Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OnIN8phsiZUEuxyPpzVNb5pU1uA.roa
File: OnIN8phsiZUEuxyPpzVNb5pU1uA.roa (raw, json)
Hash identifier: oCOuFXMx9vkGiHshEj3JfzFyzzKnasn9vAO2OPrf09g=
Subject key identifier: 3A:72:0D:F2:98:6C:89:95:04:BB:1C:8F:A7:35:4D:6F:9A:54:D6:E0
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FEA7C2725B6889F6F5D998B40DDA41303
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OnIN8phsiZUEuxyPpzVNb5pU1uA.roa
Signing time: Mon 10 Aug 2026 07:03:52 +0000
ROA not before: Mon 10 Aug 2026 07:03:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402315
IP address blocks: 151.240.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:7c:27:25:b6:88:9f:6f:5d:99:8b:40:dd:a4:13:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 10 07:03:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a720df2986c899504bb1c8fa7354d6f9a54d6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:12:b4:41:2a:a4:7b:4b:d6:0e:40:9a:01:89:
c0:95:e6:aa:44:71:73:f8:df:69:e4:ba:81:4f:75:
de:ba:06:28:b0:ed:05:c7:52:ec:51:e4:b3:54:e2:
59:1b:d3:78:31:00:8a:f7:2b:03:19:82:94:fb:c8:
fe:ac:4e:63:58:96:4d:a1:f6:48:e2:34:4b:e9:00:
39:37:bf:f7:15:64:ee:d5:8b:20:33:3c:a9:c0:d7:
4c:be:98:f9:30:8b:39:e1:e9:1f:5e:15:47:47:16:
e5:ca:a2:c2:bc:74:75:aa:b0:16:61:4c:87:a3:27:
51:76:6e:93:22:fb:1d:6a:67:8f:a4:b2:71:9e:a3:
d1:fd:1c:ff:a5:16:40:0d:3f:4b:20:b2:04:40:c0:
18:7a:73:66:5a:b9:3b:d9:2c:a9:22:ad:df:f0:e8:
92:8c:32:ef:58:52:cd:1f:a3:40:28:94:50:3e:c3:
fe:2c:fa:ab:f0:3a:98:37:fc:d9:ea:0e:d5:92:47:
65:a0:2d:8b:1d:89:70:b6:28:b2:84:7c:b0:d7:f0:
a3:de:32:b8:dc:0e:f3:50:b1:73:a9:18:76:0f:22:
e9:bf:ab:f7:47:e7:28:c7:69:c4:8e:85:7f:1e:fb:
46:21:62:84:20:c4:08:17:ab:b3:53:e0:fe:ab:f6:
66:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:72:0D:F2:98:6C:89:95:04:BB:1C:8F:A7:35:4D:6F:9A:54:D6:E0
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OnIN8phsiZUEuxyPpzVNb5pU1uA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.4.0/24
Signature Algorithm: sha256WithRSAEncryption
06:e2:35:3b:0c:15:48:b4:58:0e:6f:ff:d1:ea:2a:df:34:ca:
09:07:23:2d:4b:6b:31:41:a5:71:c6:23:2c:57:7d:42:0d:04:
7a:44:71:7c:b9:6d:50:8e:9b:15:6b:45:6a:7d:bc:34:46:61:
f6:d8:34:cd:4f:fb:d2:5e:27:e6:02:31:a6:e7:ec:e7:a8:3f:
a9:30:e0:18:82:c0:60:50:ac:96:23:b4:46:31:93:80:79:ce:
e7:27:2e:9b:49:bf:d7:f0:c6:d5:8e:4b:33:fc:4f:8e:4c:7c:
07:c7:72:40:f6:ef:29:37:f5:5b:0d:af:72:3a:13:e7:b7:85:
e9:f2:8f:af:c5:a1:90:38:ce:58:40:e4:66:3f:1a:fe:6e:ce:
d2:dc:4a:a1:94:c9:07:d0:6f:a1:d6:c8:db:20:df:1a:d6:0e:
e3:bb:8e:14:7f:49:bf:57:76:09:b8:b9:d1:20:a6:fe:24:59:
4a:69:f7:a2:20:82:04:b1:14:af:d1:1a:5a:3b:f1:25:41:92:
f6:aa:61:d8:1f:df:5a:78:3e:dd:68:fb:9a:cf:f3:ba:d6:8b:
93:42:25:f0:b3:e6:04:19:a6:6a:bb:84:c0:d2:b2:e5:9d:f0:
c7:8c:51:34:89:10:73:4b:42:36:17:f6:43:f3:6a:fa:98:a9:
25:6f:1e:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/qfCcltoifb12Zi0DdpBMDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwODEwMDcwMzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTcyMGRmMjk4NmM4OTk1MDRiYjFjOGZhNzM1NGQ2ZjlhNTRkNmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xK0QSqke0vWDkCaAYnAleaqRHFz
+N9p5LqBT3XeugYosO0Fx1LsUeSzVOJZG9N4MQCK9ysDGYKU+8j+rE5jWJZNofZI
4jRL6QA5N7/3FWTu1YsgMzypwNdMvpj5MIs54ekfXhVHRxblyqLCvHR1qrAWYUyH
oydRdm6TIvsdamePpLJxnqPR/Rz/pRZADT9LILIEQMAYenNmWrk72SypIq3f8OiS
jDLvWFLNH6NAKJRQPsP+LPqr8DqYN/zZ6g7VkkdloC2LHYlwtiiyhHyw1/Cj3jK4
3A7zULFzqRh2DyLpv6v3R+cox2nEjoV/HvtGIWKEIMQIF6uzU+D+q/ZmKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDpyDfKYbImVBLscj6c1TW+aVNbgMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvT25JTjhwaHNpWlVFdXh5UHB6Vk5iNXBVMXVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/AEMA0G
CSqGSIb3DQEBCwUAA4IBAQAG4jU7DBVItFgOb//R6irfNMoJByMtS2sxQaVxxiMs
V31CDQR6RHF8uW1QjpsVa0Vqfbw0RmH22DTNT/vSXifmAjGm5+znqD+pMOAYgsBg
UKyWI7RGMZOAec7nJy6bSb/X8MbVjksz/E+OTHwHx3JA9u8pN/VbDa9yOhPnt4Xp
8o+vxaGQOM5YQORmPxr+bs7S3EqhlMkH0G+h1sjbIN8a1g7ju44Uf0m/V3YJuLnR
IKb+JFlKafeiIIIEsRSv0RpaO/ElQZL2qmHYH99aeD7daPuaz/O61ouTQiXws+YE
GaZqu4TA0rLlnfDHjFE0iRBzS0I2F/ZD82r6mKklbx4f
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:55 2026 by rpki-client