Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PtuJC2KFDoZljYiEjsjrfQHanK0.roa
File: PtuJC2KFDoZljYiEjsjrfQHanK0.roa (raw, json)
Hash identifier: Js9tF6cJjaMIxIcuesBLiqFn+FgfhdpWZy+rCXslFdM=
Subject key identifier: 3E:DB:89:0B:62:85:0E:86:65:8D:88:84:8E:C8:EB:7D:01:DA:9C:AD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0D85C81A00CDB2DC493C3BCCE8BEF786E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PtuJC2KFDoZljYiEjsjrfQHanK0.roa
Signing time: Fri 25 Sep 2026 11:38:56 +0000
ROA not before: Fri 25 Sep 2026 11:38:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206092
IP address blocks: 151.243.155.0/24 maxlen: 24
151.245.16.0/24 maxlen: 24
151.245.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:5c:81:a0:0c:db:2d:c4:93:c3:bc:ce:8b:ef:78:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 25 11:38:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3edb890b62850e86658d88848ec8eb7d01da9cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a3:0a:88:f2:c0:e7:51:4b:6f:67:d1:b9:f8:
68:08:aa:30:15:d6:3c:fe:40:5e:13:19:a7:5a:aa:
90:8f:39:2e:31:24:c6:49:eb:bd:89:66:ec:c0:94:
34:24:d9:02:b5:7b:b5:8d:0c:dd:f0:e3:15:a0:39:
6a:b0:e6:29:a2:7c:68:dd:ae:ee:2c:f6:5e:17:cf:
25:e7:01:dd:8e:42:9a:e0:16:bd:43:d6:d5:58:15:
a4:87:a8:06:e9:c9:89:6a:91:72:8f:db:1d:19:01:
e1:e5:5e:0e:cd:e3:ed:da:d2:60:ff:75:e6:71:ee:
36:77:41:95:b5:05:5b:e3:63:12:2e:25:4d:c5:f0:
17:b0:ec:9a:2b:7c:8d:76:7e:4d:ac:4a:c8:e2:30:
0d:09:96:40:30:c3:9d:9b:d4:f3:fd:12:0c:c4:4b:
28:0e:9f:cb:68:33:45:58:79:c8:bd:72:72:b5:4e:
f4:d5:8d:87:ee:5f:d1:b2:d6:c3:d6:76:b8:12:c0:
4b:74:d1:51:55:d2:89:2d:8a:2b:f3:95:cb:b9:4b:
93:7b:f2:12:79:56:4e:05:8b:62:9f:99:24:c2:ba:
90:30:a8:62:60:e7:bc:e1:56:35:ce:4e:40:cc:ae:
ce:1f:50:a6:76:43:9d:cd:f4:75:d7:0e:bf:aa:17:
2e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DB:89:0B:62:85:0E:86:65:8D:88:84:8E:C8:EB:7D:01:DA:9C:AD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PtuJC2KFDoZljYiEjsjrfQHanK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.155.0/24
151.245.16.0/24
151.245.144.0/24
Signature Algorithm: sha256WithRSAEncryption
af:0c:d9:02:0b:b8:33:5f:be:8a:4f:08:56:0b:4c:9d:45:f0:
05:a1:92:88:dd:9d:4c:55:c8:e7:18:8c:2a:54:21:53:14:b0:
78:10:09:40:54:b6:84:f7:be:46:37:70:6a:42:67:7b:30:3c:
51:be:ef:a0:58:2a:aa:b7:1a:f8:5e:ee:04:02:e2:06:7b:4d:
2b:c9:94:e9:bd:c0:fc:77:d6:37:61:18:fe:55:dd:7a:b0:6a:
01:1e:2b:e7:e6:0b:ea:52:7b:2c:b0:c1:18:97:d9:c6:b8:4b:
7d:36:e6:74:30:3f:25:16:64:e7:ce:ec:15:51:a9:dd:01:b8:
70:5d:27:e7:b3:71:af:3d:8b:0e:e4:99:dc:28:a8:5f:c1:5d:
9b:95:fd:f8:eb:4e:29:fe:8e:08:1d:a7:3b:ac:eb:f3:97:65:
25:4e:58:b2:63:54:2d:7d:08:ed:95:f4:2e:77:46:f9:f7:05:
6e:9a:e4:bb:54:6c:e1:fc:ed:77:3e:c6:e5:1f:c6:9a:69:d6:
84:22:ef:7e:5e:bf:d5:48:d3:36:76:7d:2a:11:5f:63:1e:5c:
05:d1:f5:37:f2:bb:89:8a:f6:87:d5:01:5a:ef:94:2d:c2:9b:
dd:38:59:b6:fb:48:fd:85:46:87:64:79:02:89:49:16:92:7b:
f1:22:36:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:25:47 2026 by rpki-client