7e:af:0d:d7:
91:83:28:c0:40:f2:75:65:e1:b6:6c:55:ec:cb:f5:
f3:7a:45:ea:d6:2d:57:67:4a:c8:7a:d0:55:c4:02:
79:a5:c5:5b:c5:da:c0:58:66:af:cc:a0:ee:68:7b:
32:c0:39:de:5a:41:d6:07:52:5b:f0:8d:2c:08:97:
07:9a:58:0d:fe:5b:ad:1f:6f:eb:c9:ae:8a:af:64:
2f:56:b7:7a:e3:8c:1b:c6:0a:0e:c9:98:7c:9b:11:
a7:3e:5c:7c:82:91:88:fe:7e:22:c5:c1:1b:9c:2e:
55:55:a8:5b:ce:47:1e:47:66:63:d9:9a:9c:6c:68:
f7:e2:0c:e5:e7:33:74:04:fe:35:3d:d8:63:2d:09:
0b:26:f8:a0:e6:99:e2:86:79:97:6f:f7:28:80:7f:
70:ba:b3:b1:c8:67:d8:4f:24:bd:e5:57:39:bd:01:
86:6d:4f:5e:48:31:38:53:79:d1:6b:13:01:dc:a9:
93:41:1a:21:7e:d6:6d:d2:2d:e7:81:ca:6e:6b:b8:
d7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AD:4E:0A:85:B7:BE:93:A8:3D:1E:9B:00:88:C7:7E:10:9A:C0:5F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KK1OCoW3vpOoPR6bAIjHfhCawF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.1.0/24
151.243.134.0/24
151.244.163.0/24
151.246.132.0/23
151.247.2.0/24
Signature Algorithm: sha256WithRSAEncryption
af:52:b5:2a:29:b1:24:54:91:d5:4a:b9:1e:b0:21:b3:0c:13:
e9:af:4b:2d:ce:c7:cc:56:cd:03:60:fd:52:1a:4e:c4:0c:fa:
6a:20:72:d4:dd:6d:01:51:94:91:de:26:55:25:39:ec:44:71:
0f:04:48:6b:fb:21:03:32:4f:40:cc:10:8f:2d:46:1d:86:71:
a0:9e:e0:3b:e5:37:7e:2e:a6:50:7e:86:f5:10:7b:f1:a4:f1:
31:bf:3b:0e:b2:f3:b3:b7:2a:14:16:f1:96:9f:e7:b0:02:11:
10:e4:ce:54:d9:0f:df:c7:86:79:82:46:d8:c9:0f:07:c1:bc:
47:2b:0f:6a:22:c5:1a:52:bf:d5:a2:ba:4e:43:ac:76:37:dd:
42:14:a6:d5:23:0d:03:7a:2b:68:a1:4a:12:1c:8d:3e:aa:2f:
85:f1:3a:f5:59:6d:f9:06:07:85:40:dd:fb:26:cc:df:d9:3f:
8c:82:62:64:a1:ec:55:50:31:d6:90:54:1f:42:0d:64:b4:93:
09:63:d2:6b:6e:ed:5a:0b:63:d0:83:8a:0e:00:c1:8d:22:c9:
72:4e:b1:2d:2a:93:81:22:99:06:b9:05:3a:34:91:75:77:82:
c8:b6:d7:dd:84:92:51:de:3d:39:98:47:1d:7e:ca:9c:a1:2b:
ac:0d:f0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:47:31 2026 by rpki-client