Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PgKEG74eOIJj3SG_IMWE6fHzv5M.roa
File: PgKEG74eOIJj3SG_IMWE6fHzv5M.roa (raw, json)
Hash identifier: LsFlRhXZWiU2asIvjkuTIgJI6XrYpSR4WvdhAxywV8Y=
Subject key identifier: 3E:02:84:1B:BE:1E:38:82:63:DD:21:BF:20:C5:84:E9:F1:F3:BF:93
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0A0DEC34A4391C1EF872D69DC861B77D1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PgKEG74eOIJj3SG_IMWE6fHzv5M.roa
Signing time: Mon 14 Sep 2026 17:02:28 +0000
ROA not before: Mon 14 Sep 2026 17:02:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 151.241.136.0/22 maxlen: 24
151.241.136.0/24 maxlen: 24
151.241.137.0/24 maxlen: 24
151.241.138.0/24 maxlen: 24
151.241.139.0/24 maxlen: 24
151.241.164.0/24 maxlen: 24
151.241.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 15:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:de:c3:4a:43:91:c1:ef:87:2d:69:dc:86:1b:77:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 14 17:02:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e02841bbe1e388263dd21bf20c584e9f1f3bf93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:ee:e4:47:09:a8:75:18:cc:1f:ca:67:d0:
8c:a9:7a:f4:2e:cd:18:a3:a6:11:86:35:48:0e:6b:
5b:f3:96:f6:f6:0c:b4:7e:0e:55:ec:d2:86:b4:67:
f9:0c:fb:10:df:72:21:35:cc:5b:8d:fb:a7:99:70:
4d:82:22:6b:06:e7:64:77:82:0f:f3:58:21:1c:ae:
73:59:c0:dc:82:4b:26:1c:38:11:4d:dc:ec:91:a8:
1c:4d:c5:f9:e4:46:e4:08:14:88:45:2d:fb:99:ab:
d1:03:15:d0:0b:5d:d5:8b:71:9d:bf:45:89:f5:af:
df:68:ea:20:b9:e3:d0:47:11:3c:98:21:e0:8f:e2:
74:11:72:7b:ad:9e:d0:19:49:f7:d9:cb:42:20:25:
d0:4c:93:6f:11:58:23:af:6f:8b:5a:2e:7d:06:87:
ad:c4:7d:71:a1:f4:3e:05:bc:31:a8:a0:e2:6d:5e:
3c:97:ee:8b:54:66:d2:5c:da:72:a3:fa:0c:a8:3a:
91:f0:b5:19:6f:14:03:0e:04:68:2b:74:91:b5:25:
58:a5:8a:b8:c1:29:cb:9a:40:d9:85:21:79:64:63:
28:f2:87:f1:ce:2e:13:53:d9:83:1e:eb:a2:f8:bd:
83:62:08:0c:b4:82:af:52:83:e5:78:10:f7:91:99:
d6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:02:84:1B:BE:1E:38:82:63:DD:21:BF:20:C5:84:E9:F1:F3:BF:93
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PgKEG74eOIJj3SG_IMWE6fHzv5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.136.0/22
151.241.164.0/24
151.241.167.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:7a:e2:3f:70:18:7e:ab:3e:30:28:a3:3a:a1:07:33:86:82:
43:9a:1e:04:2f:c5:bd:9d:2f:f2:cf:96:0a:84:b1:31:44:b0:
34:60:cc:04:30:61:83:af:e1:12:5f:f1:c5:d8:ac:4c:ea:63:
6f:a5:ef:b1:d6:a3:53:cc:fe:ae:70:c2:50:f4:25:49:ed:cb:
69:0a:ec:81:04:38:f7:31:9c:9b:73:20:22:73:bd:63:c0:14:
68:16:a5:06:54:08:71:ae:03:34:92:6e:b7:8d:93:f7:9b:9c:
41:62:39:3d:32:d7:9b:dc:bf:7f:07:a5:3f:8c:8f:85:df:e6:
ab:63:b7:fc:c0:10:f4:ac:cc:0f:ab:07:02:b3:7d:0e:e2:c0:
c3:5d:94:09:cd:d0:d7:37:24:83:07:51:be:de:d2:ba:7b:fb:
3d:05:56:e2:54:aa:7a:3f:d5:d6:f8:84:02:00:cd:5f:4b:15:
08:56:c7:4e:62:b5:ee:b7:1c:09:1e:5d:45:c8:ac:ac:fd:36:
2d:a3:36:81:4e:91:42:7e:8c:27:dc:c0:dc:f8:1e:97:fd:55:
9c:4c:c1:39:a6:99:22:ac:96:68:58:f5:3d:72:a6:2d:63:33:
22:50:ca:34:b4:43:0c:b6:b3:de:fc:a3:70:15:c1:0b:ca:09:
70:09:16:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:06:05 2026 by rpki-client