Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Pkia4YiNqHTYuGmek-iK34j921o.roa
File: Pkia4YiNqHTYuGmek-iK34j921o.roa (raw, json)
Hash identifier: BMWBMrSX7rCTryLQuauz+SV7LaxS7ubMSLPoYF9B4F8=
Subject key identifier: 3E:48:9A:E1:88:8D:A8:74:D8:B8:69:9E:93:E8:8A:DF:88:FD:DB:5A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A00052026E2C1E2D1980DBF422281B84A2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Pkia4YiNqHTYuGmek-iK34j921o.roa
Signing time: Fri 14 Aug 2026 12:49:29 +0000
ROA not before: Fri 14 Aug 2026 12:49:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 151.240.131.0/24 maxlen: 24
151.241.145.0/24 maxlen: 24
151.242.174.0/24 maxlen: 24
151.246.152.0/24 maxlen: 24
151.247.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:13:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:52:02:6e:2c:1e:2d:19:80:db:f4:22:28:1b:84:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 14 12:49:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e489ae1888da874d8b8699e93e88adf88fddb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:25:48:cf:78:2b:f9:31:1e:15:b8:87:5b:8f:
51:b7:56:a4:4c:39:4c:b2:95:70:55:8b:4f:20:c3:
5e:2e:69:ac:76:04:57:f6:76:a8:11:2e:7f:37:41:
69:78:01:28:60:b1:db:f2:08:85:c5:ed:38:f1:48:
99:98:a1:1f:c1:89:0e:06:65:0d:ab:77:ba:b8:cc:
b4:2a:05:35:4b:78:79:4a:5b:92:6b:e7:31:d9:91:
f4:0f:5a:7f:68:da:3b:1e:2d:b4:ad:6d:23:ed:6b:
d7:51:4c:a1:b9:9c:ef:17:6d:1b:46:b1:1e:b8:83:
8b:77:45:96:d4:50:62:5e:16:6c:94:88:a2:49:1a:
b1:17:55:1a:e2:48:89:f3:bb:d6:49:f3:f0:36:11:
86:d3:b4:bf:f6:e1:18:2e:d5:99:8e:a0:c7:e5:90:
9a:a7:f9:03:53:55:df:8e:97:69:05:8b:e9:27:a0:
4d:66:98:c2:32:03:9b:02:88:48:a3:c9:4e:73:de:
1f:76:bc:57:ca:7c:00:5e:7d:ea:6e:a1:cb:45:9b:
11:3e:56:86:39:6c:78:a2:89:11:63:67:00:83:79:
8c:16:c6:46:57:c4:9d:fa:f2:d1:b1:03:cb:1a:76:
88:3a:94:f6:ea:00:c9:f6:af:11:bd:e2:6a:9f:eb:
21:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:48:9A:E1:88:8D:A8:74:D8:B8:69:9E:93:E8:8A:DF:88:FD:DB:5A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Pkia4YiNqHTYuGmek-iK34j921o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.131.0/24
151.241.145.0/24
151.242.174.0/24
151.246.152.0/24
151.247.1.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:0b:f6:e3:b3:16:33:f5:3a:47:d3:b0:77:09:ed:9d:50:92:
1a:22:be:ab:fc:48:25:ef:ac:b8:24:af:61:ab:69:65:c5:20:
13:4d:a9:38:b5:13:73:08:17:03:56:4f:12:21:c6:9c:cb:c0:
d5:a9:d1:75:63:f3:ca:2f:1a:55:51:8f:e8:f9:b5:22:12:c3:
91:b6:81:46:65:61:2e:95:e0:db:a3:91:c7:ad:82:c9:78:b4:
aa:73:35:dd:bb:f7:a2:ff:33:3a:94:22:17:17:bb:f5:30:c4:
eb:79:72:a1:0a:c0:ad:6d:d7:ec:51:5f:6a:73:e8:38:00:24:
81:19:f1:96:f1:66:30:71:a2:38:07:b1:81:d2:c8:2b:9a:83:
9d:c1:01:29:e3:63:45:99:09:84:ad:d3:7b:df:f0:54:19:62:
87:e0:1d:62:ea:15:4a:9a:a4:62:a9:40:f5:aa:68:1b:3c:db:
43:83:68:fd:12:da:b0:dc:69:60:83:fb:39:47:be:71:ac:21:
f4:3d:c4:93:82:88:da:3b:3a:57:c8:62:22:ca:cd:8b:2b:cd:
e6:ba:7e:7e:26:f8:fd:0a:ba:5b:ef:2d:19:36:90:8f:84:e2:
4e:2b:6a:a0:ff:1d:14:96:1c:ca:8e:ab:f5:64:f3:8d:4c:7d:
f4:3a:4b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:34:55 2026 by rpki-client