Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KLiCVJi9DsrMkTKD84YQfYffXJI.roa
File: KLiCVJi9DsrMkTKD84YQfYffXJI.roa (raw, json)
Hash identifier: LcOOfrGXRr1j1nkDBkdM7r1GVc5/MUyyXp/dfADiib4=
Subject key identifier: 28:B8:82:54:98:BD:0E:CA:CC:91:32:83:F3:86:10:7D:87:DF:5C:92
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019ECF9F2A5D952E22002A2E81B5736B7A05
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KLiCVJi9DsrMkTKD84YQfYffXJI.roa
Signing time: Tue 16 Jun 2026 08:49:35 +0000
ROA not before: Tue 16 Jun 2026 08:49:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215607
IP address blocks: 151.243.32.0/24 maxlen: 24
151.245.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 10:19:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:9f:2a:5d:95:2e:22:00:2a:2e:81:b5:73:6b:7a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 16 08:49:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28b8825498bd0ecacc913283f386107d87df5c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:59:e9:90:0f:59:f4:ab:24:a2:8e:de:cb:
db:90:c0:a9:f3:3a:7e:a1:e3:09:c9:8b:03:68:f0:
30:75:76:15:9f:3b:e1:e5:7e:7f:23:d5:8c:24:e3:
50:72:6c:15:b8:7c:65:93:8a:a5:66:88:a1:3f:8c:
16:be:cd:21:e7:06:53:c2:0c:41:ca:74:71:28:9c:
79:b0:60:fe:0e:1d:a2:0f:82:91:7c:e9:36:ea:f2:
70:32:11:0a:3a:00:46:a7:b5:a9:46:3d:93:86:76:
66:61:a3:95:9d:56:87:9a:aa:0c:f5:40:c4:d0:15:
34:62:c5:7c:bf:7b:9e:23:4c:fa:f0:0b:db:4d:bd:
cb:8a:ee:7d:7e:4d:6f:07:bb:a1:ce:84:f9:06:c1:
24:ca:65:c1:76:47:e1:3d:f1:d5:3b:9e:0d:17:8d:
e1:82:39:ee:9b:59:c8:5d:1a:cd:cd:2f:56:b2:d5:
c0:62:f7:47:2e:1e:97:d9:1c:17:37:01:3f:a4:b5:
8e:cd:c1:d0:65:01:24:84:45:e0:b0:73:4e:72:e9:
05:92:2f:3b:4d:e3:ef:5e:5a:8a:b2:7e:c4:c5:ed:
ae:57:df:ef:af:19:1f:e0:10:17:fa:15:f8:05:1b:
18:97:cb:e3:27:6e:39:f9:02:3c:78:ab:58:92:23:
59:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B8:82:54:98:BD:0E:CA:CC:91:32:83:F3:86:10:7D:87:DF:5C:92
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KLiCVJi9DsrMkTKD84YQfYffXJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.32.0/24
151.245.165.0/24
Signature Algorithm: sha256WithRSAEncryption
98:55:3f:77:26:ac:f0:0a:57:ee:92:18:43:ce:d1:73:9b:da:
04:fd:aa:4d:0b:44:e9:c8:7e:1d:c9:84:87:07:9d:d7:3e:ed:
35:90:fb:05:81:a2:57:20:18:c6:e3:ad:77:48:cf:1e:16:ab:
05:05:1c:38:c0:1d:06:35:ba:75:b1:2e:bf:15:0b:88:be:d9:
29:11:17:3a:5b:86:4c:57:ad:c9:95:f8:36:53:e8:ce:f5:2e:
1c:28:42:8d:fc:99:18:47:ac:6e:a4:c7:28:27:ef:ba:fe:6f:
f0:5c:7a:6b:32:60:bb:fd:02:4f:e1:09:a2:e5:e2:7a:e4:39:
33:24:2f:ad:c4:f1:2d:af:6c:41:80:f9:32:45:8d:a6:7c:47:
90:da:ad:83:d9:7e:8d:29:50:23:12:d0:30:69:bc:ff:97:0a:
18:86:7d:4e:23:ed:3c:1c:c9:1d:07:1d:63:40:4c:f1:9b:9e:
3e:26:f7:e5:b7:f0:22:ab:ee:62:0f:f0:fc:3b:84:98:6c:cb:
71:1e:d5:1b:68:77:ca:a6:5f:81:a9:84:cc:c9:13:81:ae:4a:
3d:1b:69:dd:72:86:68:32:00:b3:ed:57:8b:dc:0f:7b:48:d7:
76:d9:18:86:92:3e:09:10:30:60:ef:43:b7:48:06:97:72:64:
55:b7:54:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 18:20:44 2026 by rpki-client