Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PdDWnp2OFUeqOto1KvH56WvrW5A.roa
File: PdDWnp2OFUeqOto1KvH56WvrW5A.roa (raw, json)
Hash identifier: +EJ4QngcgcDxs13Gbk36R9AMFkl/Hjf/ELYL4a8hFds=
Subject key identifier: 3D:D0:D6:9E:9D:8E:15:47:AA:3A:DA:35:2A:F1:F9:E9:6B:EB:5B:90
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A11565F985C4A4712351EBD86EA2E43300
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PdDWnp2OFUeqOto1KvH56WvrW5A.roa
Signing time: Wed 07 Oct 2026 08:06:06 +0000
ROA not before: Wed 07 Oct 2026 08:06:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 37.202.194.0/24 maxlen: 24
151.240.227.0/24 maxlen: 24
151.241.207.0/24 maxlen: 24
151.242.105.0/24 maxlen: 24
151.243.7.0/24 maxlen: 24
151.243.152.0/24 maxlen: 24
151.243.154.0/24 maxlen: 24
151.243.197.0/24 maxlen: 24
151.243.228.0/24 maxlen: 24
151.243.231.0/24 maxlen: 24
151.244.54.0/24 maxlen: 24
151.244.167.0/24 maxlen: 24
151.244.180.0/24 maxlen: 24
151.244.222.0/24 maxlen: 24
151.244.224.0/24 maxlen: 24
151.246.161.0/24 maxlen: 24
151.247.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:65:f9:85:c4:a4:71:23:51:eb:d8:6e:a2:e4:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 7 08:06:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3dd0d69e9d8e1547aa3ada352af1f9e96beb5b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4d:13:67:f4:99:b8:e1:5c:0c:02:7f:58:e2:
c7:74:aa:ab:34:b7:cf:3a:0d:c8:9e:b6:26:5c:a6:
a7:4b:2b:f0:9c:23:55:77:61:6e:42:73:47:50:4d:
b1:a4:da:2f:d5:36:f3:da:14:33:31:f0:b7:8e:ed:
b9:45:76:fd:fb:1d:b3:47:a0:bd:d2:9f:7e:3d:58:
85:58:b6:74:8b:4d:3d:c1:30:b1:47:c1:52:3f:bf:
9c:39:5c:08:74:07:3a:4e:db:8c:7b:fc:b7:07:c1:
c7:92:d1:8e:e7:0f:6d:77:09:ac:4d:ee:b4:cc:a9:
3c:2a:ff:67:b7:d4:c7:50:58:33:c4:9b:17:f6:5c:
7e:02:e7:9b:37:f0:74:40:a6:19:83:cc:f1:93:9f:
11:30:9c:35:64:36:4e:50:39:ea:6d:5e:2a:27:cc:
80:a1:fe:90:e1:b4:19:4f:09:88:f8:6e:0a:d3:5c:
66:36:48:86:a2:98:2f:92:d1:b4:dc:e5:d5:7f:ac:
28:57:b7:42:74:d3:19:89:b3:50:78:e4:2e:5e:76:
29:29:41:51:a0:ca:fc:1a:15:93:ca:ed:31:43:51:
5d:0b:75:2b:a8:1c:27:fe:6e:ca:fa:87:a9:4c:cb:
19:cd:35:62:81:f5:27:fa:09:ff:eb:e3:03:71:b1:
0b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D0:D6:9E:9D:8E:15:47:AA:3A:DA:35:2A:F1:F9:E9:6B:EB:5B:90
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PdDWnp2OFUeqOto1KvH56WvrW5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.194.0/24
151.240.227.0/24
151.241.207.0/24
151.242.105.0/24
151.243.7.0/24
151.243.152.0/24
151.243.154.0/24
151.243.197.0/24
151.243.228.0/24
151.243.231.0/24
151.244.54.0/24
151.244.167.0/24
151.244.180.0/24
151.244.222.0/24
151.244.224.0/24
151.246.161.0/24
151.247.54.0/24
Signature Algorithm: sha256WithRSAEncryption
05:6b:74:c9:45:7f:7c:b9:8c:3c:95:59:62:02:bc:7c:21:5a:
63:dc:0f:11:cc:83:59:e6:26:6c:89:ee:04:14:e7:54:d3:e7:
bb:31:61:b4:59:55:9a:c3:93:c8:b6:37:b5:b2:0a:e0:e7:a2:
2e:31:bb:67:d8:33:cf:32:e2:90:6a:b8:d3:92:f9:18:6e:48:
71:26:99:09:35:08:e3:b0:9c:cc:8c:1a:5e:5d:f3:e0:fa:98:
c9:8f:57:7e:b3:03:7d:16:ab:ba:7c:68:f3:36:d9:6f:5d:05:
4b:1f:7f:82:6c:50:1c:e7:94:6b:0e:b7:b2:19:f5:b2:83:b1:
09:e5:57:d8:8a:bc:0d:e4:d1:19:f3:d5:aa:9a:29:2b:61:bd:
96:c1:22:dd:58:0a:77:53:27:a6:4b:04:58:b9:c7:50:de:a9:
a1:ba:45:79:db:5f:19:56:11:d6:db:1b:d0:a6:6f:86:98:91:
d3:9d:9f:2d:c0:a2:cc:c9:44:68:5e:4e:8f:0c:7d:93:7d:5c:
cd:7d:d0:04:f4:36:90:f1:28:8d:7e:5a:d6:2f:23:6d:1d:aa:
47:2d:88:d6:21:b7:7b:50:5e:fe:ee:74:46:57:aa:4f:63:7d:
7f:a3:e9:b0:b2:4f:ab:ca:68:9d:b3:1b:6f:94:ce:75:23:cb:
77:b3:b8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 05:54:21 2026 by rpki-client